From c724bb04cfe1c319fe35b0efdfc2a0428946b87e Mon Sep 17 00:00:00 2001 From: rcourtman Date: Wed, 4 Feb 2026 16:00:43 +0000 Subject: [PATCH] Extend proxy admin denial coverage --- internal/api/security_regression_test.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/internal/api/security_regression_test.go b/internal/api/security_regression_test.go index e3e0bc1f3..7ec097dc9 100644 --- a/internal/api/security_regression_test.go +++ b/internal/api/security_regression_test.go @@ -1943,6 +1943,9 @@ func TestProxyAuthNonAdminDeniedAdminEndpoints(t *testing.T) { {method: http.MethodPost, path: "/api/config/nodes/test-config", body: `{}`}, {method: http.MethodPost, path: "/api/config/nodes/test-connection", body: `{}`}, {method: http.MethodPut, path: "/api/config/nodes/node-1", body: `{}`}, + {method: http.MethodDelete, path: "/api/config/nodes/node-1", body: ``}, + {method: http.MethodPost, path: "/api/config/nodes/node-1/test", body: `{}`}, + {method: http.MethodPost, path: "/api/config/nodes/node-1/refresh-cluster", body: `{}`}, {method: http.MethodGet, path: "/api/system/settings", body: ""}, {method: http.MethodPost, path: "/api/system/settings/update", body: `{}`}, {method: http.MethodPost, path: "/api/security/reset-lockout", body: `{}`}, @@ -1953,6 +1956,9 @@ func TestProxyAuthNonAdminDeniedAdminEndpoints(t *testing.T) { {method: http.MethodGet, path: "/api/ai/debug/context", body: ""}, {method: http.MethodPost, path: "/api/ai/execute", body: `{}`}, {method: http.MethodPost, path: "/api/ai/execute/stream", body: `{}`}, + {method: http.MethodPost, path: "/api/ai/kubernetes/analyze", body: `{}`}, + {method: http.MethodPost, path: "/api/ai/investigate-alert", body: `{}`}, + {method: http.MethodPost, path: "/api/ai/run-command", body: `{}`}, {method: http.MethodPost, path: "/api/ai/remediation/execute", body: `{}`}, {method: http.MethodPost, path: "/api/ai/remediation/rollback", body: `{}`}, {method: http.MethodPost, path: "/api/ai/patrol/run", body: `{}`},