From 8284ae959cd38f0b8c8cb7b7b711699a21c68417 Mon Sep 17 00:00:00 2001
From: pascal-fischer <32096965+pascal-fischer@users.noreply.github.com>
Date: Thu, 10 Oct 2024 12:35:03 +0200
Subject: [PATCH] [management] Move testdata to sql files (#2693)
---
.github/workflows/golang-test-darwin.yml | 2 +-
.github/workflows/golang-test-linux.yml | 2 +-
client/cmd/testutil_test.go | 4 +-
client/internal/engine_test.go | 4 +-
client/server/server_test.go | 2 +-
client/testdata/store.sql | 36 +++
client/testdata/store.sqlite | Bin 163840 -> 0 bytes
management/client/client_test.go | 22 +-
management/server/account_test.go | 2 +-
management/server/dns_test.go | 2 +-
management/server/management_proto_test.go | 11 +-
management/server/management_test.go | 4 +-
management/server/nameserver_test.go | 2 +-
management/server/peer_test.go | 8 +-
management/server/route_test.go | 2 +-
management/server/sql_store.go | 22 --
management/server/sql_store_test.go | 302 ++++++++----------
management/server/store.go | 65 ++--
management/server/testdata/extended-store.sql | 37 +++
.../server/testdata/extended-store.sqlite | Bin 163840 -> 0 bytes
management/server/testdata/store.sql | 33 ++
management/server/testdata/store.sqlite | Bin 163840 -> 0 bytes
.../server/testdata/store_policy_migrate.sql | 35 ++
.../testdata/store_policy_migrate.sqlite | Bin 163840 -> 0 bytes
.../testdata/store_with_expired_peers.sql | 35 ++
.../testdata/store_with_expired_peers.sqlite | Bin 163840 -> 0 bytes
management/server/testdata/storev1.sql | 39 +++
management/server/testdata/storev1.sqlite | Bin 163840 -> 0 bytes
28 files changed, 420 insertions(+), 251 deletions(-)
create mode 100644 client/testdata/store.sql
delete mode 100644 client/testdata/store.sqlite
create mode 100644 management/server/testdata/extended-store.sql
delete mode 100644 management/server/testdata/extended-store.sqlite
create mode 100644 management/server/testdata/store.sql
delete mode 100644 management/server/testdata/store.sqlite
create mode 100644 management/server/testdata/store_policy_migrate.sql
delete mode 100644 management/server/testdata/store_policy_migrate.sqlite
create mode 100644 management/server/testdata/store_with_expired_peers.sql
delete mode 100644 management/server/testdata/store_with_expired_peers.sqlite
create mode 100644 management/server/testdata/storev1.sql
delete mode 100644 management/server/testdata/storev1.sqlite
diff --git a/.github/workflows/golang-test-darwin.yml b/.github/workflows/golang-test-darwin.yml
index 2aaef7564..88db8c5e8 100644
--- a/.github/workflows/golang-test-darwin.yml
+++ b/.github/workflows/golang-test-darwin.yml
@@ -42,4 +42,4 @@ jobs:
run: git --no-pager diff --exit-code
- name: Test
- run: NETBIRD_STORE_ENGINE=${{ matrix.store }} go test -exec 'sudo --preserve-env=CI,NETBIRD_STORE_ENGINE' -timeout 5m -p 1 ./...
+ run: NETBIRD_STORE_ENGINE=${{ matrix.store }} CI=true go test -exec 'sudo --preserve-env=CI,NETBIRD_STORE_ENGINE' -timeout 5m -p 1 ./...
diff --git a/.github/workflows/golang-test-linux.yml b/.github/workflows/golang-test-linux.yml
index d6adcb27a..e1e1ff236 100644
--- a/.github/workflows/golang-test-linux.yml
+++ b/.github/workflows/golang-test-linux.yml
@@ -49,7 +49,7 @@ jobs:
run: git --no-pager diff --exit-code
- name: Test
- run: CGO_ENABLED=1 GOARCH=${{ matrix.arch }} NETBIRD_STORE_ENGINE=${{ matrix.store }} go test -exec 'sudo --preserve-env=CI,NETBIRD_STORE_ENGINE' -timeout 6m -p 1 ./...
+ run: CGO_ENABLED=1 GOARCH=${{ matrix.arch }} NETBIRD_STORE_ENGINE=${{ matrix.store }} CI=true go test -exec 'sudo --preserve-env=CI,NETBIRD_STORE_ENGINE' -timeout 6m -p 1 ./...
test_client_on_docker:
runs-on: ubuntu-20.04
diff --git a/client/cmd/testutil_test.go b/client/cmd/testutil_test.go
index 033d1bb6a..d998f9ea9 100644
--- a/client/cmd/testutil_test.go
+++ b/client/cmd/testutil_test.go
@@ -38,7 +38,7 @@ func startTestingServices(t *testing.T) string {
signalAddr := signalLis.Addr().String()
config.Signal.URI = signalAddr
- _, mgmLis := startManagement(t, config, "../testdata/store.sqlite")
+ _, mgmLis := startManagement(t, config, "../testdata/store.sql")
mgmAddr := mgmLis.Addr().String()
return mgmAddr
}
@@ -71,7 +71,7 @@ func startManagement(t *testing.T, config *mgmt.Config, testFile string) (*grpc.
t.Fatal(err)
}
s := grpc.NewServer()
- store, cleanUp, err := mgmt.NewTestStoreFromSqlite(context.Background(), testFile, t.TempDir())
+ store, cleanUp, err := mgmt.NewTestStoreFromSQL(context.Background(), testFile, t.TempDir())
if err != nil {
t.Fatal(err)
}
diff --git a/client/internal/engine_test.go b/client/internal/engine_test.go
index 3d1983c6b..74b10ee44 100644
--- a/client/internal/engine_test.go
+++ b/client/internal/engine_test.go
@@ -832,7 +832,7 @@ func TestEngine_MultiplePeers(t *testing.T) {
return
}
defer sigServer.Stop()
- mgmtServer, mgmtAddr, err := startManagement(t, t.TempDir(), "../testdata/store.sqlite")
+ mgmtServer, mgmtAddr, err := startManagement(t, t.TempDir(), "../testdata/store.sql")
if err != nil {
t.Fatal(err)
return
@@ -1080,7 +1080,7 @@ func startManagement(t *testing.T, dataDir, testFile string) (*grpc.Server, stri
}
s := grpc.NewServer(grpc.KeepaliveEnforcementPolicy(kaep), grpc.KeepaliveParams(kasp))
- store, cleanUp, err := server.NewTestStoreFromSqlite(context.Background(), testFile, config.Datadir)
+ store, cleanUp, err := server.NewTestStoreFromSQL(context.Background(), testFile, config.Datadir)
if err != nil {
return nil, "", err
}
diff --git a/client/server/server_test.go b/client/server/server_test.go
index e534ad7e2..61bdaf660 100644
--- a/client/server/server_test.go
+++ b/client/server/server_test.go
@@ -110,7 +110,7 @@ func startManagement(t *testing.T, signalAddr string, counter *int) (*grpc.Serve
return nil, "", err
}
s := grpc.NewServer(grpc.KeepaliveEnforcementPolicy(kaep), grpc.KeepaliveParams(kasp))
- store, cleanUp, err := server.NewTestStoreFromSqlite(context.Background(), "", config.Datadir)
+ store, cleanUp, err := server.NewTestStoreFromSQL(context.Background(), "", config.Datadir)
if err != nil {
return nil, "", err
}
diff --git a/client/testdata/store.sql b/client/testdata/store.sql
new file mode 100644
index 000000000..ed5395486
--- /dev/null
+++ b/client/testdata/store.sql
@@ -0,0 +1,36 @@
+PRAGMA foreign_keys=OFF;
+BEGIN TRANSACTION;
+CREATE TABLE `accounts` (`id` text,`created_by` text,`created_at` datetime,`domain` text,`domain_category` text,`is_domain_primary_account` numeric,`network_identifier` text,`network_net` text,`network_dns` text,`network_serial` integer,`dns_settings_disabled_management_groups` text,`settings_peer_login_expiration_enabled` numeric,`settings_peer_login_expiration` integer,`settings_regular_users_view_blocked` numeric,`settings_groups_propagation_enabled` numeric,`settings_jwt_groups_enabled` numeric,`settings_jwt_groups_claim_name` text,`settings_jwt_allow_groups` text,`settings_extra_peer_approval_enabled` numeric,`settings_extra_integrated_validator_groups` text,PRIMARY KEY (`id`));
+CREATE TABLE `setup_keys` (`id` text,`account_id` text,`key` text,`name` text,`type` text,`created_at` datetime,`expires_at` datetime,`updated_at` datetime,`revoked` numeric,`used_times` integer,`last_used` datetime,`auto_groups` text,`usage_limit` integer,`ephemeral` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_setup_keys_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `peers` (`id` text,`account_id` text,`key` text,`setup_key` text,`ip` text,`meta_hostname` text,`meta_go_os` text,`meta_kernel` text,`meta_core` text,`meta_platform` text,`meta_os` text,`meta_os_version` text,`meta_wt_version` text,`meta_ui_version` text,`meta_kernel_version` text,`meta_network_addresses` text,`meta_system_serial_number` text,`meta_system_product_name` text,`meta_system_manufacturer` text,`meta_environment` text,`meta_files` text,`name` text,`dns_label` text,`peer_status_last_seen` datetime,`peer_status_connected` numeric,`peer_status_login_expired` numeric,`peer_status_requires_approval` numeric,`user_id` text,`ssh_key` text,`ssh_enabled` numeric,`login_expiration_enabled` numeric,`last_login` datetime,`created_at` datetime,`ephemeral` numeric,`location_connection_ip` text,`location_country_code` text,`location_city_name` text,`location_geo_name_id` integer,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_peers_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `users` (`id` text,`account_id` text,`role` text,`is_service_user` numeric,`non_deletable` numeric,`service_user_name` text,`auto_groups` text,`blocked` numeric,`last_login` datetime,`created_at` datetime,`issued` text DEFAULT "api",`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_users_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `personal_access_tokens` (`id` text,`user_id` text,`name` text,`hashed_token` text,`expiration_date` datetime,`created_by` text,`created_at` datetime,`last_used` datetime,PRIMARY KEY (`id`),CONSTRAINT `fk_users_pa_ts_g` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`));
+CREATE TABLE `groups` (`id` text,`account_id` text,`name` text,`issued` text,`peers` text,`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policies` (`id` text,`account_id` text,`name` text,`description` text,`enabled` numeric,`source_posture_checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_policies` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policy_rules` (`id` text,`policy_id` text,`name` text,`description` text,`enabled` numeric,`action` text,`destinations` text,`sources` text,`bidirectional` numeric,`protocol` text,`ports` text,`port_ranges` text,PRIMARY KEY (`id`),CONSTRAINT `fk_policies_rules` FOREIGN KEY (`policy_id`) REFERENCES `policies`(`id`) ON DELETE CASCADE);
+CREATE TABLE `routes` (`id` text,`account_id` text,`network` text,`domains` text,`keep_route` numeric,`net_id` text,`description` text,`peer` text,`peer_groups` text,`network_type` integer,`masquerade` numeric,`metric` integer,`enabled` numeric,`groups` text,`access_control_groups` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_routes_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `name_server_groups` (`id` text,`account_id` text,`name` text,`description` text,`name_servers` text,`groups` text,`primary` numeric,`domains` text,`enabled` numeric,`search_domains_enabled` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_name_server_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `installations` (`id` integer,`installation_id_value` text,PRIMARY KEY (`id`));
+CREATE TABLE `extra_settings` (`peer_approval_enabled` numeric,`integrated_validator_groups` text);
+CREATE TABLE `posture_checks` (`id` text,`name` text,`description` text,`account_id` text,`checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_posture_checks` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `network_addresses` (`net_ip` text,`mac` text);
+CREATE INDEX `idx_accounts_domain` ON `accounts`(`domain`);
+CREATE INDEX `idx_setup_keys_account_id` ON `setup_keys`(`account_id`);
+CREATE INDEX `idx_peers_key` ON `peers`(`key`);
+CREATE INDEX `idx_peers_account_id` ON `peers`(`account_id`);
+CREATE INDEX `idx_users_account_id` ON `users`(`account_id`);
+CREATE INDEX `idx_personal_access_tokens_user_id` ON `personal_access_tokens`(`user_id`);
+CREATE INDEX `idx_groups_account_id` ON `groups`(`account_id`);
+CREATE INDEX `idx_policies_account_id` ON `policies`(`account_id`);
+CREATE INDEX `idx_policy_rules_policy_id` ON `policy_rules`(`policy_id`);
+CREATE INDEX `idx_routes_account_id` ON `routes`(`account_id`);
+CREATE INDEX `idx_name_server_groups_account_id` ON `name_server_groups`(`account_id`);
+CREATE INDEX `idx_posture_checks_account_id` ON `posture_checks`(`account_id`);
+
+INSERT INTO accounts VALUES('bf1c8084-ba50-4ce7-9439-34653001fc3b','','2024-10-02 21:28:24.830195+02:00','','',0,'af1c8024-ha40-4ce2-9418-34653101fc3c','{"IP":"100.64.0.0","Mask":"//8AAA=="}','',0,'[]',0,86400000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO setup_keys VALUES('','bf1c8084-ba50-4ce7-9439-34653001fc3b','A2C8E62B-38F5-4553-B31E-DD66C696CEBB','Default key','reusable','2021-08-19 20:46:20.005936822+02:00','2321-09-18 20:46:20.005936822+02:00','2021-08-19 20:46:20.005936822+02:00',0,0,'0001-01-01 00:00:00+00:00','[]',0,0);
+INSERT INTO users VALUES('edafee4e-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','admin',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 21:28:24.830506+02:00','api',0,'');
+INSERT INTO users VALUES('f4f6d672-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','user',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 21:28:24.830506+02:00','api',0,'');
+INSERT INTO installations VALUES(1,'');
+
+COMMIT;
diff --git a/client/testdata/store.sqlite b/client/testdata/store.sqlite
deleted file mode 100644
index 118c2bebc9f1fd29751627c36304d301ba156781..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 163840
zcmeI5Piz}ke#beIMbfe*#>plVXQN$8iDR>oY?6`{$qU1kWjbrbmJ`Xwu3-ej5&1|>
zM9wfXL)k*G1!yP1Vu512XpTMf)I$&3Vu3d2JrzCdvA|x7_S#zy1+s_!=FPm}d*slP
z>)j$DzO>BYy!U(mKEL1l{ob45pPi3xTRzJ-9Jg)y`Q_A0DNRfLc|M;?rQW3f7wEru
zyg@Hch!Z+$((6$#-%MR}|8^=6&V3Weyqf!F`ZuQ^PG3n+P3NY*p4yq*o4PQ0LNh16
zPW?9Z75$^fyDz8pYiG5TW!Kqb@6#4_&@j8c!_SST>vTJwQ3{W*^yXg5=pU_Xy{kOi
zsy{Y5%=H}GY#C;)#yrpPoqc9|M%QDmVbzm!&ung2HttpOx3+FnewwcyT}?HAcPn2_
zuB>{Y8Z}leJlUDe=<Dm+=NrDc+hWNDl2db0pYCm3zg-#GR{jF@wwm|ZV}CJjHafM<
zHWOKUrnkrHAq<hm9(OF)^ex9W>ZVVk!Lx6**<!WkGJ0J%b`OQHNHKj`u4Q_DfR?%t
z7yfYj)}4**2l)>w55nFR7B}y1?cCemxV3dJUv2DjU3f;vG<?r!R`WOSZdY!-zZDgT
z+2yw@H!Itft<B0#o)66<vNYI2;e%XSH`Yg)NHR{Nl$`$3?o39%tZTig*n)x{c!Bvi
zUE3#{;pel%CNd}&8U;_Kp7zUE3s0|}%ILbTeffZ!0T<y<r&T3~Wfh%D)kJD_omQ+?
z%QL962Ud-7sMWmPZ8O)ZEmrM7tE|O%gHpOIZpaoA%&};C37zk@oZ5b%+qhP)@0QcF
zY)Rp<wWzjXd0sat9N1?5M&;(l{oD8Q3ueb!SgcyM&zh0#xvW8ut9hQr+=NU?*gx!u
z!5?jB5xa2mCzzVVwxC#>C@2iBa5}AD)khf|*P2n{hnd~!L38Rb)tvbGsbO;(loLLN
zN)MRR?UQN!yslZX#fC-q8Nngx=}~o)fLdvgQ22Q!!;SNo?Z`(_6}+CTYMeZ+dW3QE
zCPHuIF~8d}qy(!Y4699MY3w<kFB>3FY&wSHDPsG~wOLC^syVJOf+{c7X_<Zy#1yH4
zdK}L<pplWcQ=}gGiOF3nF*)o^VwTPPM~=I1nDx3#afhj+@D4qnwS&oOQD~z1w98zj
zACW-Eb?V)kugpw7#3;XQ+TDg(^Skaqd1fD2u4A{EO%6I#058|DTK%rbxa$-YTjp*b
zZJ=Mn^G&}SWRPF?7*nRXEKqZ7o7E^pNX|jd=RU&V5oV-}%RcQ|#L6%`H0%SDlpH&n
zU@~#95ZRKqCtH$7r_2r_s@%TRW*F5HM1pZ0(|@tf9wTR}bc-BfSamf1Aa?f6TFRx!
z;T{?_ryd(>KhyFL75&CJP3G_n#T`C}o8vQdIHDfk&1IkE=EB-3jM6MRd63TN*XFg}
z+1Llg(_Ido{lv_$Q|f0*!8UYI{j34k_w=0;8GU|U`%>r5sxQ}nHKn?(e#Ue7E_tFz
zA!kIS3(cIyt*ni@onT2+A4qlC0WC;nvn5lfg&8fo$YaDYFlk{`O$gCl&ulWIWwkA8
zJ1(7Iy3b)oePS<QOUqMf{r&k-AyaCi)PJ4coy_RVb6QV}tx7~<qwcg#%ND06hOJ3t
zMUtT%iA1uZu!3sgix0JoJ~yZRf?ORr5FsIs6RP!yWYu=WV)&@#anxqykHa&AJP2z#
zZoIOlHC&X_ajmvVZX;?`a)%<gSatI6R>SH$f008+;rB%ndHBJkF#brE5<~$~fN$AN
z>W1ZUpK4H)A+ri%$-s&*7UjPF7!LQ@1*DF|f-Y-zTc#Ur5)Lf($QWLS#?sM#km5(j
zY>x8!vGgYt?V}RIu^~yS)-tWO;;a=Zv(<7QjY34rUe~1UC<QVR;1YsXTwf?I7RKZf
zC?HzoK^#|YV0a=IE={EM&ACx?O_;Dz60atMeReAKz1bOh)^a;3`ojYRKmY_l00ck)
z1V8`;KmY_l00cnb_yl@?roDQ9=FZGa_Wn<1vS+eW*=#o0X74siwYB2f%F?cRxwy1a
zWA81kuPm=GEw8LzUM?0(joR{VxmaFVDixQC<$SqxrMz~fymE1Exma4i{BE&)rC2n1
z9VD}7uJAg_R7YtotfR#1sC~9@>%)aB3#DT5;_Ax9;>F^^;=&!%+o!Zkm)15mHm+V>
z_}Rmcx4!z--BfCtI;Q1*pQ1lJKmY_l00ck)1V8`;KmY_l00ck)1ioVg&QIPyd7KLl
z;r{;*soWpFV*^BYK>!3m00ck)1V8`;KmY_l00ck)1dc^ua&qQm`2PP~DwjJ}5eR_*
z2!H?xfB*=900@8p2!H?xfWSBq=-FCs=KlS+=5}^=ve|2Avf1O@MBgZHu2ojc*O!*p
zZeCtmxqNwf>H2c1vUKCd>gwj|`s!xo`t=*EVRl=7p1uvqW%QjL^u-hOX8+Psac!xz
zo-Y@#tgK!s)0_2+m)Dn9*UIJa{r=_UKxBQXv^HAg=vs>O>4GKxmoFCSQv~$)E`NUb
zG4B75gV|yXAOHd&00JNY0w4eaAOHd&00JN|nm};>AD{mp%?CLk00JNY0w4eaAOHd&
z00JNY0wC~hCve=){|E2?ryu>p0|Y<-1V8`;KmY_l00ck)1V8`;Kwyjs1o!{3{~u!o
zV`v}%0w4eaAOHd&00JNY0w4eaAV37L|A!fX00@8p2!H?xfB*=900@8p2!O!&6Ttp|
z{B?{Gf&d7B00@8p2!H?xfB*=900@9U@cI9V*?&#t>hy#M2!H?xfB*=900@8p2!H?x
zfB*=5+X?hupP0RW|J7`E=1lh5oma9mjg`h~ef7Qa(&}<!cd1ljwWal9eRZi=UMZWk
zQki}fZ}~Vs?$`C0`|#tDKcPoI;<vI?DpIxia_LHW?Miv&;@WcYa&a~M1wXT6_0DS4
zHND?8RyP}rt*{sEnptmK_KWo`xc@(q`-fES_w<AZ2!H?xfB*=900@8p2!H?xfB*=9
zz_)?Gg~|KcaV~631mFLEoXZT@|9>0Qiavk<2!H?xfB*=900@8p2!H?xfPg|E*#95r
zO$&Vge;h&l{-44ZCm;X<AOHd&00JNY0w4eaAOHd&FqQ=H{eNSrRtyRRKmY_l00ck)
z1V8`;KmY_l00a~Q*#9dyZ~_7#00JNY0w4eaAOHd&00JNY0%J)4@Bbf5wPH{p00JNY
z0w4eaAOHd&00JNY0wACe!2N#(2Tni$1V8`;KmY_l00ck)1V8`;KwvBh%;f$jHLLwP
zb^5<^|8n}Trhjw#;q;aC)O2p@>#3c|zn<KiJfZ!1;_K9JQ(w_Pdc6B`TEBKyOIdcE
zJ@!6rSw1t&uJ7=3qv<-`j%Sp@<14+nmooZC>ss$B&$jB1jSh1?$2MDrS*tP6Gkj;C
z*`5*n$f9A@L&SgDHj;aAW^=o;aj%lUwRNNN(|q;lu2%DRxAN8G%BmNt(SWLjCp)tl
zeSKZ~e8V?)TP(Ria%wK>)4h%Bw=2A@KWb$OdZ^|v(9o-SpFQ>$<1s|1w%KMPYtQud
zSUuF9NMnyXmTUT!V;gnTC(+>9x7uv6T5}n_t{c0DLRh4jzAV==JwLDo>Ox%j!|hvl
zHntz+Kd3widskT8yt}n?Z+qj`*1deSvCoaiGdiZ>dq%UGzj=4Na_jxAs6ecU{C4GL
zWxKMqS=q_+p?Rbx8f>AkJCo5b>soIrw$h-G7nrEiwSBTnem*;FB7<_FQSel%ykDLg
zIi1$8>Z9gOSWk%`W}aR>mC<!w`|<&|7@o+VPOJ97(^QQ~Ek;UnomQ+g%QI+P2Ud-7
zWYxUgZ8O)ZEmrM7XRO6|gHpOIZpiu%rhGKpg+_N<PHjKXTwE*HX3J?>wxrJ37F5k!
zp4SZu2bPz=QMtKs|MtE70{wXE!eZ63eb$UD%ViDHM>WsWn46F(3Hyf~G5DjcC}J1-
zq69;d*cKF95(Q&(njSQ#4pYsEpPw2wr$IU4W2p3iIo&>)*3avj6<cgrbf3|PNqTxz
z-6Wt^8YC2cp2={F`(-=wQB(!5C#zZ<Pdm!ucoU%m@tEK37*c}O5!TWsTQl|?&zG%=
zCpI0!@f5Lr=Gv^KB-I>OXtv5rby}w1aNM>cHBgV^83!~na!`uYBR?^@Yb7R!ok`5H
zng7Uf_YJdNcPX|pbrjyA=d*S&11$=FG)Z=utMnrh=(tY3Tl1Ca#)lZ?w@tg-Fl&C-
z9VpN21Iu;nHnYj6h6>>28dj^{6&ZJ(0&mOQ?V}C!Yk0otcY_Ra#U5kI+?54tj%~9V
zd39;V%lUlb8$2kClyTXoU5i*5W`~A-V3Lw!?-95+KGh>z^7dp)^5~S=K}40?m)Z;i
zQG!S?u46hS*4bm^A(d{CmkX<o#vg>czFAAT6gk{Oqvq6OL+xi;{-L7ZIH$=Ro}u`-
z=kQ&8h7Je8WBaZ`_E}*nti8k!ClAsY{o1_NI~)6;c)H7>v!9q5c1rzBDcFV%s-HFB
z`kuaXBBRgGYhUWzS@q@muclPD)z5ei-z85JDUOT?U!j@PxRvEhw-c;l>I11RJD^3c
zY_??Tw3eck5_ya`uqCa9stIwo>zPevw5+y8ZO5e(O!qm=s88$#Y-xEat-n7%YRMxt
zQR=@=?@ng)<vFdV#a1Q4t5J8_re%xM6T{XdvLeaQjzl6^QCLB>@WqE(MxUG0enGB|
z9Egw*#|hPXM6zl-V*Ps5iZ*I9^2gzsK^}xP9XDPK)50vu>9|(gB)1VYD!D@uT&z0z
zcdKFboxjMTqwxD8i9GyZQW$?EO9`R?DZsbvCUwK|xKA}G%8*$Fv1DMG7mIRVe+-BF
z>;h6pVnLTRyDig=*7XM#dt?kRE@SCv&q?v4V>U;5{aE@FiuO^7;n<KQRco16TXEKk
zl-X)Ik47P)wXAE>mX`vV2yh8OE3PjT7pq-z2^0`5@*s|@HZVMq3zsI+`sUoIxh725
zD2Z2-wA0Q8yX~3m?^1f|$Ej1L>0h1v<mA=tzh(Y1`!|`nscQN^PyEN^?1_J#_`B4<
zPnfA6=RTYLubID}{l}U4)Bi+;e;4l6#dGhqA7=EsC9Ss}Pu#$R@(l+KKSCZgPtk2S
zb76Qw4-1Kj!Q*4F0Us6_2p3O&HkZ*$CGCrIe6kPA52xf+2QVz4x`O_o;<+a6l<Ul^
zxmG9G7R%WYn0R`IfP_Tk2Bhg9`iEFN$#zY*wio#kZ`jO+jb?BgEo>uPfCO8=zT$?q
z)zYA!y&Ky6L0bPwX_RFSvo%V?Y4eRYGx~dHwcg3txadNYAFLbWEqa*n!(k&Dk__WQ
zm^@%CPtU!P(a)aMz6^~elnI~bRHKNB=jH1q{muwIMt)eF4k&S-v5vtjk`zrvq*ZT%
z^#txjRLEV6YC6L8hijI2J<vA2PrI~~4OXM^5}URMwEdS{@UU5_mD31=i*~g1_36UG
zQC?}Jfrap1U}^F0_n&nYGOE559)IxJ*^It%PV3FZ#?x_HR_)MmyR<Pfq7$nwr@lFC
zM{;(*P_&ztDkPJNtE?8DYI;ULcTW4F5^k*}LAk;=RO^znRA<w#I$BZ$vqhLgg0&25
zl(vqNFQOt8`FYrkor~vmUDC6tb=RuX9*vh$c0v?!eW&Kc8}p9i`f;J)#Bfc!8P{{P
z1L9+|NF`h`gBSApBUc@cC`H_Zt9ij?*&CJH6}pzYxv{gkaidar@Ab6)!MRZ`D5^I!
zhLU{tefzbH{v%q9o>46)=wg4ai}ufsFd0=^vKPu2a6eB@e~&LrpYHdKg``9adV-Mz
zl^o@Sp4UP`{gaJ*!9@n6w#RDwLa|3{F(MO9EZ#r$ifkVpX-mE+D@sP1EL?i^S&JG$
z#Rzpq4ZVKqFTzDl<CVd1F|_^&6J8tE*^p$YvB(dq7j>WOM#Yo2&+ypt`CDAMVTIxI
z%c^3dww^<+^3~Htx+xJ{FpT_zSWX7lDgGZWo`!vY0oVTA_l%P7o&3q}=X{V$>&E&>
zXF}u?Zg0^glce;QQYr1dKibWqgoahuFmOdpjvU{u`#GPS%jlObX}!sCNk4emRV;zx
z>#!Hp`8AXuVB+hp{^e<tmPNsZ$3idtc1C}{p!Et;5Re_C5(?yu^TW<Xb*WNG5f<d~
z<OXF|`DAh-qZbO=)96N`;+@rs&#B{8GgX_AjUZw9Aax+}C;#_opp0$cE}hiQvtz=K
z-b(9t3nQnW0wstHa-;9`PR(<Ky^pxzg!^r={Z`N3RuQV10m7qp^}_Ft+{PDr6ZwpO
z{=C-P<h`+Mx*XM_+Zg1jJ>}#rwJ%DZ&}O{Qmvd<&5nMy)iUs0u@Gju}|KbV;jvxR6
zAOHd&00JNY0w4eaAOHd&Funxv{eR=DTZ{|@KmY_l00ck)1V8`;KmY_l00aa9-2WFO
za0CGm009sH0T2KI5C8!X009sHf$=4P{r~vt79#@z5C8!X009sH0T2KI5C8!X00BV&
z@BbGha0CGm009sH0T2KI5C8!X009sHf$=4P`~TysTZ{|@KmY_l00ck)1V8`;KmY_l
z00aa9?EeJ`96<mCKmY_l00ck)1V8`;KmY_lV0;PS{r}^uTZ{|@KmY_l00ck)1V8`;
zKmY_l00aa9-2WFOa0CGm009sH0T2KI5C8!X009sHf$=4P{r~vt79#@z5C8!X009sH
z0T2KI5C8!X00BV&@BbGha0CGm009sH0T2KI5C8!X009sHf$=4P`~TysTZ{|@KmY_l
z00ck)1V8`;KmY_l00aa9?EeJ`96<mCKmY_l00ck)1V8`;KmY_lV0;M#@Bi0w-=ydd
z4-fzW5C8!X009sH0T2KI5C8!X0D<u%FsV(ZX7Ks{@lz~D1Ogxc0w4eaAOHd&00JNY
z0w4eag9NbuA0&cv5C8!X009sH0T2KI5C8!X009sfKLYst|M=+?BLV>s009sH0T2KI
z5C8!X009sHfk6V;{|^$uIS7CN2!H?xfB*=900@8p2!H?xj2{8K|9|{+iV=YT2!H?x
VfB*=900@8p2!H?xfWRPu{{>_kT=f6|
diff --git a/management/client/client_test.go b/management/client/client_test.go
index 313a67617..100b3fcaa 100644
--- a/management/client/client_test.go
+++ b/management/client/client_test.go
@@ -4,7 +4,6 @@ import (
"context"
"net"
"os"
- "path/filepath"
"sync"
"testing"
"time"
@@ -58,7 +57,7 @@ func startManagement(t *testing.T) (*grpc.Server, net.Listener) {
t.Fatal(err)
}
s := grpc.NewServer()
- store, cleanUp, err := NewSqliteTestStore(t, context.Background(), "../server/testdata/store.sqlite")
+ store, cleanUp, err := mgmt.NewTestStoreFromSQL(context.Background(), "../server/testdata/store.sql", t.TempDir())
if err != nil {
t.Fatal(err)
}
@@ -514,22 +513,3 @@ func Test_GetPKCEAuthorizationFlow(t *testing.T) {
assert.Equal(t, expectedFlowInfo.ProviderConfig.ClientID, flowInfo.ProviderConfig.ClientID, "provider configured client ID should match")
assert.Equal(t, expectedFlowInfo.ProviderConfig.ClientSecret, flowInfo.ProviderConfig.ClientSecret, "provider configured client secret should match")
}
-
-func NewSqliteTestStore(t *testing.T, ctx context.Context, testFile string) (mgmt.Store, func(), error) {
- t.Helper()
- dataDir := t.TempDir()
- err := util.CopyFileContents(testFile, filepath.Join(dataDir, "store.db"))
- if err != nil {
- t.Fatal(err)
- }
-
- store, err := mgmt.NewSqliteStore(ctx, dataDir, nil)
- if err != nil {
- return nil, nil, err
- }
-
- return store, func() {
- store.Close(ctx)
- os.Remove(filepath.Join(dataDir, "store.db"))
- }, nil
-}
diff --git a/management/server/account_test.go b/management/server/account_test.go
index c417e4bc8..4dd58e88e 100644
--- a/management/server/account_test.go
+++ b/management/server/account_test.go
@@ -2423,7 +2423,7 @@ func createManager(t TB) (*DefaultAccountManager, error) {
func createStore(t TB) (Store, error) {
t.Helper()
dataDir := t.TempDir()
- store, cleanUp, err := NewTestStoreFromSqlite(context.Background(), "", dataDir)
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", dataDir)
if err != nil {
return nil, err
}
diff --git a/management/server/dns_test.go b/management/server/dns_test.go
index 23941495e..c7f435b68 100644
--- a/management/server/dns_test.go
+++ b/management/server/dns_test.go
@@ -210,7 +210,7 @@ func createDNSManager(t *testing.T) (*DefaultAccountManager, error) {
func createDNSStore(t *testing.T) (Store, error) {
t.Helper()
dataDir := t.TempDir()
- store, cleanUp, err := NewTestStoreFromSqlite(context.Background(), "", dataDir)
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", dataDir)
if err != nil {
return nil, err
}
diff --git a/management/server/management_proto_test.go b/management/server/management_proto_test.go
index f8ab46d81..dc8765e19 100644
--- a/management/server/management_proto_test.go
+++ b/management/server/management_proto_test.go
@@ -88,7 +88,7 @@ func getServerKey(client mgmtProto.ManagementServiceClient) (*wgtypes.Key, error
func Test_SyncProtocol(t *testing.T) {
dir := t.TempDir()
- mgmtServer, _, mgmtAddr, cleanup, err := startManagementForTest(t, "testdata/store_with_expired_peers.sqlite", &Config{
+ mgmtServer, _, mgmtAddr, cleanup, err := startManagementForTest(t, "testdata/store_with_expired_peers.sql", &Config{
Stuns: []*Host{{
Proto: "udp",
URI: "stun:stun.wiretrustee.com:3468",
@@ -413,7 +413,7 @@ func startManagementForTest(t *testing.T, testFile string, config *Config) (*grp
}
s := grpc.NewServer(grpc.KeepaliveEnforcementPolicy(kaep), grpc.KeepaliveParams(kasp))
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), testFile)
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), testFile, t.TempDir())
if err != nil {
t.Fatal(err)
}
@@ -471,6 +471,7 @@ func createRawClient(addr string) (mgmtProto.ManagementServiceClient, *grpc.Clie
}
func Test_SyncStatusRace(t *testing.T) {
+ t.Skip()
if os.Getenv("CI") == "true" && os.Getenv("NETBIRD_STORE_ENGINE") == "postgres" {
t.Skip("Skipping on CI and Postgres store")
}
@@ -482,9 +483,10 @@ func Test_SyncStatusRace(t *testing.T) {
}
func testSyncStatusRace(t *testing.T) {
t.Helper()
+ t.Skip()
dir := t.TempDir()
- mgmtServer, am, mgmtAddr, cleanup, err := startManagementForTest(t, "testdata/store_with_expired_peers.sqlite", &Config{
+ mgmtServer, am, mgmtAddr, cleanup, err := startManagementForTest(t, "testdata/store_with_expired_peers.sql", &Config{
Stuns: []*Host{{
Proto: "udp",
URI: "stun:stun.wiretrustee.com:3468",
@@ -627,6 +629,7 @@ func testSyncStatusRace(t *testing.T) {
}
func Test_LoginPerformance(t *testing.T) {
+ t.Skip()
if os.Getenv("CI") == "true" || runtime.GOOS == "windows" {
t.Skip("Skipping test on CI or Windows")
}
@@ -655,7 +658,7 @@ func Test_LoginPerformance(t *testing.T) {
t.Helper()
dir := t.TempDir()
- mgmtServer, am, _, cleanup, err := startManagementForTest(t, "testdata/store_with_expired_peers.sqlite", &Config{
+ mgmtServer, am, _, cleanup, err := startManagementForTest(t, "testdata/store_with_expired_peers.sql", &Config{
Stuns: []*Host{{
Proto: "udp",
URI: "stun:stun.wiretrustee.com:3468",
diff --git a/management/server/management_test.go b/management/server/management_test.go
index ba27dc5e8..d53c177d6 100644
--- a/management/server/management_test.go
+++ b/management/server/management_test.go
@@ -58,7 +58,7 @@ var _ = Describe("Management service", func() {
Expect(err).NotTo(HaveOccurred())
config.Datadir = dataDir
- s, listener = startServer(config, dataDir, "testdata/store.sqlite")
+ s, listener = startServer(config, dataDir, "testdata/store.sql")
addr = listener.Addr().String()
client, conn = createRawClient(addr)
@@ -532,7 +532,7 @@ func startServer(config *server.Config, dataDir string, testFile string) (*grpc.
Expect(err).NotTo(HaveOccurred())
s := grpc.NewServer()
- store, _, err := server.NewTestStoreFromSqlite(context.Background(), testFile, dataDir)
+ store, _, err := server.NewTestStoreFromSQL(context.Background(), testFile, dataDir)
if err != nil {
log.Fatalf("failed creating a store: %s: %v", config.Datadir, err)
}
diff --git a/management/server/nameserver_test.go b/management/server/nameserver_test.go
index 7dbd4420c..8a3fe6eb0 100644
--- a/management/server/nameserver_test.go
+++ b/management/server/nameserver_test.go
@@ -773,7 +773,7 @@ func createNSManager(t *testing.T) (*DefaultAccountManager, error) {
func createNSStore(t *testing.T) (Store, error) {
t.Helper()
dataDir := t.TempDir()
- store, cleanUp, err := NewTestStoreFromSqlite(context.Background(), "", dataDir)
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", dataDir)
if err != nil {
return nil, err
}
diff --git a/management/server/peer_test.go b/management/server/peer_test.go
index 225571f62..f3bf0ddba 100644
--- a/management/server/peer_test.go
+++ b/management/server/peer_test.go
@@ -1004,7 +1004,7 @@ func Test_RegisterPeerByUser(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
if err != nil {
t.Fatal(err)
}
@@ -1069,7 +1069,7 @@ func Test_RegisterPeerBySetupKey(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
if err != nil {
t.Fatal(err)
}
@@ -1135,7 +1135,7 @@ func Test_RegisterPeerRollbackOnFailure(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
if err != nil {
t.Fatal(err)
}
@@ -1188,6 +1188,6 @@ func Test_RegisterPeerRollbackOnFailure(t *testing.T) {
lastUsed, err := time.Parse("2006-01-02T15:04:05Z", "0001-01-01T00:00:00Z")
assert.NoError(t, err)
- assert.Equal(t, lastUsed, account.SetupKeys[faultyKey].LastUsed)
+ assert.Equal(t, lastUsed, account.SetupKeys[faultyKey].LastUsed.UTC())
assert.Equal(t, 0, account.SetupKeys[faultyKey].UsedTimes)
}
diff --git a/management/server/route_test.go b/management/server/route_test.go
index fbe022102..09cbe53ff 100644
--- a/management/server/route_test.go
+++ b/management/server/route_test.go
@@ -1257,7 +1257,7 @@ func createRouterManager(t *testing.T) (*DefaultAccountManager, error) {
func createRouterStore(t *testing.T) (Store, error) {
t.Helper()
dataDir := t.TempDir()
- store, cleanUp, err := NewTestStoreFromSqlite(context.Background(), "", dataDir)
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", dataDir)
if err != nil {
return nil, err
}
diff --git a/management/server/sql_store.go b/management/server/sql_store.go
index fe4dcafdb..615203bee 100644
--- a/management/server/sql_store.go
+++ b/management/server/sql_store.go
@@ -911,28 +911,6 @@ func NewSqliteStoreFromFileStore(ctx context.Context, fileStore *FileStore, data
return store, nil
}
-// NewPostgresqlStoreFromFileStore restores a store from FileStore and stores Postgres DB.
-func NewPostgresqlStoreFromFileStore(ctx context.Context, fileStore *FileStore, dsn string, metrics telemetry.AppMetrics) (*SqlStore, error) {
- store, err := NewPostgresqlStore(ctx, dsn, metrics)
- if err != nil {
- return nil, err
- }
-
- err = store.SaveInstallationID(ctx, fileStore.InstallationID)
- if err != nil {
- return nil, err
- }
-
- for _, account := range fileStore.GetAllAccounts(ctx) {
- err := store.SaveAccount(ctx, account)
- if err != nil {
- return nil, err
- }
- }
-
- return store, nil
-}
-
// NewPostgresqlStoreFromSqlStore restores a store from SqlStore and stores Postgres DB.
func NewPostgresqlStoreFromSqlStore(ctx context.Context, sqliteStore *SqlStore, dsn string, metrics telemetry.AppMetrics) (*SqlStore, error) {
store, err := NewPostgresqlStore(ctx, dsn, metrics)
diff --git a/management/server/sql_store_test.go b/management/server/sql_store_test.go
index 4eed09c69..06e118fd2 100644
--- a/management/server/sql_store_test.go
+++ b/management/server/sql_store_test.go
@@ -11,14 +11,13 @@ import (
"testing"
"time"
- nbdns "github.com/netbirdio/netbird/dns"
- nbgroup "github.com/netbirdio/netbird/management/server/group"
- "github.com/netbirdio/netbird/management/server/testutil"
-
"github.com/google/uuid"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
+ nbdns "github.com/netbirdio/netbird/dns"
+ nbgroup "github.com/netbirdio/netbird/management/server/group"
+
route2 "github.com/netbirdio/netbird/route"
"github.com/netbirdio/netbird/management/server/status"
@@ -31,7 +30,10 @@ func TestSqlite_NewStore(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store := newSqliteStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
if len(store.GetAllAccounts(context.Background())) != 0 {
t.Errorf("expected to create a new empty Accounts map when creating a new FileStore")
@@ -39,15 +41,23 @@ func TestSqlite_NewStore(t *testing.T) {
}
func TestSqlite_SaveAccount_Large(t *testing.T) {
- if runtime.GOOS != "linux" && os.Getenv("CI") == "true" || runtime.GOOS == "windows" {
- t.Skip("skip large test on non-linux OS due to environment restrictions")
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
+
t.Run("SQLite", func(t *testing.T) {
- store := newSqliteStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
runLargeTest(t, store)
})
+
// create store outside to have a better time counter for the test
- store := newPostgresqlStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
t.Run("PostgreSQL", func(t *testing.T) {
runLargeTest(t, store)
})
@@ -199,7 +209,10 @@ func TestSqlite_SaveAccount(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store := newSqliteStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
account := newAccountWithId(context.Background(), "account_id", "testuser", "")
setupKey := GenerateDefaultSetupKey()
@@ -213,7 +226,7 @@ func TestSqlite_SaveAccount(t *testing.T) {
Status: &nbpeer.PeerStatus{Connected: true, LastSeen: time.Now().UTC()},
}
- err := store.SaveAccount(context.Background(), account)
+ err = store.SaveAccount(context.Background(), account)
require.NoError(t, err)
account2 := newAccountWithId(context.Background(), "account_id2", "testuser2", "")
@@ -271,7 +284,10 @@ func TestSqlite_DeleteAccount(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store := newSqliteStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
testUserID := "testuser"
user := NewAdminUser(testUserID)
@@ -293,7 +309,7 @@ func TestSqlite_DeleteAccount(t *testing.T) {
}
account.Users[testUserID] = user
- err := store.SaveAccount(context.Background(), account)
+ err = store.SaveAccount(context.Background(), account)
require.NoError(t, err)
if len(store.GetAllAccounts(context.Background())) != 1 {
@@ -324,7 +340,7 @@ func TestSqlite_DeleteAccount(t *testing.T) {
for _, policy := range account.Policies {
var rules []*PolicyRule
- err = store.db.Model(&PolicyRule{}).Find(&rules, "policy_id = ?", policy.ID).Error
+ err = store.(*SqlStore).db.Model(&PolicyRule{}).Find(&rules, "policy_id = ?", policy.ID).Error
require.NoError(t, err, "expecting no error after removing DeleteAccount when searching for policy rules")
require.Len(t, rules, 0, "expecting no policy rules to be found after removing DeleteAccount")
@@ -332,7 +348,7 @@ func TestSqlite_DeleteAccount(t *testing.T) {
for _, accountUser := range account.Users {
var pats []*PersonalAccessToken
- err = store.db.Model(&PersonalAccessToken{}).Find(&pats, "user_id = ?", accountUser.Id).Error
+ err = store.(*SqlStore).db.Model(&PersonalAccessToken{}).Find(&pats, "user_id = ?", accountUser.Id).Error
require.NoError(t, err, "expecting no error after removing DeleteAccount when searching for personal access token")
require.Len(t, pats, 0, "expecting no personal access token to be found after removing DeleteAccount")
@@ -345,11 +361,10 @@ func TestSqlite_GetAccount(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- if err != nil {
- t.Fatal(err)
- }
- defer cleanup()
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
id := "bf1c8084-ba50-4ce7-9439-34653001fc3b"
@@ -369,11 +384,10 @@ func TestSqlite_SavePeer(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- if err != nil {
- t.Fatal(err)
- }
- defer cleanup()
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
account, err := store.GetAccount(context.Background(), "bf1c8084-ba50-4ce7-9439-34653001fc3b")
require.NoError(t, err)
@@ -421,11 +435,10 @@ func TestSqlite_SavePeerStatus(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- defer cleanup()
- if err != nil {
- t.Fatal(err)
- }
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
account, err := store.GetAccount(context.Background(), "bf1c8084-ba50-4ce7-9439-34653001fc3b")
require.NoError(t, err)
@@ -478,11 +491,11 @@ func TestSqlite_SavePeerLocation(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- defer cleanup()
- if err != nil {
- t.Fatal(err)
- }
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
+
account, err := store.GetAccount(context.Background(), "bf1c8084-ba50-4ce7-9439-34653001fc3b")
require.NoError(t, err)
@@ -532,11 +545,11 @@ func TestSqlite_TestGetAccountByPrivateDomain(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- defer cleanup()
- if err != nil {
- t.Fatal(err)
- }
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
+
existingDomain := "test.com"
account, err := store.GetAccountByPrivateDomain(context.Background(), existingDomain)
@@ -555,11 +568,11 @@ func TestSqlite_GetTokenIDByHashedToken(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- defer cleanup()
- if err != nil {
- t.Fatal(err)
- }
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
+
hashed := "SoMeHaShEdToKeN"
id := "9dj38s35-63fb-11ec-90d6-0242ac120003"
@@ -579,11 +592,11 @@ func TestSqlite_GetUserByTokenID(t *testing.T) {
t.Skip("The SQLite store is not properly supported by Windows yet")
}
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/store.sqlite")
- defer cleanup()
- if err != nil {
- t.Fatal(err)
- }
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
+
id := "9dj38s35-63fb-11ec-90d6-0242ac120003"
user, err := store.GetUserByTokenID(context.Background(), id)
@@ -598,13 +611,18 @@ func TestSqlite_GetUserByTokenID(t *testing.T) {
}
func TestMigrate(t *testing.T) {
- if runtime.GOOS == "windows" {
- t.Skip("The SQLite store is not properly supported by Windows yet")
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newSqliteStore(t)
+ // TODO: figure out why this fails on postgres
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
- err := migrate(context.Background(), store.db)
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
+
+ err = migrate(context.Background(), store.(*SqlStore).db)
require.NoError(t, err, "Migration should not fail on empty db")
_, ipnet, err := net.ParseCIDR("10.0.0.0/24")
@@ -640,7 +658,7 @@ func TestMigrate(t *testing.T) {
},
}
- err = store.db.Save(act).Error
+ err = store.(*SqlStore).db.Save(act).Error
require.NoError(t, err, "Failed to insert Gob data")
type route struct {
@@ -656,16 +674,16 @@ func TestMigrate(t *testing.T) {
Route: route2.Route{ID: "route1"},
}
- err = store.db.Save(rt).Error
+ err = store.(*SqlStore).db.Save(rt).Error
require.NoError(t, err, "Failed to insert Gob data")
- err = migrate(context.Background(), store.db)
+ err = migrate(context.Background(), store.(*SqlStore).db)
require.NoError(t, err, "Migration should not fail on gob populated db")
- err = migrate(context.Background(), store.db)
+ err = migrate(context.Background(), store.(*SqlStore).db)
require.NoError(t, err, "Migration should not fail on migrated db")
- err = store.db.Delete(rt).Where("id = ?", "route1").Error
+ err = store.(*SqlStore).db.Delete(rt).Where("id = ?", "route1").Error
require.NoError(t, err, "Failed to delete Gob data")
prefix = netip.MustParsePrefix("12.0.0.0/24")
@@ -675,13 +693,13 @@ func TestMigrate(t *testing.T) {
Peer: "peer-id",
}
- err = store.db.Save(nRT).Error
+ err = store.(*SqlStore).db.Save(nRT).Error
require.NoError(t, err, "Failed to insert json nil slice data")
- err = migrate(context.Background(), store.db)
+ err = migrate(context.Background(), store.(*SqlStore).db)
require.NoError(t, err, "Migration should not fail on json nil slice populated db")
- err = migrate(context.Background(), store.db)
+ err = migrate(context.Background(), store.(*SqlStore).db)
require.NoError(t, err, "Migration should not fail on migrated db")
}
@@ -716,63 +734,15 @@ func newAccount(store Store, id int) error {
return store.SaveAccount(context.Background(), account)
}
-func newPostgresqlStore(t *testing.T) *SqlStore {
- t.Helper()
-
- cleanUp, err := testutil.CreatePGDB()
- if err != nil {
- t.Fatal(err)
- }
- t.Cleanup(cleanUp)
-
- postgresDsn, ok := os.LookupEnv(postgresDsnEnv)
- if !ok {
- t.Fatalf("could not initialize postgresql store: %s is not set", postgresDsnEnv)
- }
-
- store, err := NewPostgresqlStore(context.Background(), postgresDsn, nil)
- if err != nil {
- t.Fatalf("could not initialize postgresql store: %s", err)
- }
- require.NoError(t, err)
- require.NotNil(t, store)
-
- return store
-}
-
-func newPostgresqlStoreFromSqlite(t *testing.T, filename string) *SqlStore {
- t.Helper()
-
- store, cleanUpQ, err := NewSqliteTestStore(context.Background(), t.TempDir(), filename)
- t.Cleanup(cleanUpQ)
- if err != nil {
- return nil
- }
-
- cleanUpP, err := testutil.CreatePGDB()
- if err != nil {
- t.Fatal(err)
- }
- t.Cleanup(cleanUpP)
-
- postgresDsn, ok := os.LookupEnv(postgresDsnEnv)
- if !ok {
- t.Fatalf("could not initialize postgresql store: %s is not set", postgresDsnEnv)
- }
-
- pstore, err := NewPostgresqlStoreFromSqlStore(context.Background(), store, postgresDsn, nil)
- require.NoError(t, err)
- require.NotNil(t, store)
-
- return pstore
-}
-
func TestPostgresql_NewStore(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
if len(store.GetAllAccounts(context.Background())) != 0 {
t.Errorf("expected to create a new empty Accounts map when creating a new FileStore")
@@ -780,11 +750,14 @@ func TestPostgresql_NewStore(t *testing.T) {
}
func TestPostgresql_SaveAccount(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
account := newAccountWithId(context.Background(), "account_id", "testuser", "")
setupKey := GenerateDefaultSetupKey()
@@ -798,7 +771,7 @@ func TestPostgresql_SaveAccount(t *testing.T) {
Status: &nbpeer.PeerStatus{Connected: true, LastSeen: time.Now().UTC()},
}
- err := store.SaveAccount(context.Background(), account)
+ err = store.SaveAccount(context.Background(), account)
require.NoError(t, err)
account2 := newAccountWithId(context.Background(), "account_id2", "testuser2", "")
@@ -852,11 +825,14 @@ func TestPostgresql_SaveAccount(t *testing.T) {
}
func TestPostgresql_DeleteAccount(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStore(t)
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
testUserID := "testuser"
user := NewAdminUser(testUserID)
@@ -878,7 +854,7 @@ func TestPostgresql_DeleteAccount(t *testing.T) {
}
account.Users[testUserID] = user
- err := store.SaveAccount(context.Background(), account)
+ err = store.SaveAccount(context.Background(), account)
require.NoError(t, err)
if len(store.GetAllAccounts(context.Background())) != 1 {
@@ -909,7 +885,7 @@ func TestPostgresql_DeleteAccount(t *testing.T) {
for _, policy := range account.Policies {
var rules []*PolicyRule
- err = store.db.Model(&PolicyRule{}).Find(&rules, "policy_id = ?", policy.ID).Error
+ err = store.(*SqlStore).db.Model(&PolicyRule{}).Find(&rules, "policy_id = ?", policy.ID).Error
require.NoError(t, err, "expecting no error after removing DeleteAccount when searching for policy rules")
require.Len(t, rules, 0, "expecting no policy rules to be found after removing DeleteAccount")
@@ -917,7 +893,7 @@ func TestPostgresql_DeleteAccount(t *testing.T) {
for _, accountUser := range account.Users {
var pats []*PersonalAccessToken
- err = store.db.Model(&PersonalAccessToken{}).Find(&pats, "user_id = ?", accountUser.Id).Error
+ err = store.(*SqlStore).db.Model(&PersonalAccessToken{}).Find(&pats, "user_id = ?", accountUser.Id).Error
require.NoError(t, err, "expecting no error after removing DeleteAccount when searching for personal access token")
require.Len(t, pats, 0, "expecting no personal access token to be found after removing DeleteAccount")
@@ -926,11 +902,14 @@ func TestPostgresql_DeleteAccount(t *testing.T) {
}
func TestPostgresql_SavePeerStatus(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStoreFromSqlite(t, "testdata/store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
account, err := store.GetAccount(context.Background(), "bf1c8084-ba50-4ce7-9439-34653001fc3b")
require.NoError(t, err)
@@ -965,11 +944,14 @@ func TestPostgresql_SavePeerStatus(t *testing.T) {
}
func TestPostgresql_TestGetAccountByPrivateDomain(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStoreFromSqlite(t, "testdata/store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
existingDomain := "test.com"
@@ -982,11 +964,14 @@ func TestPostgresql_TestGetAccountByPrivateDomain(t *testing.T) {
}
func TestPostgresql_GetTokenIDByHashedToken(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStoreFromSqlite(t, "testdata/store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
hashed := "SoMeHaShEdToKeN"
id := "9dj38s35-63fb-11ec-90d6-0242ac120003"
@@ -997,11 +982,14 @@ func TestPostgresql_GetTokenIDByHashedToken(t *testing.T) {
}
func TestPostgresql_GetUserByTokenID(t *testing.T) {
- if runtime.GOOS != "linux" {
- t.Skipf("The PostgreSQL store is not properly supported by %s yet", runtime.GOOS)
+ if (os.Getenv("CI") == "true" && runtime.GOOS == "darwin") || runtime.GOOS == "windows" {
+ t.Skip("skip CI tests on darwin and windows")
}
- store := newPostgresqlStoreFromSqlite(t, "testdata/store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(PostgresStoreEngine))
+ store, cleanUp, err := NewTestStoreFromSQL(context.Background(), "testdata/store.sql", t.TempDir())
+ t.Cleanup(cleanUp)
+ assert.NoError(t, err)
id := "9dj38s35-63fb-11ec-90d6-0242ac120003"
@@ -1011,11 +999,8 @@ func TestPostgresql_GetUserByTokenID(t *testing.T) {
}
func TestSqlite_GetTakenIPs(t *testing.T) {
- if runtime.GOOS == "windows" {
- t.Skip("The SQLite store is not properly supported by Windows yet")
- }
-
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
defer cleanup()
if err != nil {
t.Fatal(err)
@@ -1059,11 +1044,8 @@ func TestSqlite_GetTakenIPs(t *testing.T) {
}
func TestSqlite_GetPeerLabelsInAccount(t *testing.T) {
- if runtime.GOOS == "windows" {
- t.Skip("The SQLite store is not properly supported by Windows yet")
- }
-
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
if err != nil {
return
}
@@ -1104,11 +1086,8 @@ func TestSqlite_GetPeerLabelsInAccount(t *testing.T) {
}
func TestSqlite_GetAccountNetwork(t *testing.T) {
- if runtime.GOOS == "windows" {
- t.Skip("The SQLite store is not properly supported by Windows yet")
- }
-
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
t.Cleanup(cleanup)
if err != nil {
t.Fatal(err)
@@ -1130,10 +1109,8 @@ func TestSqlite_GetAccountNetwork(t *testing.T) {
}
func TestSqlite_GetSetupKeyBySecret(t *testing.T) {
- if runtime.GOOS == "windows" {
- t.Skip("The SQLite store is not properly supported by Windows yet")
- }
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
t.Cleanup(cleanup)
if err != nil {
t.Fatal(err)
@@ -1152,11 +1129,8 @@ func TestSqlite_GetSetupKeyBySecret(t *testing.T) {
}
func TestSqlite_incrementSetupKeyUsage(t *testing.T) {
- if runtime.GOOS == "windows" {
- t.Skip("The SQLite store is not properly supported by Windows yet")
- }
-
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
t.Cleanup(cleanup)
if err != nil {
t.Fatal(err)
@@ -1187,11 +1161,13 @@ func TestSqlite_incrementSetupKeyUsage(t *testing.T) {
}
func TestSqlite_CreateAndGetObjectInTransaction(t *testing.T) {
- store, cleanup, err := NewSqliteTestStore(context.Background(), t.TempDir(), "testdata/extended-store.sqlite")
+ t.Setenv("NETBIRD_STORE_ENGINE", string(SqliteStoreEngine))
+ store, cleanup, err := NewTestStoreFromSQL(context.Background(), "testdata/extended-store.sql", t.TempDir())
t.Cleanup(cleanup)
if err != nil {
t.Fatal(err)
}
+
group := &nbgroup.Group{
ID: "group-id",
AccountID: "account-id",
diff --git a/management/server/store.go b/management/server/store.go
index 50bc6afdf..d914bb8f7 100644
--- a/management/server/store.go
+++ b/management/server/store.go
@@ -9,10 +9,12 @@ import (
"os"
"path"
"path/filepath"
+ "runtime"
"strings"
"time"
log "github.com/sirupsen/logrus"
+ "gorm.io/driver/sqlite"
"gorm.io/gorm"
"github.com/netbirdio/netbird/dns"
@@ -240,30 +242,41 @@ func getMigrations(ctx context.Context) []migrationFunc {
}
}
-// NewTestStoreFromSqlite is only used in tests
-func NewTestStoreFromSqlite(ctx context.Context, filename string, dataDir string) (Store, func(), error) {
- // if store engine is not set in the config we first try to evaluate NETBIRD_STORE_ENGINE
+// NewTestStoreFromSQL is only used in tests. It will create a test database base of the store engine set in env.
+// Optionally it can load a SQL file to the database. If the filename is empty it will return an empty database
+func NewTestStoreFromSQL(ctx context.Context, filename string, dataDir string) (Store, func(), error) {
kind := getStoreEngineFromEnv()
if kind == "" {
kind = SqliteStoreEngine
}
- var store *SqlStore
- var err error
- var cleanUp func()
-
- if filename == "" {
- store, err = NewSqliteStore(ctx, dataDir, nil)
- cleanUp = func() {
- store.Close(ctx)
- }
- } else {
- store, cleanUp, err = NewSqliteTestStore(ctx, dataDir, filename)
+ storeStr := fmt.Sprintf("%s?cache=shared", storeSqliteFileName)
+ if runtime.GOOS == "windows" {
+ // Vo avoid `The process cannot access the file because it is being used by another process` on Windows
+ storeStr = storeSqliteFileName
}
+
+ file := filepath.Join(dataDir, storeStr)
+ db, err := gorm.Open(sqlite.Open(file), getGormConfig())
if err != nil {
return nil, nil, err
}
+ if filename != "" {
+ err = loadSQL(db, filename)
+ if err != nil {
+ return nil, nil, fmt.Errorf("failed to load SQL file: %v", err)
+ }
+ }
+
+ store, err := NewSqlStore(ctx, db, SqliteStoreEngine, nil)
+ if err != nil {
+ return nil, nil, fmt.Errorf("failed to create test store: %v", err)
+ }
+ cleanUp := func() {
+ store.Close(ctx)
+ }
+
if kind == PostgresStoreEngine {
cleanUp, err = testutil.CreatePGDB()
if err != nil {
@@ -284,21 +297,25 @@ func NewTestStoreFromSqlite(ctx context.Context, filename string, dataDir string
return store, cleanUp, nil
}
-func NewSqliteTestStore(ctx context.Context, dataDir string, testFile string) (*SqlStore, func(), error) {
- err := util.CopyFileContents(testFile, filepath.Join(dataDir, "store.db"))
+func loadSQL(db *gorm.DB, filepath string) error {
+ sqlContent, err := os.ReadFile(filepath)
if err != nil {
- return nil, nil, err
+ return err
}
- store, err := NewSqliteStore(ctx, dataDir, nil)
- if err != nil {
- return nil, nil, err
+ queries := strings.Split(string(sqlContent), ";")
+
+ for _, query := range queries {
+ query = strings.TrimSpace(query)
+ if query != "" {
+ err := db.Exec(query).Error
+ if err != nil {
+ return err
+ }
+ }
}
- return store, func() {
- store.Close(ctx)
- os.Remove(filepath.Join(dataDir, "store.db"))
- }, nil
+ return nil
}
// MigrateFileStoreToSqlite migrates the file store to the SQLite store.
diff --git a/management/server/testdata/extended-store.sql b/management/server/testdata/extended-store.sql
new file mode 100644
index 000000000..b522741e7
--- /dev/null
+++ b/management/server/testdata/extended-store.sql
@@ -0,0 +1,37 @@
+CREATE TABLE `accounts` (`id` text,`created_by` text,`created_at` datetime,`domain` text,`domain_category` text,`is_domain_primary_account` numeric,`network_identifier` text,`network_net` text,`network_dns` text,`network_serial` integer,`dns_settings_disabled_management_groups` text,`settings_peer_login_expiration_enabled` numeric,`settings_peer_login_expiration` integer,`settings_regular_users_view_blocked` numeric,`settings_groups_propagation_enabled` numeric,`settings_jwt_groups_enabled` numeric,`settings_jwt_groups_claim_name` text,`settings_jwt_allow_groups` text,`settings_extra_peer_approval_enabled` numeric,`settings_extra_integrated_validator_groups` text,PRIMARY KEY (`id`));
+CREATE TABLE `setup_keys` (`id` text,`account_id` text,`key` text,`name` text,`type` text,`created_at` datetime,`expires_at` datetime,`updated_at` datetime,`revoked` numeric,`used_times` integer,`last_used` datetime,`auto_groups` text,`usage_limit` integer,`ephemeral` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_setup_keys_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `peers` (`id` text,`account_id` text,`key` text,`setup_key` text,`ip` text,`meta_hostname` text,`meta_go_os` text,`meta_kernel` text,`meta_core` text,`meta_platform` text,`meta_os` text,`meta_os_version` text,`meta_wt_version` text,`meta_ui_version` text,`meta_kernel_version` text,`meta_network_addresses` text,`meta_system_serial_number` text,`meta_system_product_name` text,`meta_system_manufacturer` text,`meta_environment` text,`meta_files` text,`name` text,`dns_label` text,`peer_status_last_seen` datetime,`peer_status_connected` numeric,`peer_status_login_expired` numeric,`peer_status_requires_approval` numeric,`user_id` text,`ssh_key` text,`ssh_enabled` numeric,`login_expiration_enabled` numeric,`last_login` datetime,`created_at` datetime,`ephemeral` numeric,`location_connection_ip` text,`location_country_code` text,`location_city_name` text,`location_geo_name_id` integer,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_peers_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `users` (`id` text,`account_id` text,`role` text,`is_service_user` numeric,`non_deletable` numeric,`service_user_name` text,`auto_groups` text,`blocked` numeric,`last_login` datetime,`created_at` datetime,`issued` text DEFAULT "api",`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_users_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `personal_access_tokens` (`id` text,`user_id` text,`name` text,`hashed_token` text,`expiration_date` datetime,`created_by` text,`created_at` datetime,`last_used` datetime,PRIMARY KEY (`id`),CONSTRAINT `fk_users_pa_ts_g` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`));
+CREATE TABLE `groups` (`id` text,`account_id` text,`name` text,`issued` text,`peers` text,`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policies` (`id` text,`account_id` text,`name` text,`description` text,`enabled` numeric,`source_posture_checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_policies` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policy_rules` (`id` text,`policy_id` text,`name` text,`description` text,`enabled` numeric,`action` text,`destinations` text,`sources` text,`bidirectional` numeric,`protocol` text,`ports` text,`port_ranges` text,PRIMARY KEY (`id`),CONSTRAINT `fk_policies_rules` FOREIGN KEY (`policy_id`) REFERENCES `policies`(`id`) ON DELETE CASCADE);
+CREATE TABLE `routes` (`id` text,`account_id` text,`network` text,`domains` text,`keep_route` numeric,`net_id` text,`description` text,`peer` text,`peer_groups` text,`network_type` integer,`masquerade` numeric,`metric` integer,`enabled` numeric,`groups` text,`access_control_groups` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_routes_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `name_server_groups` (`id` text,`account_id` text,`name` text,`description` text,`name_servers` text,`groups` text,`primary` numeric,`domains` text,`enabled` numeric,`search_domains_enabled` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_name_server_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `installations` (`id` integer,`installation_id_value` text,PRIMARY KEY (`id`));
+CREATE TABLE `extra_settings` (`peer_approval_enabled` numeric,`integrated_validator_groups` text);
+CREATE TABLE `posture_checks` (`id` text,`name` text,`description` text,`account_id` text,`checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_posture_checks` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `network_addresses` (`net_ip` text,`mac` text);
+CREATE INDEX `idx_accounts_domain` ON `accounts`(`domain`);
+CREATE INDEX `idx_setup_keys_account_id` ON `setup_keys`(`account_id`);
+CREATE INDEX `idx_peers_key` ON `peers`(`key`);
+CREATE INDEX `idx_peers_account_id` ON `peers`(`account_id`);
+CREATE INDEX `idx_users_account_id` ON `users`(`account_id`);
+CREATE INDEX `idx_personal_access_tokens_user_id` ON `personal_access_tokens`(`user_id`);
+CREATE INDEX `idx_groups_account_id` ON `groups`(`account_id`);
+CREATE INDEX `idx_policies_account_id` ON `policies`(`account_id`);
+CREATE INDEX `idx_policy_rules_policy_id` ON `policy_rules`(`policy_id`);
+CREATE INDEX `idx_routes_account_id` ON `routes`(`account_id`);
+CREATE INDEX `idx_name_server_groups_account_id` ON `name_server_groups`(`account_id`);
+CREATE INDEX `idx_posture_checks_account_id` ON `posture_checks`(`account_id`);
+
+INSERT INTO accounts VALUES('bf1c8084-ba50-4ce7-9439-34653001fc3b','','2024-10-02 16:01:38.210014+02:00','test.com','private',1,'af1c8024-ha40-4ce2-9418-34653101fc3c','{"IP":"100.64.0.0","Mask":"//8AAA=="}','',0,'[]',0,86400000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO setup_keys VALUES('A2C8E62B-38F5-4553-B31E-DD66C696CEBB','bf1c8084-ba50-4ce7-9439-34653001fc3b','A2C8E62B-38F5-4553-B31E-DD66C696CEBB','Default key','reusable','2021-08-19 20:46:20.005936822+02:00','2321-09-18 20:46:20.005936822+02:00','2021-08-19 20:46:20.005936822+02:00',0,0,'0001-01-01 00:00:00+00:00','["cfefqs706sqkneg59g2g"]',0,0);
+INSERT INTO setup_keys VALUES('A2C8E62B-38F5-4553-B31E-DD66C696CEBC','bf1c8084-ba50-4ce7-9439-34653001fc3b','A2C8E62B-38F5-4553-B31E-DD66C696CEBC','Faulty key with non existing group','reusable','2021-08-19 20:46:20.005936822+02:00','2321-09-18 20:46:20.005936822+02:00','2021-08-19 20:46:20.005936822+02:00',0,0,'0001-01-01 00:00:00+00:00','["abcd"]',0,0);
+INSERT INTO users VALUES('edafee4e-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','admin',0,0,'','["cfefqs706sqkneg59g3g"]',0,'0001-01-01 00:00:00+00:00','2024-10-02 16:01:38.210678+02:00','api',0,'');
+INSERT INTO users VALUES('f4f6d672-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','user',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 16:01:38.210678+02:00','api',0,'');
+INSERT INTO personal_access_tokens VALUES('9dj38s35-63fb-11ec-90d6-0242ac120003','f4f6d672-63fb-11ec-90d6-0242ac120003','','SoMeHaShEdToKeN','2023-02-27 00:00:00+00:00','user','2023-01-01 00:00:00+00:00','2023-02-01 00:00:00+00:00');
+INSERT INTO "groups" VALUES('cfefqs706sqkneg59g4g','bf1c8084-ba50-4ce7-9439-34653001fc3b','All','api','[]',0,'');
+INSERT INTO "groups" VALUES('cfefqs706sqkneg59g3g','bf1c8084-ba50-4ce7-9439-34653001fc3b','AwesomeGroup1','api','[]',0,'');
+INSERT INTO "groups" VALUES('cfefqs706sqkneg59g2g','bf1c8084-ba50-4ce7-9439-34653001fc3b','AwesomeGroup2','api','[]',0,'');
+INSERT INTO installations VALUES(1,'');
diff --git a/management/server/testdata/extended-store.sqlite b/management/server/testdata/extended-store.sqlite
deleted file mode 100644
index 81aea8118ccf7d3af562ddece1f3007f1e8fc942..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 163840
zcmeI5Piz}ke#beYMN+aQ#_=W-C(-UmiDMI%Y*LhD$qU1kW!f=p%ZX%R*D!+Nh<v0b
zB4_BCp==@80<;rju|ToAXpTJ;D9}R>yTukw&U@-<(bEEZE!smbz2#6Km;T<HKb#?l
z7F{Q;t^Lw8$$9Vh-n{qu{oe2Q-kTA*`SC5?VM@)knwp~&6R#yCDe)JIl1L=prT=H>
zzyElfJ{<86=v@kZ9`y0u#5wD4N4aqJTQ2iP_S^B_9lJk%F*Q1#9sPQAGr2Q*CV52C
zM!rt`KJg{}qsQ6TQ}X4LQbISX?2-MTK@C*3wquH8wQia1maP`t_Y<9|*V6LGD^ll@
z$kwZm)E2XB)6g2KR;e)CRvmMf8MfNCnWgI0_}t@b8>Q8|CFREY)zVLu^1;=Vl{@Q7
zIli*;nX-4Xa_;fwWLjQXkv?B_wCx6qFA$%a_1biI^~$Z%z;h{QsI_IqVUL{I;I!VM
zp*5MGwWHZPtm?w>)7YbyZfTBg8fsN@NR+=idXvqTD;A^ARdsvc7xq&$CoI>{Y=@(z
zCIp2)+PHChb>p6LvvkjGU2b;m&idxvjny0Lca?H&SLni4Tbk<FYQ3ynyR%Wcaedt@
z5U^7=O4mvorS-MarXsp#6ItqPE_XAVlGT+#CK8WREySn4wmp%S7iFn48dwl-fz8dw
zY#R>Qj5wa`H<4aB*C<3PwX|EloO^QVXj+zK>FGUT20}!<9E&R1EgR8ks2WeLme~l@
zs@p0xc2BP`0ky0c?IyGI%52%-T4fC;P8doLi>qM^;bY7jUcSz^8)jvf>o%xW=(}Oo
zbt9zkz*?fVq1$$w7v{F9TrFK&-MV#GnbBJM%xqaV99H*i&tf%#TvkLHvtlws!p?rn
z@BG1b=CN}Je~hVx*ybYE<`?u0E_W;?Uy=tIoY0zD5N{LP<Gtq8Vo`Gv$4C3ksaMYT
zF;u$8oNkS!<kPaG2NvrV-DL!aq{j!<O#;zMc|z{z>9jD;Up74-MOBD;GEw6cY2^cq
zQ=G!}MmBTWEj5&&w|v8Dl3A)drtO3cP$bq()wCmGyUa3JBa&1xE#C;rqExG)IXs9(
zq<ZQxZFP@&M&2$W_0Wk;ZtJnhZewDz4CXvEtzA{CRxOG<EZPfu-*#A&4_2K*6OE^B
zW<}cJ3A8M;+O9Z}ktw?9<u^5>UDGN~+v+LLj6K~ljV3e5LAweN<!XAP+mtZwDh0)c
zw%tX`^{d*B=CpYR`E{GI$S@BJR7}HQ6$%j{=Mc^pK0*}{W}uA49<+60rD`qe_MS#c
z4jc_1Ou{R8wq);wEy<=sX7Gp_K7Z((Zd8jA;r$xYf3emMBWD_E7CA(>YOnu1c6QA=
zluMDr+E*)PH89j}rta)V^c&>VnJF?N?(jL>oEV|~5p{SsmwA?(b8DwCN~36OFO`-r
zPfMMXfe#9XdpLA<6Vv@pshb%JwyuNfX7#wfCm$S1%hS`+Q&~8xu3Y!iXw+?WGoHhD
zg$GI~<P3;(u9;K6BXgs6i%*HFJ*gJkqX}u)Y{}GVVn)+0@)$u3jGI`MV?uP>*6K`c
z=uMr@9h8nS-RCf)F0mJ|rQ&ExzCJxDWQI;r=zdOZC)09qO6o{~Rr!%vt(r|uH~hmR
z{nq4Xd6KRj`H5sjZUyDs7avJ!d1^}f1-UwMAijkEJ`%MaKRIeU{$%)|>9KcC&mX%-
zDtQoAH?3f1O>;Oer)B9)jogNJ(vUm!gNt4z|E|~cuJiYE=-v1GeiC{3-Xu5vge-+e
z0aAdY8+B@iZVR8PQj{UH;<2P>Mi__+Uq6JyeRhFRLjpmI)!Plt@)ikuI(w-0&qD)g
zZ#_uyqovgcdHq28Q;POpiT>CSCsk=^dNbmzBT`zUVLlv$h^D=kM$1tOWPX5)30gsY
zuDCxjCYL|~Q6~>#TG12q59HkWk(9hPHE68)Caf0xPf5PcP9%OXIYF;d_G*Hjcz^&1
zfB*=900@8p2!H?xfB*=900=yTKxajIV{78})H`EaKbgoJ&x~d=8NROGt`#cF`Q?SV
zZEZ0>w@_gh=2jMpD|5w#rNv@CU#L}z+w=MPg}Fk0E<djnmM-QC7mLg1<_na$a5g`G
zF`svs?VPKaP1+dRqg^9SR7pj4v;|S+JXKj(cB?FiDl4DO-1unb;tW-CZfW6M{#<@$
zcILKb?^4?N^UJHNtCud#{OtZG>tFu*P9iZ*?Ub^AO3)Jz5C8!X009sH0T2KI5C8!X
z009sHfme*c>EzbfF#8Yg`v03m_M2C%gJ>=YfB*=900@8p2!H?xfB*=900@A<GYK3`
zPL28Z74Z8MMkf9)G5JS&!2<+900ck)1V8`;KmY_l00cnb|C7Mu^CQ`<t*wuzHa9mj
znafj|%<BBwa%pM)%3N{z+Tz^8;$m^`O0iIyyLxqLX>Dm`X{~f+ZJ3L{!_;$4Yd4&I
zg}%f`d8j)(3Vo}T!XD{1|Gof4{3X4`=qo7bdlcwa_QG6#d9JXc%;zsIEM1(Zd(ZQW
zE5)Vd`FZzl_W2?gS(z&=4;DGNmOR}aKPR3_K2P_^)AOu&y+5OESE@6gJU%0FV()px
zE)7NO%6CNU%2ih5%s8@_2~DNOY7guS`6c_ouEFYyEA{#M%qRT%|48<?bpJoS-~j?4
z00JNY0w4eaAOHd&00JNY0wC}*5IB?El7`u}8R7T;4<UF3>;IQQt!M)XfB*=900@8p
z2!H?xfB*=900=|~@b&*N_bG_=|1g65{(t(>KRiGH1V8`;KmY_l00ck)1V8`;KmY^|
zF#&%4AM5`^tYCBv1V8`;KmY_l00ck)1V8`;KmY`Y0M`F70}ucK5C8!X009sH0T2KI
z5C8!XIQ#^#{y+RWMh`&%1V8`;KmY_l00ck)1V8`;KtTNd-{e0fvg`DM2MB-w2!H?x
zfB*=900@8p2!H?xygURtZ;ecDZM~7nOdQW#zI`GyQCp}jRhKTz&n*>e+jE5itIVzB
zt4nkF`Gt9{QkbXT3oH)vU3hJqS@%B~`0Il7`-Tg1g*;WO6qYXL3m1#a=jIFfr3=gM
zj~i+&y>niorpeT_OK#IxRjV<!z+SXzTD7Sg_h<Tl!>>rc;rAjf#`pifJcf;yfB*=9
z00@8p2!H?xfB*=900@A9M}U9-|1jGf;`{%H*?hqIAGQSoAOHd&00JNY0w4eaAOHd&
z00J)^f$!z_|D^0X-T(j6^%V^Q0T2KI5C8!X009sH0T2KI5CDOflmOlTKen|sarW{X
zmoKkWKP@iX#l>gc`ajI2{7v&V`%v55DOK;9H`zM<6+)5z1YvIef|Ac)6wkBbmH+jE
zn^~C47kV=NQhgcx`oEO@Q-Yp&fB*=900@8p2!H?xfB*=900@8p2)tqhPA9j<hS`C@
z`u`PEESd`fAOHd&00JNY0w4eaAOHd&00JQbeEmPn-39#n|C8CtME0xfHof5i0w4ea
zAOHd&00JNY0w4eaAOHe?1_U;enZ>QsCyr+(`oC#^zCO%v2&_J2w%KIYEwkO4r(XoP
z|H;P4;5v)XU1vem`JqI0o``Sf!f<sq8lonC{Xd!gim(6wHT$1`1}a7uK>!3m00ck)
z1V8`;KmY_l00cnbl_Bs}a#4!gp-9GO6zd~$a&fG`#6o={``?L4={JdE-(>&g*ssQa
zckKT7#nk9{cJ%Af&E#Jvcale>-;8{n_<iC_`bUqmucze8C#8gLRM{i@K|^<#s<j<c
z9IJJ{?P040_x(g?>b11|@ru;BB(nADBelgW+cdO>s#Pk?wpGX6WrnTtFE3E_s;hwS
z_Z;ypIKH+~TD@CRZmeG|{ZuI*+|;siXI&}BS5`h#_BvF~J>Hy5%PT9==c|sk-C*$r
z;#0F;o9?b&xm6P9`c5m0(L-4|LtQT`4twOx27T}j4Xw%itR2nXVO3Xqej0n!(k;!=
zO+&3}4vF$tM{ly(a>ZiwxvFmO`@(*T=7i-Mn(c5~pe6)`Kiar)dv)WUa<g>LZC!45
z?aun<-Hp{7>vxrMZC4nNt+q7PvDJE6xprrxbmRKES0GS?vQfHL+9<8Bl{OX8HJj8#
zoz3O8C(`nwEOkZ$E9Hf3ZlY$}aL6vj@npY=^vbzLAyTRGZh1P%v6OsC9yD&;dJ5ug
z;>o3>X<3$~r}u=#h(z&nENTxTEvm8589k+0W+PCVZmZO<J-xyNva({do6OQHvt@(p
zj5U}zVJJN;u7>r`hrBo1eT{B6%*rm;Tu`gfX2Y!OMo683Ekrf1+jg55=9Z^iEnQpP
zx^-8Xp)Jap*|KgptnOKs#cHIFvLe!$6_XhfcJ^C-=MT0bkDcp_Vhkz7HW#razhGca
z<Gtq8Vo`Gv$4C3ksaMYTF;u$8oNkS!<kPaG2NvrV-DT8ck{%yaHwi>5<q5f;r_;jX
ze%bVV6jdSW$wVzqq#a~&;uNj}v6<6usi6eD<y%XWY)#!UZ6|D1BC&3&rX3O6WtPDj
zk)(=g`I;?@QmuyO)J&@xk?N_(wADT889Atk)I%pWxvj@0yN!v>GMMwww02dkTD2&)
zv1l*secNG8J_2<Le>6z8nH6b=C(yFYYP;e@hMVZ3m*3Qkc1^1|ZL6m|Gxl`LG@8sH
zpXw?=l&k5DZd1azs}y(}+IAN$*RN_jn$zYP<ce*^B4al!P%#aIRmiJ{MtnG54184t
zg@G~_d(hU2m8!L<+j|-*Iq)9by@{dj*^<2zwj`SlnZYA!`23-Bx`8N0g!gMmr^H%2
zj67tdS>)y1s=fa6aMv~KP%cFdYhSIH)xc1@nYyzd(QlAbXQs%A__*irU1Egx2f?9z
zS1$9cFy+=>5N~69skD4~TI!q(d{8jl!=baAnC^E<-ONz1bsbbUtH<>{`QS)eo}QMT
z%EDQ7<+`6nqi(C4@f^M@JWxV$WI*_G&7Arjna;FZd=^vfNwwG>O?ty-OQue9DViyf
z#|Q#j++3&}6L;ITR%dEMZ|ZdJpmdDsK8G1~iM@a=6-QI@_31%Vp3o@@-Os7*WLhpx
zNgXM$DnGocRkNw-hJSdZ-<td^Ptvs`Kas4+t)QIy;v*?7Pfba`AXi5Y#Fy~jN21o_
zCr53^pT8b7qxH_|`D6D;B@e>trWH(vX=3K(v@E@;k=yW28ghqzaM7#e-}Rc_b^d-1
zz59OOPa+TBo8-oykfrb_KnielqfX7xZQ)Z@iZWzYJeKrK^8!)f>xXc-&n^&ZNFZpj
zdb^=n-n@QKXAjl>$z>qztvM-vw6yvluOCQ%O3~gc(H|S)q$&+fZ$_MTL`rKk%!h*z
z(OlNjXvs@~%nxueK`W@w758Vm<Ps<#>f}L8D|&+dft))(l9Jb^28}h}gw=xoDM>5s
z3}0<eWd4wl6CWmy7RG-)_UYKA%pcQ#mHC_W)Mz>NA4mQ@IeFx(k-ty;+lZF<F#Fl$
ze@*<u<UdYKANyx2{0Dcf?!R{4{83uIQ;<3<!NBDnR4h2C`yO)d^c3CtGiUk-bia^4
zFhqRh3-ErCo^bK_XH#jpP>{YjB?f!He1D1(bpZVWQCHCIR4~>;E9EM)E0*5k%i?gh
z2PPPvE+AjRa|5B_@A`*8JkEACtFq(y5xd{a`i-V{8SUGKI|1QKzpmo?merw7KYKN_
z_QRC?lfod&>}RVM`qQRs@22GoC#B9<U|h7(<nVc8utawge$;P7eUffmaFctC<;khH
z)AGra(o@%1Tp9OuDryv7aV5N8(rt{dN6!!YhdoN%Wvr!&ib9H}BB5DtjP-DL;#VkK
zOVo6H*YD0*g84vGvmdl+D$8f1!4#X82ekYTx!``YidIfN<ePRh^>t`t;UKRx(7;@H
zFEF(@`_8j=A-(Dg?)wivJDHYOPf4Arz<63_L$B<sR+|<^s&}AQ!>RA~+fg{XTgY2Y
zhbknK3aTvUo=9?9K6Og^qU0{ELxSN7-;P>WI4kOGx>b8q3O-tVbBM8)evQ)7G31M=
z2t|GoHUsBkn{A8q?AN-jS80tVN<~&e6mcE1Vg?KImT5UbA%37*no$qxIoJV-zUibA
zp_tx{yl&5<4#zJ=-1%-E-<G{vx>cgR+_lxswbiSo+=aJN^379&T##3<YYc_((L2VQ
zY5B)A89g4g9Nxt4SohC=a)8N1r9<{Y89naj@v$F>iRqKwuCb7me+D_mNO&a&IicsZ
z5Lf?X<2K)9P%AsEvg<4MU@dxNyn!X!7u}KVq9bjEH)Z{jo+fkW-+0!f#;2mXI-?W4
zb@VUYNlooUZ@B22f4B*6_Uo)q($$#f2cw(1&vl{V@%zU`Z29~>p<K5@_x1ItV!d-c
zhg!qCr?YfXf^Qgl{=uJ4@_mZ`gUwU7?JwZkpZl6o{I!$s?Rw75Y)V#F209ZWA9Hz&
zwoKyEU!(8dzVMx09Ev${)HU?%sD&fPt93o+(^F~r{CTO9bf@&a+phi;DA<QR6CGcD
z`5cp&cXhX?HJTRjjmKOk^?q8uo|8JcP!I?^#z-g#XPoYLE>V{nD(Q!XaCvfrVORM$
zIg^%iIq8XaAu-~eqZOZu_BWatwTZA1#7rMT4e<QQ|2`T-`qp!mE_9w}$Allhmy++~
z1`fXn6doDEC;gyvbXp+nd@KydU2pr#@95F{QH0S<j_{yWz3+DiF5`2Z5hX33J}q_D
zL~C?|wxj5-d_Fs~BM0wA+Y-t1wHZwG!@0DO;Cl#de}dQ_ymRjT|4-@r|Fgf%KJ{1g
zcn1Lx009sH0T2KI5C8!X009sH0TB4^37ko8NyB`*Kyp~Y5&r#u!_>&X|1UxNka&Oq
z2!H?xfB*=900@8p2!H?xfB*;_UIP63Ki2<;SHI{P2!H?xfB*=900@8p2!H?xfB*<^
z0$BgU4nP0|KmY_l00ck)1V8`;KmY_l;P4Z`{r`tw$LJvlfB*=900@8p2!H?xfB*=9
z00`jvKWqR5KmY_l00ck)1V8`;KmY_l00a&{0j&QIzmCyE5C8!X009sH0T2KI5C8!X
z009ud{r|855C8!X009sH0T2KI5C8!X009s<`~-0Q|M2S=Jp=&|009sH0T2KI5C8!X
z009sH0j&RF10VnbAOHd&00JNY0w4eaAOHd&aQF$}{{O?TWAqRNKmY_l00ck)1V8`;
zKmY_l00eOTA2t92AOHd&00JNY0w4eaAOHd&00M`f0M`G9U&rVn2!H?xfB*=900@8p
z2!H?xfB*>a`~Rivw+VXU0RkWZ0w4eaAOHd&00JNY0w4eaAaM8yB&B3x0)PL1_!NsC
zfdB}A00@8p2!H?xfB*=900@9UF9EFodx_u}1V8`;KmY_l00ck)1V8`;KmY^|9|8RR
z|KZaqdISO>00JNY0w4eaAOHd&00JNY0=)#V{_iD%V-NrV5C8!X009sH0T2KI5C8!X
lID7<f|Nr6BDS89~AOHd&00JNY0w4eaAOHd&00O-P{s(dWq*ed`
diff --git a/management/server/testdata/store.sql b/management/server/testdata/store.sql
new file mode 100644
index 000000000..32a59128b
--- /dev/null
+++ b/management/server/testdata/store.sql
@@ -0,0 +1,33 @@
+CREATE TABLE `accounts` (`id` text,`created_by` text,`created_at` datetime,`domain` text,`domain_category` text,`is_domain_primary_account` numeric,`network_identifier` text,`network_net` text,`network_dns` text,`network_serial` integer,`dns_settings_disabled_management_groups` text,`settings_peer_login_expiration_enabled` numeric,`settings_peer_login_expiration` integer,`settings_regular_users_view_blocked` numeric,`settings_groups_propagation_enabled` numeric,`settings_jwt_groups_enabled` numeric,`settings_jwt_groups_claim_name` text,`settings_jwt_allow_groups` text,`settings_extra_peer_approval_enabled` numeric,`settings_extra_integrated_validator_groups` text,PRIMARY KEY (`id`));
+CREATE TABLE `setup_keys` (`id` text,`account_id` text,`key` text,`name` text,`type` text,`created_at` datetime,`expires_at` datetime,`updated_at` datetime,`revoked` numeric,`used_times` integer,`last_used` datetime,`auto_groups` text,`usage_limit` integer,`ephemeral` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_setup_keys_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `peers` (`id` text,`account_id` text,`key` text,`setup_key` text,`ip` text,`meta_hostname` text,`meta_go_os` text,`meta_kernel` text,`meta_core` text,`meta_platform` text,`meta_os` text,`meta_os_version` text,`meta_wt_version` text,`meta_ui_version` text,`meta_kernel_version` text,`meta_network_addresses` text,`meta_system_serial_number` text,`meta_system_product_name` text,`meta_system_manufacturer` text,`meta_environment` text,`meta_files` text,`name` text,`dns_label` text,`peer_status_last_seen` datetime,`peer_status_connected` numeric,`peer_status_login_expired` numeric,`peer_status_requires_approval` numeric,`user_id` text,`ssh_key` text,`ssh_enabled` numeric,`login_expiration_enabled` numeric,`last_login` datetime,`created_at` datetime,`ephemeral` numeric,`location_connection_ip` text,`location_country_code` text,`location_city_name` text,`location_geo_name_id` integer,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_peers_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `users` (`id` text,`account_id` text,`role` text,`is_service_user` numeric,`non_deletable` numeric,`service_user_name` text,`auto_groups` text,`blocked` numeric,`last_login` datetime,`created_at` datetime,`issued` text DEFAULT "api",`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_users_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `personal_access_tokens` (`id` text,`user_id` text,`name` text,`hashed_token` text,`expiration_date` datetime,`created_by` text,`created_at` datetime,`last_used` datetime,PRIMARY KEY (`id`),CONSTRAINT `fk_users_pa_ts_g` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`));
+CREATE TABLE `groups` (`id` text,`account_id` text,`name` text,`issued` text,`peers` text,`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policies` (`id` text,`account_id` text,`name` text,`description` text,`enabled` numeric,`source_posture_checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_policies` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policy_rules` (`id` text,`policy_id` text,`name` text,`description` text,`enabled` numeric,`action` text,`destinations` text,`sources` text,`bidirectional` numeric,`protocol` text,`ports` text,`port_ranges` text,PRIMARY KEY (`id`),CONSTRAINT `fk_policies_rules` FOREIGN KEY (`policy_id`) REFERENCES `policies`(`id`) ON DELETE CASCADE);
+CREATE TABLE `routes` (`id` text,`account_id` text,`network` text,`domains` text,`keep_route` numeric,`net_id` text,`description` text,`peer` text,`peer_groups` text,`network_type` integer,`masquerade` numeric,`metric` integer,`enabled` numeric,`groups` text,`access_control_groups` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_routes_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `name_server_groups` (`id` text,`account_id` text,`name` text,`description` text,`name_servers` text,`groups` text,`primary` numeric,`domains` text,`enabled` numeric,`search_domains_enabled` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_name_server_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `installations` (`id` integer,`installation_id_value` text,PRIMARY KEY (`id`));
+CREATE TABLE `extra_settings` (`peer_approval_enabled` numeric,`integrated_validator_groups` text);
+CREATE TABLE `posture_checks` (`id` text,`name` text,`description` text,`account_id` text,`checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_posture_checks` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `network_addresses` (`net_ip` text,`mac` text);
+CREATE INDEX `idx_accounts_domain` ON `accounts`(`domain`);
+CREATE INDEX `idx_setup_keys_account_id` ON `setup_keys`(`account_id`);
+CREATE INDEX `idx_peers_key` ON `peers`(`key`);
+CREATE INDEX `idx_peers_account_id` ON `peers`(`account_id`);
+CREATE INDEX `idx_users_account_id` ON `users`(`account_id`);
+CREATE INDEX `idx_personal_access_tokens_user_id` ON `personal_access_tokens`(`user_id`);
+CREATE INDEX `idx_groups_account_id` ON `groups`(`account_id`);
+CREATE INDEX `idx_policies_account_id` ON `policies`(`account_id`);
+CREATE INDEX `idx_policy_rules_policy_id` ON `policy_rules`(`policy_id`);
+CREATE INDEX `idx_routes_account_id` ON `routes`(`account_id`);
+CREATE INDEX `idx_name_server_groups_account_id` ON `name_server_groups`(`account_id`);
+CREATE INDEX `idx_posture_checks_account_id` ON `posture_checks`(`account_id`);
+
+INSERT INTO accounts VALUES('bf1c8084-ba50-4ce7-9439-34653001fc3b','','2024-10-02 16:03:06.778746+02:00','test.com','private',1,'af1c8024-ha40-4ce2-9418-34653101fc3c','{"IP":"100.64.0.0","Mask":"//8AAA=="}','',0,'[]',0,86400000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO setup_keys VALUES('','bf1c8084-ba50-4ce7-9439-34653001fc3b','A2C8E62B-38F5-4553-B31E-DD66C696CEBB','Default key','reusable','2021-08-19 20:46:20.005936822+02:00','2321-09-18 20:46:20.005936822+02:00','2021-08-19 20:46:20.005936822+02:00',0,0,'0001-01-01 00:00:00+00:00','[]',0,0);
+INSERT INTO users VALUES('edafee4e-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','admin',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 16:03:06.779156+02:00','api',0,'');
+INSERT INTO users VALUES('f4f6d672-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','user',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 16:03:06.779156+02:00','api',0,'');
+INSERT INTO personal_access_tokens VALUES('9dj38s35-63fb-11ec-90d6-0242ac120003','f4f6d672-63fb-11ec-90d6-0242ac120003','','SoMeHaShEdToKeN','2023-02-27 00:00:00+00:00','user','2023-01-01 00:00:00+00:00','2023-02-01 00:00:00+00:00');
+INSERT INTO installations VALUES(1,'');
diff --git a/management/server/testdata/store.sqlite b/management/server/testdata/store.sqlite
deleted file mode 100644
index 5fc746285f08724a8fb5056324926b896a697f44..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 163840
zcmeI5Piz}ke#beIMM|<I#>plVC(-UmiDMI%Y*Li<Z(+EyOgn~cInf{N8bL4|k&o0w
z<P0-2lr02XfOZlr7AUrh=Ga3|J@l|G7HD(cQ_;g73*=g~*WPj{kUjJ_Z{`i(@Q?n~
zyG2ZVX_>=$@Av+Fe!utoy*D$Iwmy1bdQ7X>PTladeBzaaq9p!8(-MiqJM{lD{THvd
z=))OtLPtgV-0$N%iL1`vjrhXp?|qrq)8CK(?%c=YtI3h^^vE|OTf=)Jmxs?N#?Uv3
z-zUDNfAqTYYEr#<K}ncanLTwst5FAaqv_fFT(3HIv*GHw;P_f=>XnrG(TdW#!L!Zs
zQ@z0)*S3tBZj?&Qb#>3)XO^osUFPU!xp(gQ_07WCc0s$hal7zyt$2JjMeWgsR_t9_
z@p3V2teAPWHJMUZR+KN+JY%=UdKc)OnhyK4y>{zCp>JE-W$JBF^Vm~wHflCJwTwCw
zS$l@N$I1Z=k;a}jOvms{+tSO1N230_XV%$lvE(rNT-J9Fg|J95JXx-0xSo%ex)2rq
zaP!{7wav%c{lep*cbVDsM;lw)n``$rwzXnqpX<Wa8;0(=dbOzCd9+!$cXuN!5V6xX
z3wH{eg^l&Xmd1zX5?LB-CUZZXRP~j9Cej<Hp6i|d%I-u;y{;;)k;sDl9=N{w*iFkL
zo8jk^-6qm07Z?RkrJlCS7c<XqoK2~!s(kgBn*kT$Z|CAl4$8)KDpeDz)v;@lT1{7{
z&K{U0#-SE9t667`S(+_czE)X{@dl-ISzMPb#Ghl~^b$JXt=Xl0U$;@MT;DajYFd)Q
zBWsD<hUvOZzp!tc+U>%fwVems+KkaKXJ(70<*{mLdk(7*<f6vYnA0Ou67~)oV(`b?
zS;#J!{5?!fVw;Isn<yv@E^{ua-cb7)9M_tj<A;ge@lJDUu(&z#^RwON)F~%?43+LM
zrw3z6^^&TXk;Mi@_Zh(<>G6JblR&&uKOytWREittuj`?YqAGYjqjBTpX~koVlQ$7~
zBbRy2hAt(T4PjVyGE05Wc0Jhud1BSpZ8s*i&m4=@Vo4?25k^qtr5ZKE^MhDSs-qs;
z)emT7<n3ZoPrRPVO|xfm(3zfD7W1Ci&c1Gx%MQgI79WLs=z6T~Pgavc6V0bx=EV9D
z3N#$M+$?#qnaPJ3=GP6YSusjp)9EPBtOL`rtva*FK?e%p<tk>a-4z*knSx@?*lnZr
z^{cy{;WhmX^6M^Rv1u*~lx)jlB?=LebCC17kI;F9=_})~&zdH&(v1cU`@kS2M~=py
zOx!Dkw&d=~mgLeYv;2rEw=cCBM716w{<u!)zgT0Bku!~TiyUH5bvS-McDBu0%B9HR
z9O@;z92sgm)ASBw`i*j`%;p&}cX$dn$7g7FL_N8i8$HU+1+`NcrCBs~kW8sJr<K-)
z$OlE!T@Ib?#8kIaYG+EpHgHhwtPa=r{QWa2b$VL)O6AU~E!X}u5_enej8ph7d7?-m
zr%$8{%$&v@TN^bS{*tKNk?ODmT9C?SOQuc>Gg@|$$B1HJuZ2~yM~H5^MwRI`vu;w`
zQRyD0dkQmZ6MF$$%8w+~yVLzbrqo2P{W-ZioKo{sN=u2XN<?D4Y}XCb5~pXntx05s
zl7StGM6#lwf@0>&50#WUHKqKDTpc+OAt8=KaqAJuaoZ7#;p3LaVVj{p4$gG)AgpRT
z(aM_EaA8ivG3y4ojj&P49g5&$mdU@H6|?R9MGhT>-xo>b;X9Lp_#;`09|cGOo@rI7
z8>Y*Bs!mac%*u}?9V@~}l>7P<INYNPNF9j;9ae4D3@6+q9GL8h-n|Zuq{ICn#gB$j
z?dSC)=}#%zhb6jWLocaP%`odRXC0F=YBl>wKSZ?bbqv~$QXmrnu1C;{>I=lh!kAnF
z1w@lPi0#B1=$^=#YePwOeX8GF6DF+Z#HV3@pPfkjXmWzymGtcd{on-xAOHd&00JNY
z0w4eaAOHd&00JOz1cBCy^7_ui!>PB&c78T7dVX|dbad3;SMOGGrRD7M!rZQLJv+Bh
zVoP%?3;C6~{KDe(d^Ve_l=8dt+4+UJTy`!yujLk3v-#ER;?<?4<)wwiE7|$gY}RA0
zceP~K>B7(fT{SXzl~iQUSm0I8Q<b^ppvoMtvh?}Py$@$rXL8x>)y0LY*{j)^*_nri
zyH9D?t}U;vt=+gW^NWu^+4%Z5j}nP->Zg+aHbFmlfdB}A00@8p2!H?xfB*=900@8p
z2)twjE)DODo#gsMu>b!qk^b%_8z8z10w4eaAOHd&00JNY0w4eaAOHd&a3q1V!&778
zxq{&N|8ydqKC%chK>!3m00ck)1V8`;KmY_l00cl_kO;IaB|WjT^X}Bv*4F6g&GVz9
zC%K8fHov}HSe(B#mtVefeQx3U_59qee6BEe`}X4E`r^vsdg0cs+pJ<VYo12G4as5j
zJ3HtXPtddfxw-7}Ty901&#o>kuFliL`q}F%`Nie=`QY*Y`MfW(GM8KKFLHb>S^BcU
z9RJa>S^81|{aoSiAAb_u|Nmnm{l`I4BgO&(AOHd&00JNY0w4eaAOHd&00JN&2n-KT
zjN$wLf(DKt00JNY0w4eaAOHd&00JNY0wD165jg4h|NZCx>5u;51p*)d0w4eaAOHd&
z00JNY0w4eaATYoL{QLjd{|~T&F*FbW0T2KI5C8!X009sH0T2KI5Fi5B|HBMG00ck)
z1V8`;KmY_l00ck)1VCW$31I&}_&UZ2K>!3m00ck)1V8`;KmY_l00cn5|Nj5b<i91-
zWqQL41V8`;KmY_l00ck)1V8`;KmY`O=mc7C4o&XtygoWQaenmX!`DV9Dhrjx^5W9`
z++x16JD1C`(%ee6yf~MgUzj&axq14dc=?n3alfX^oR2^0`zQ41kN7Rj<+4<*mRnrS
z=2x?eSC^Jna@QAwzu;#y%+>{kx~8_f#>z&8u?6;`T{Fsc(|WPK`S<^a(*Kx9e@kz8
zfdB}A00@8p2!H?xfB*=900@8p2>cKTTpr$0PI6&m$p8KSC%Mdk{r?X^t>^;?fB*=9
z00@8p2!H?xfB*=900_hg`1}8pJhZ^~|0fajpZ{0V8wvWs3j{y_1V8`;KmY_l00ck)
z1V8`;K;T3KTGy1Zot=p*H($SbbEW)ge%Z}mKk6a>libSRvLCV!jIF&wdE36vHt72X
zdHS-!-29T3&93sFEBxL6o<fkBo6F`pGDWGb4FCSWlKz&S|3A?HAp`;-00JNY0w4ea
zAOHd&00JNY0wC}MBH%y&f08Q@*#G~4l!mT=00@8p2!H?xfB*=900@8p2!OyT3HbZ}
zlRRDEKmVV2<&>2}90WiB1V8`;KmY_l00ck)1V8`;K;We!;NSnp{{N*?89ECBAOHd&
z00JNY0w4eaAOHd&00O5bFp>VB#H8}u#JTU%|9bAP$A5S3<MGwx$as3>n~|;IzZu>e
zKBN40=$pjv6JOImdR=)nsouPxBuuN!p1PmaOpobC)3f=xUUlqd!_{-a@wL{}D=GD(
z6{U59XPf1xdV@KxZ5cJ)D3zG&>YlyNELZn`d4X=0gYN%%+vwec^Xr?1we5m-Z{v31
z=UVajt`@aN8(Oh<WyQ<Ia6rY(v#rULy0W5tvE~`OHP*X8@6>eIr|q>{4+^}kKWSw>
z^ib3;)6k2W$DVq#(HO#0%cwJvwP(0{tQ=@hq_L+B(=j~Lw)C>$k*NRfnRPZ>EIEum
zm-XF4AuLi1PnN40uIJkVbs;MJ;pV-EYnzX?`-R6r?=rLNk2bcpH`nfMY-`2JJ~tj$
zZy37g>eZrl=h0^2-rbF`K%@w5vv8-dS=d-FY-xOGE~$wIo5}1>q}1!G(i(}Z)Gy@v
zCTce=kL;44Pj;I~r(9qZJe4YMm#0R~CDj{hzj+hXljDbp=Qqx#R8>{Jddw|`C-S#*
zaeLrtag9kWhDvknTBJ17)oEM@W{GiRMa^o~nPZk_i<Yl5R%5(DDP0!VW&Qh8KAi1B
zqq{Y`wC`&!s+DWAW>-y1QfFifam|~q+w=?jmZ#k=+*#Xsu&vF|A5Wc`Et;0cs-a~$
ztU~%IYCMfOJu)R>@30{Tf4mii>;hlZ!;mDlnV2n!f{{6mcbZd!#m$MIpY1lMPC4OY
zsC0)pJs3->msG`!EH)^*&uGLXJ>IWw5{OsoCuDw^N^y((bv^V^R0XeRG;VP`?Kq3$
zO#}|aWnQzPO9^H}SWBI3P2aO!Pqr$aShaQAjfw3u$6~cuQpt9NW{bR3qh@#&+o{K-
zI_j}q{eVVB4k{+~#Os;dG<zloo#~lnG4F}(?CVCk>`-iD@lm*kuE*;B3^XbH(InYr
zPOKlHK*O=i&5{?JZhVMge%-K|6{F-eosRO%IxrpEsxymxYM=mKu42~OU6FB@De%^e
z-8NcZzq;!gUenJYSL`wto4c|=$+j$3BCjsZcsZX>e4Ph{zA_H`tZ5P}-DuFT4-8Ur
z<UM@%#;1B{OYWX*NiLl-%a5pX`%;@hAnGCFkL!d^i8b~ZdB|9|$jb#)hvWCdUE8ds
zT#6jdp<c4fk)gITP46(K-zcZbY@QMGai{QIe1>)h!4vzg%;-^JDyTij4`T<(lzMYo
zX<dkXP&D1;(AiE*bvvbYrW9-g2i4B%aDC6;Ka*0Yr<Jc%?yTB!?N1|dx7E%#h3}Fl
ziWEosgs;HNY22~pOtayyV#*z<4m+SluWYtt>a>=kl@fW3D6sWf3l)3B-KJ|)nO-yN
zCbb=v?qRy8FrzlH7qF%LNK(B!-EYYwHIZw7PVNq;)clmvQX;Do;Z-l&b;Gp8>6vb8
z5?P^SU`Ha6tSG3UnECQUC8bVHDZe6DM-D_th~rS)dPH*EcEtMixD{>KX6TQDGo3sL
ztJ+Sq7^a0;nA32~x<PIuY*ccGBDk1k^6zHFY&(CELr3BFMG|@V&ZHpzNS5M90aAcx
zT2<<X>2jZ{Q<NdI@?%NIGA|P4zWxLb_vivrM<PLoRhu=#3D@-pCVQfHFD@hLaL-Bc
zqhVD0dHqQGQ;POsiSF3YOR7{e%zDgO$E1u}&3@7k5v^q%gSNaB$V7na5wxQE0&%h0
zC6_<}(IgLIJMjj(CvxW6P*Po=>NnSf3F|rWX_$7}qyBDtV)PFQHSs~>Y;OEFW1o)Q
z82$IuUyc54YHFmI{I4_rIXrphUxxlZ@gGA*;)C?(lm9*O50n2iF@5fzsqi0yy}EdB
zz44Qj`Y5NgR-%dPdr-dNpy7we!{#Zvb!X0WPv~wTF)?_2^f%z$A|2u4*)OJ2YA&aI
zd67@{Zu#yME$#ri1>&xtJ*a4|Njv2-b4!ld@VCWsb_gb#o&g{s5xN0s`Un0Y67OZZ
zhEv)L{fOIbX5B{9xs4XK5iCIbtzTPlUE6AD&`0lv)_<H-f0pZKncZylTzA@Z<(-te
zbU|s2MaD%Jnmm8q7;Vvmgr9U9QI}*87lPytV|jk@t(1D<g7Q^hEP+h$J{32Lu(&2)
zFKKs1=rQ!e;<Q7F`;0YoUXi3|Dk80VdsvU}PDF*=wZu(Fxc*?x60Ha7hWlBQma_h8
zG+JWQ_JFqkk_+xOt9a!!LjR&2Eqy(@uyCAL>T6&DycbwnTzUJbtB_&!x#0NY&o89Z
zwTnt?Dl(piT{BCEy3?eMksh9yWjXboZab2*+l9j2v{WIPR8(a#^ITC=>cxx7mxW+!
zEeXmMz7@AFIV<jL+Es^33V*f;bLe3$-5RB>qvVUI2t|G#HY4Za+D(V_ENa~~%d|)1
zrD8iFinyL#vZIZ8!*;x=kbj~(hE<K~Io<*Bv6-Y2u9(gXdF_$M9gZkP-2JP0{$<(Q
zg$D(?mb<>TwZ3+{kXd>&souZX&jp3`2F8$+&)&A)NU1-i#pwCC<@jA}&vnuMg+3+|
zmzL~>GCJJPvvWV<3)AQOZDS!R(Sq8;Nc>8Ub3&)JkU;-r<F0>^K`-sG(!Nma@mdVY
zgcFPRFMdU~jgGV>Uz8OkLrrF`y?)f9Mo`fMol!$?p8d;UQB!%XGhB47KZ1lex^>ni
z8E7o@gYk>Hr@B$`?7j0mwtVp}S8h;Y@cwFCv0+=MP^*0Pbe3*P_!kUA{~(r={&kA~
zhl{5{-(SGBpZcCr?|UbIw);8v(@9ld>FZ30e2?2(bjhSwI(_d}S^AUR9O}_<+%<Gu
zQIjLb%XL5J(~Bwf+BKy$94zTOFT08*P;?#ka(sSu<@=cUx~qM8+Ms2Tf8jCHO1_s;
z?`D)%MhXJ5V~m9YIpb2dbBViDsiX)Ca(Qxtva5VHJd;v08RdC+BQfTk;}u_wk2jtf
zw+Yz@dMqEL4ut;X{~iruW9zs}C$)2QO!(=$N%c{t@AQj7@gsxW==-g+(;Q*zBW^gs
zep_t6<7e;15ymrpgvagbh2QPFjnA}(w3K@3lG0k|y)iAi995&+804wl*vY%`zQpo`
zHlu~UoJ$)C{~AJ5ED*bccLvY@iz^s7f&d7B00@8p2!H?xfB*=900@A<;1a;^{~KK0
zVq_oy0w4eaAOHd&00JNY0w4eaARq|f{=XoBBM5*12!H?xfB*=900@8p2!H?x3@!oe
z{|8sM7#RqF00@8p2!H?xfB*=900@8p2nYgr{$G&55d=U01V8`;KmY_l00ck)1V8`;
z2A2Tt{|~NiF)|PU0T2KI5C8!X009sH0T2KI5D)~g{}&{11OX5L0T2KI5C8!X009sH
z0T2Lz!6ks_{|8sM7#RqF00@8p2!H?xfB*=900@8p2nYhW|1U`32m&Ag0w4eaAOHd&
z00JNY0w4eagG&JW|H0KQMg{^P00JNY0w4eaAOHd&00JNY0)haZ{}&{11OX5L0T2KI
z5C8!X009sH0T2Lz!6ktE|AVVrj0^-o00ck)1V8`;KmY_l00ck)1Ox%>{{;ygK>!3m
z00ck)1V8`;KmY_l00cl_a0&R&|10V56ZC@@2!H?xfB*=900@8p2!H?xfB*=9z~B)W
zR)!N3`2PRkDHbCF0T2KI5C8!X009sH0T2KI5CDNr0@(j|62UnLfB*=900@8p2!H?x
zfB*=900;~o0et^|@N|k1fdB}A00@8p2!H?xfB*=900@9UCjspLJBi>N1V8`;KmY_l
w00ck)1V8`;KmY^=j{u(kA3U96L?8eHAOHd&00JNY0w4eaAOHd&&`IEb0dP~Nf&c&j
diff --git a/management/server/testdata/store_policy_migrate.sql b/management/server/testdata/store_policy_migrate.sql
new file mode 100644
index 000000000..a9360e9d6
--- /dev/null
+++ b/management/server/testdata/store_policy_migrate.sql
@@ -0,0 +1,35 @@
+CREATE TABLE `accounts` (`id` text,`created_by` text,`created_at` datetime,`domain` text,`domain_category` text,`is_domain_primary_account` numeric,`network_identifier` text,`network_net` text,`network_dns` text,`network_serial` integer,`dns_settings_disabled_management_groups` text,`settings_peer_login_expiration_enabled` numeric,`settings_peer_login_expiration` integer,`settings_regular_users_view_blocked` numeric,`settings_groups_propagation_enabled` numeric,`settings_jwt_groups_enabled` numeric,`settings_jwt_groups_claim_name` text,`settings_jwt_allow_groups` text,`settings_extra_peer_approval_enabled` numeric,`settings_extra_integrated_validator_groups` text,PRIMARY KEY (`id`));
+CREATE TABLE `setup_keys` (`id` text,`account_id` text,`key` text,`name` text,`type` text,`created_at` datetime,`expires_at` datetime,`updated_at` datetime,`revoked` numeric,`used_times` integer,`last_used` datetime,`auto_groups` text,`usage_limit` integer,`ephemeral` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_setup_keys_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `peers` (`id` text,`account_id` text,`key` text,`setup_key` text,`ip` text,`meta_hostname` text,`meta_go_os` text,`meta_kernel` text,`meta_core` text,`meta_platform` text,`meta_os` text,`meta_os_version` text,`meta_wt_version` text,`meta_ui_version` text,`meta_kernel_version` text,`meta_network_addresses` text,`meta_system_serial_number` text,`meta_system_product_name` text,`meta_system_manufacturer` text,`meta_environment` text,`meta_files` text,`name` text,`dns_label` text,`peer_status_last_seen` datetime,`peer_status_connected` numeric,`peer_status_login_expired` numeric,`peer_status_requires_approval` numeric,`user_id` text,`ssh_key` text,`ssh_enabled` numeric,`login_expiration_enabled` numeric,`last_login` datetime,`created_at` datetime,`ephemeral` numeric,`location_connection_ip` text,`location_country_code` text,`location_city_name` text,`location_geo_name_id` integer,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_peers_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `users` (`id` text,`account_id` text,`role` text,`is_service_user` numeric,`non_deletable` numeric,`service_user_name` text,`auto_groups` text,`blocked` numeric,`last_login` datetime,`created_at` datetime,`issued` text DEFAULT "api",`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_users_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `personal_access_tokens` (`id` text,`user_id` text,`name` text,`hashed_token` text,`expiration_date` datetime,`created_by` text,`created_at` datetime,`last_used` datetime,PRIMARY KEY (`id`),CONSTRAINT `fk_users_pa_ts_g` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`));
+CREATE TABLE `groups` (`id` text,`account_id` text,`name` text,`issued` text,`peers` text,`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policies` (`id` text,`account_id` text,`name` text,`description` text,`enabled` numeric,`source_posture_checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_policies` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policy_rules` (`id` text,`policy_id` text,`name` text,`description` text,`enabled` numeric,`action` text,`destinations` text,`sources` text,`bidirectional` numeric,`protocol` text,`ports` text,`port_ranges` text,PRIMARY KEY (`id`),CONSTRAINT `fk_policies_rules` FOREIGN KEY (`policy_id`) REFERENCES `policies`(`id`) ON DELETE CASCADE);
+CREATE TABLE `routes` (`id` text,`account_id` text,`network` text,`domains` text,`keep_route` numeric,`net_id` text,`description` text,`peer` text,`peer_groups` text,`network_type` integer,`masquerade` numeric,`metric` integer,`enabled` numeric,`groups` text,`access_control_groups` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_routes_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `name_server_groups` (`id` text,`account_id` text,`name` text,`description` text,`name_servers` text,`groups` text,`primary` numeric,`domains` text,`enabled` numeric,`search_domains_enabled` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_name_server_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `installations` (`id` integer,`installation_id_value` text,PRIMARY KEY (`id`));
+CREATE TABLE `extra_settings` (`peer_approval_enabled` numeric,`integrated_validator_groups` text);
+CREATE TABLE `posture_checks` (`id` text,`name` text,`description` text,`account_id` text,`checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_posture_checks` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `network_addresses` (`net_ip` text,`mac` text);
+CREATE INDEX `idx_accounts_domain` ON `accounts`(`domain`);
+CREATE INDEX `idx_setup_keys_account_id` ON `setup_keys`(`account_id`);
+CREATE INDEX `idx_peers_key` ON `peers`(`key`);
+CREATE INDEX `idx_peers_account_id` ON `peers`(`account_id`);
+CREATE INDEX `idx_users_account_id` ON `users`(`account_id`);
+CREATE INDEX `idx_personal_access_tokens_user_id` ON `personal_access_tokens`(`user_id`);
+CREATE INDEX `idx_groups_account_id` ON `groups`(`account_id`);
+CREATE INDEX `idx_policies_account_id` ON `policies`(`account_id`);
+CREATE INDEX `idx_policy_rules_policy_id` ON `policy_rules`(`policy_id`);
+CREATE INDEX `idx_routes_account_id` ON `routes`(`account_id`);
+CREATE INDEX `idx_name_server_groups_account_id` ON `name_server_groups`(`account_id`);
+CREATE INDEX `idx_posture_checks_account_id` ON `posture_checks`(`account_id`);
+
+INSERT INTO accounts VALUES('bf1c8084-ba50-4ce7-9439-34653001fc3b','','2024-10-02 16:04:23.538411+02:00','test.com','private',1,'af1c8024-ha40-4ce2-9418-34653101fc3c','{"IP":"100.64.0.0","Mask":"//8AAA=="}','',0,'[]',0,86400000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO setup_keys VALUES('','bf1c8084-ba50-4ce7-9439-34653001fc3b','A2C8E62B-38F5-4553-B31E-DD66C696CEBB','Default key','reusable','2021-08-19 20:46:20.005936822+02:00','2321-09-18 20:46:20.005936822+02:00','2021-08-19 20:46:20.005936822+02:00',0,0,'0001-01-01 00:00:00+00:00','[]',0,0);
+INSERT INTO peers VALUES('cfefqs706sqkneg59g4g','bf1c8084-ba50-4ce7-9439-34653001fc3b','MI5mHfJhbggPfD3FqEIsXm8X5bSWeUI2LhO9MpEEtWA=','','"100.103.179.238"','Ubuntu-2204-jammy-amd64-base','linux','Linux','22.04','x86_64','Ubuntu','','development','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'crocodile','crocodile','2023-02-13 12:37:12.635454796+00:00',1,0,0,'edafee4e-63fb-11ec-90d6-0242ac120003','AAAAC3NzaC1lZDI1NTE5AAAAIJN1NM4bpB9K',0,0,'2024-10-02 14:04:23.523293+00:00','2024-10-02 16:04:23.538926+02:00',0,'""','','',0);
+INSERT INTO peers VALUES('cfeg6sf06sqkneg59g50','bf1c8084-ba50-4ce7-9439-34653001fc3b','zMAOKUeIYIuun4n0xPR1b3IdYZPmsyjYmB2jWCuloC4=','','"100.103.26.180"','borg','linux','Linux','22.04','x86_64','Ubuntu','','development','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'dingo','dingo','2023-02-21 09:37:42.565899199+00:00',0,0,0,'f4f6d672-63fb-11ec-90d6-0242ac120003','AAAAC3NzaC1lZDI1NTE5AAAAILHW',1,0,'2024-10-02 14:04:23.523293+00:00','2024-10-02 16:04:23.538926+02:00',0,'""','','',0);
+INSERT INTO users VALUES('edafee4e-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','admin',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 16:04:23.539152+02:00','api',0,'');
+INSERT INTO users VALUES('f4f6d672-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','user',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 16:04:23.539152+02:00','api',0,'');
+INSERT INTO "groups" VALUES('cfefqs706sqkneg59g3g','bf1c8084-ba50-4ce7-9439-34653001fc3b','All','api','["cfefqs706sqkneg59g4g","cfeg6sf06sqkneg59g50"]',0,'');
+INSERT INTO installations VALUES(1,'');
diff --git a/management/server/testdata/store_policy_migrate.sqlite b/management/server/testdata/store_policy_migrate.sqlite
deleted file mode 100644
index 0c1a491a68d58e019b5256b60338ab8b5f5e40d4..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 163840
zcmeI5O>7%SmdDwmB~r2}#_=Q_CDDXd;@CtanawYY9vEI)q7#j6*^w+b9wTTr$s*Mj
z*-dvhWov>gKsyO$2UyGwHpc~KPji^V%wmAqoaeOI!(jKaK(343!(8^3!vdMZzW!u4
zKdcW=7MABv%Otz%Rdv<xy?U>zx=C()cwIJFqONK!$w*{EFNHWR^jC>QC=_~={-2}&
z?&EcObId)USI+l-)Y~^hi`qYqo5JyLO_^8X-%kDZ#J#DD6XR3y@vp`=!dv6#!pAsi
z?5oi4LtoNAdc61Y1b=yk3&~22J<=aEsez)@F;weVY-nnyt&4*Fda677QiT7oz;!QK
z*>dfX*k+opDpFIFs#T`zqM>dxMHf3d(?q#8Jon`CdZ~E3lvrI`DSebE?_EtfadRzE
z9$s1bT-iBUIr(^FI>HwU+-F5Ysx;Z~0>e||PMdBQuUs#UJXhizwYHov*dt@!JFRo5
zNG;}OZAtnTtJyHzH1?=1Ymy<Widd5j5;dO<xy9zoRgKa6npoL&h20d%@XIwN-7wKo
z6THH=)>m&7*Y75-mG0WDOU^IfT-&(4UR+(fohaA0EnVnhTM`XjY?KpMZ?2bC-(PbI
zc<d7ErK_d&(%N!qBVlz-C$iMpWb#^kf)@*;Ok_AtQ5c^7QY9AQb3E4__bkY4fo__Q
z+EEO$8S8j@&_w#>Y@@JJsinR0<>Zq~$0Iz?b6?!G%)k<{o=yanY?lq_)K`t8R!wbs
zYL#`78oMJ`nFY0+P&zH9$<_I?VrrE&nRP;6x?f!MTZlQvoZ;o_ywX&w+oo>4S}lDy
z)rPG26z*9|&^BaU@0f*6+f1yKt`;}1-%iX)ZFz3KEGq_UIJT#;IzcWctTd(#$@B>u
zyKT4gd)t}A&K~?jOwGqO8L&3Dplfi+6BGO;ew4vkS`!89C03d0H>WlWnv->We9)Zw
z<y;>_rTfh3`s4(Emgi*8V(p^ajNp*;)Tp{iAXurHko-v`Vj1VpT8@vRDy({<LF2U2
z%6k~6bqd=X>CEV~MPGv4b`7gVW+`r|y5ToKE3u)9svZ#AW}3p9fuyRcxkga7O0}Dk
zVFs~)R9`)+F78mz$lC>^9vVZFJMz$EyD>wv6lOeBwQW(V)ijDbEZ7TuS2tM89IP^h
zCK^u_rUlyJ2(&e|)~OnSk!f|&$!|$Yr!G~Ej@DP6DLb;JDlMjvgSHi5m8;9mUQ_(I
zYZMflQl*F1)UT);lF>0U$gk^+1%|m_psFegt5S&YIR}5f<s(EZ!i<#B*n^HttVF3z
z-QJN%$)2Mz2b1L$99z=2{FbECAydqV>Oa5loOV<jB4YMypZ<%rw-`CoK(ojp+EqLK
zH)ChdtbMr@Ika7|s@6P1?PbcwZa}|YPJ^jdM!+2&z|C1BbTFds-_1pz=H~3$DU8x6
zn%tR)@Rv_>-5JjZdBfcwI(vzcL8sKq^aWenLG`lwT;G#-k45;?r@1e9%USj0dhf=A
zZmXAZ0N>>wD87(0BGTDrPW=wdjXG^}N>uAh)z}VANd0C@rcM(xns$-L@M7SwiB)+>
zi0<f8gNaSKCDXaR(nC!50A|!9_6)X^8K2<aKRqgB`c5JA-cMA*5k51^bve(f+(<0e
z)RrVG?%}aPYjU$3N!yOxM6x2gf^zcnTU>;no#lQ?u8tgtE8)J51+B+T4%&`88QyDp
z?3~l_$M%s(9)vYi&6`=%9L~vUYjR5>x8a=B=MLTABG<^j%XPWu{M{USb^X4ZL>|6B
z$&NohOEIGWDZr4G1~o(0EuSh<lp(V+V@cnP&=a+M{XQJ-(+l_-;t6W3(P>JWvq;#H
z*+X$~9_mRu>p_YiZK*NJ>wD7oDcU<F24ll8scKV_TLEVskdm5B_2DQ)H0{+ST8>g6
za|7IvpykzPi@OtJatRa=W%3}Z7Cgb=Ku(??o8XscM~yYtghj!97dF?~q0slHWAx0$
zS3>lM2MB-w2!H?xfB*=900@8p2!H?xfWT7-bPL=oo3R_SZ%l69iA7IF$D`4xxvs9%
zh3ZmjDZ5aSa;b%Em0egUWHW_@Og5j(q*6k?nyI8y>Fk1#T1cf6LjGbZdoi6^%w?9c
zg797{eKD0Xm~Jdq)fR0G?a;1~WK~H;wxq08WtyrKmh378tIFypbE~)JF3t(5)M7rn
zm|9HD&ClJC^leHze}1W0EMB@a_vyWl*S`Gu%}{8H+R4Sg4$&VTAOHd&00JNY0w4ea
zAOHd&00JNY0!NI%+3@D%e)b>i_5U}a_%}zagJ>=YfB*=900@8p2!H?xfB*=900@A<
zQwbao&rZ7c71;Ox$3yY>Q;Q%I1V8`;KmY_l00ck)1V8`;KmY_@Bm!N9i^n!M-=5vr
z*oa0ipNvNLa}m9mUS2BY(^nQUOILFX*<3EOa3v#@7FJgB`Q>~ezg)U<WrfwHPSZ%x
zw;^eazO#eAc!KWz7Zy@W3qm20PF>9AFQ(~c{Zy`y$uFhT_U-@aj44uB5SB)Z>|INW
zK5VdH{UuT<`cMJ=y=Oh&``Etz|EEy=PcM=h(H9T^0T2KI5C8!X009sH0T2KI5C8#}
zKsX$m#OMEA8h8Z(5C8!X009sH0T2KI5C8!X0D+@NV85ULH}C%+JMp{F^i_Jo0|Y<-
z1V8`;KmY_l00ck)1fDknPo~Gt<~CVu;T8Hx<(Zk-+p$<E7K;@_JWqFRM>k88(Hl3S
zCu6Z_wayxOy`IYJ54IK7$Q2s7)PC;h{_&0C&1;)%_3mn?qhyuTqg(4jC9_()`=eVe
zefR#|)|K@AJIkG>x}3daebc&-$}Fbyi^5WBuA*v<rmS=xT{oZ7>BUs`(NbQ_XE!VK
zo1mQ<+hI+$ZT__0Cv(e9wNs-nW~Z-czvcXbt$Flmjed<!wVvoE@eF-C{6bntqzV@^
z7cOSgi@AJmsZbCK1^X`UdbXag<u9Zc@|k*NK@eDVp^&QOsZ=&CRfRO&{+*$(eJ?I&
z)_yE43(X&`tO{$lOF1)b_4)^Q{NF*Jb-#n2?mRDK?E3xrzVE0nr1SPo>T`2XE^wAY
z&X@WW^441$lcbQ%s81pF2l@q{Lb8qhDCEX!uJu9vhg+3K<5qnobM--KRsX29^ii&|
zaffZLrmt_^EZk_9O2(aHPa(pE!eTnJG-rcfNT*ZTh5J&gwYwm-YI*Z}`E~ZJnyP9l
z{l+W(#IE<o)tHb;2x(JeLV7Wu$z^ld3k4!(-hIz%Qk}6ZJCw$LxF)RK$X41{3fKIa
zIh^Lq>;Gf%e+$L`NKbfx00@8p2!H?xfB*=900@8p2!H?x90dZeg>&4nJ+Co7oSUSK
zfxQ=d{r`(l{NLlhI0_v^8$kdBKmY_l00ck)1V8`;KmY_l-~}X*3N!8?_o9rQ53|XG
z+$&+P|9=yTe;xnL3&;;$0s#;J0T2KI5C8!X009sH0T2Lzqe$Rfc$3@D$0f!N^!fkk
ze+|WJ^n?cpfB*=900@8p2!H?xfB*=900=zq1iG({O>b_#5{<@AMlatu6^-rZTM_oN
zl<w$EyZ7<PpV0Gv1i$y?2n8YM{DPm<mb)_?HI45zZ9gCX-%rz|T1!@*t!=pe|GXPE
z+6Mw400JNY0w4eaAOHd&00JQJ7f8Uo{=c7%4eR><ezqB~{{IWKB6Jx9KmY_l00ck)
z1V8`;KmY_l;CUzTo!tK)dg*!ZHrfXQAOHd&00JNY0w4eaAOHd&00JQJECkH!|5*P&
z3qh0x0T2KI5C8!X009sH0T2KI5CDPap8(eX&%ch)LJ$A}5C8!X009sH0T2KI5C8!X
zcvb>2s(_3CO^E*R009sH0T2KI5C8!X009sH0T2KI5csYMbhv14^VF&BXslXi^#}Te
zR9=6ut*}O}(8x6Q^J@UbW|Mww;NIL|`D|lu-b`-f^}4UxTx#xP^ZGv*|6_>$@Bjf2
z009sH0T2KI5C8!X009sH0T4Li1o&`na&TiH(}>0YH#E)tI&|Wj_`jU^yQ$xvxHoli
zVtgt-{?+(K`0vA8;bYvd$G!^vKJ+F1qsMzMPw<y#xR9*W*dzTxQ#P0=bqv)y78{z{
zY3rh3zn<#Oz7*j<EO6aRR<>MwB(|BRtBTYVrD~Pwx@f4|OwmR2M;1l7W<&mN&oR6O
zCzsbt#oMLC>e@=_qeOY{rj`>o*AnI7m6gwxoeq_gk2j_xe4)U7Ry3qalMOF0JT>mL
z>2~qT^^$e2KWk+}^iWQmqpp_|276@8dwp;Y6{*GCtSw33Vl`WPZW?>kmNm(cRYj~x
z28o)_hTLNF<*LT$eNC+Fy25UXWccNpl5Uu`Kuz!p-&$Y2QCz>9xK_Grw=Oxqd~<E%
z_Ih!3?RKJE-?ofL7u%9(=whRsxO#KFwEF&<Q@~S1V!d>=v|d_UE^Q>NuIZ#E>TEJu
ziADGv&vnN=D>V!0rirQ@#UQ)1j;9Arq+iZ93M-W=@0F*MoS5J*@uS9#U5{YB#GYI_
z9^rYO`{J%;F;=4WbRuXER$5SFzB4*X)6}M?G+7s^UpsP@S;)!>rPE@XT%9i~rp{QC
zSts<R`^81S{>>rpjCNO}m8M$VHZ|wfYH72nHe|)8PR|yCnwNFGV-_|oFR@a(THL&T
zJ26N5nRD}HSut3{u`G?%Ngw5emBzFonLc4-x9xU*Z!2=x*}iCqA^F%Q1GeNA^vr3h
z-<;YkXinDg@j-Lymvem#mF_dA>ys1wS)P+Ui?xexGwLx(PmQXZ1cH^C3CW*CB9_Jd
ztmXJ9s=}%#8nieoZ7++nPGLI`of)0B=u42>uC=tt*2FDUH~dy*B{o!1)dOPNOjB4h
zkW^JQSF>fSRJ$n|byaHxr26Vnb#aG!Mh+?<_0Sla+>wVS+l?8Tr7+{6s%?u>t)@|I
zW5HhNySl+z<_MH2{Lvt(FfGsyN1&~#wNBLt3^%KbPJT;LI(4aPbhN(mOxck&RcSGW
ze5$Pgt6W`f_L}0yU8BI;lqx;6rhY};kc^I*L9SS5EHHNc0##K}Se3lGZ^Zlat${CE
zL1Cnf#vXKJVkJs#>h_LAO7^^m>E5iN?%0yP<+miA4w+&`RR8&X=d=US5D~Lq`*cdI
zy~W5w2AV})&aT?&zZvd&X6?(R$f50uRkh|BYA;hZb_4qLavDsvG6FvC0KUr_p@Tti
z-@YpueOj2ZYZt7S$(@M^fB7`mo$-8-H{AW9vzHhdbV|KUU$C_uR4=Q~^*wp_ScE@)
zn)`ycoK;V*_ijAswt5){@Lm3a;)^3A!k2C4)bGG_rqecOF}1!_jqT8+*Kf9D>NJ<4
znG$&nFR%@p3zdh&-Ht9bnAntCGM(EiJ;ZbmU`9P+&tOZL@d^I@)1#(5zEcRj_Y;+H
zgwM=!UCy&AH@u29wI#`ldw6Wnn%pc$(zYWvk*vtBpq%{t78l`XXStt}t0M>EO1Q6M
zLF;jogSO+&U-z2PI_Gr!v3(?x2Vo6W^CrVIF>`X-n%t7eZ8#_OxkER&$Tjlsa$W8@
ze>aC-UBB-pk%#Y3vg41>Qp_ko3NU1)LCuhL%cqJIWyq||SkgDm^F%FQzYmA|^a8$y
zc!C;hbefXp%<Fe#_D~$0Tzb;Znv>#3TWXB*`kwTCiuO*4!PqcNs@jy~R=`;Yq@-q3
zeK-mc&1E%-mb?_m+yFNuXnFP7;_hshTml6|nLLQ91y3+Ikdx=fCivyqQDe<DVNr13
zg=wW7HCNlQ=pRCS=!4L4Ve03T_a`q!|0D9Z(SL}{j+ZC?``CYlr;q*f*e^r>IVOcZ
zh<`HuKe1m;|5NPriQiG-KiF$^_qqG(TM_=Iz;z4Wz%@Onwcw!cJII~WQ*;~5oEsd_
zgF^1Wu;Qb+03Q_T3m1<+osIB<z<qwk8tjAegDHui0~iztx`JM(ys_q6Dc6`@)#SFh
zEcRzRV7%dJ19BxCH{cuowtw)%huN;ARks{Jq7RzcpwaX%qg~suCm`n1ucx?yWwo!<
zPhSl!e}96%BaE`lLAIhWn0C7UW`w^m!*wS;<D!iw!<;vIOLRNotwAFikhJ51o!n<E
zPtLp^;b&&JFKlD6W$fqKpiwx*6aM{@USnK6I)2za>{H@4V{Or@$fsy3;+ypju^!W%
zxD{HiC1^UX>$m4D-h7}X=?^+Il{IIh-V~db2ekb6x!^&w3RX@%G&k*N>TA%(!d_l!
zq=DJ+o?&Y7-WyNbg><SH?APyqG85s8XSnXHXFP4SDOYzztwReV(K(Q7{?s=I?Z}_q
zE99)EeHD^Pc~zE^PdGlppE<*QUb2_gK0$wluLrHmpA~dAy{erlg*jSWa~NVRgBqo!
zqt6#n5sLg)*z}x>u68uivs-ILuF)FJDiv4>QN%UWs_HGw+p1=Gh0Fs{laz*6&)yEm
z>YGd|u@uw4k=N^a(BZhHh`YI)XKu@`l&+U(FL$}Pv0Pj!B`>@-!CyNw$^|*~+QuOG
zkKRyTjqpF9$>_<T<(N(Ejdl0@Gb2nUDDATs%II@Hk57EhnwUP>?imY7xo6;q7>QZQ
zUQXzs7Gmq4Y+N@t8N})qt8TlB-CK(e8E0Tw?F;V6_Rx{G{F}0FNk@~(^RGN@QsYt)
zZJp7HUOWER_N1nMsy|!|%s=deR|j=AAZcsN@q@ul-2+{yc>K;uE4F<0wxwLVLi_pU
zpkkeK9YC%A-P3uxC}D0GI{v|(PMZ4^{|}p|cH5u9wIBGJ(eP_0-`Vw?Yw-zQER1v}
zM1IKSE!r{}mQKIB#a;NbT^t&6;-G8j+fnmJj-z!w=l+=pfBrnz4ck-t{%u!x3gqp>
zo(qnzfqWB_HSg+ePfIi{GB+NR-HCT1{QF6+oAd<%zhex90)NKYLFW>5slJkKSn!u8
zH|TejkHd2jKAGg6I2RHF-Z@zDnP7i|nL(TI8^Mt2gRcROKRJ9f2=uM*DxL2<Pmc*d
zczc4snH)L%0#MAz;6LfR-Q%Y%gxwD<!?D-f?(#c$^iB|AFw;c1*Q(z2yCawJ$?jMp
z!k<0Mb(gKy$O>&o(JlPu>`V_Fyd7*yAkWpNH_`X!(n7-AL+H2@#KGX5wD14_Iu!rf
zUCHAW1V8`;KmY_l00ck)1V8`;KmY_l;HVHd8{VAU&zA<6-~Wf-|2ryLMLR(N1V8`;
zKmY_l00ck)1V8`;K;Uo$@cVy<<Azco00JNY0w4eaAOHd&00JNY0w8dd2w?qxl(dDm
zf&d7B00@8p2!H?xfB*=900@A<;RxXV|HE-ZDG&ew5C8!X009sH0T2KI5C8!XI7$R?
z{r@Ow3vC4f5C8!X009sH0T2KI5C8!X0D;31!217i+)xSxKmY_l00ck)1V8`;KmY_l
z00fQ_0o?z8l(dDmf&d7B00@8p2!H?xfB*=900@A<;RxXR|KYfy6bOI-2!H?xfB*=9
z00@8p2!H?x93=u+{~sl7p{*bQ0w4eaAOHd&00JNY0w4eaAaFPWxc~of+)xSxKmY_l
z00ck)1V8`;KmY_l00fQ_0bKt-O4>qOK>!3m00ck)1V8`;KmY_l00cnba0IaaKO8rd
z0s#;J0T2KI5C8!X009sH0T2LzqeQ^G|DTJ08=^lvKmY_l00ck)1V8`;KmY_l00ck)
z1YSG>VJ;ks;q(75o?_7>5C8!X009sH0T2KI5C8!X009u_CxG>TKM@>*00@8p2!H?x
zfB*=900@8p2!OzgM*yGyfAMsR9)SP|fB*=900@8p2!H?xfB*=9KtBPj|NDvH7z987
z1V8`;KmY_l00ck)1V8`;UOWQ0|Nq6)DS89~AOHd&00JNY0w4eaAOHd&00R94{ttLC
B#c2Ql
diff --git a/management/server/testdata/store_with_expired_peers.sql b/management/server/testdata/store_with_expired_peers.sql
new file mode 100644
index 000000000..100a6470f
--- /dev/null
+++ b/management/server/testdata/store_with_expired_peers.sql
@@ -0,0 +1,35 @@
+CREATE TABLE `accounts` (`id` text,`created_by` text,`created_at` datetime,`domain` text,`domain_category` text,`is_domain_primary_account` numeric,`network_identifier` text,`network_net` text,`network_dns` text,`network_serial` integer,`dns_settings_disabled_management_groups` text,`settings_peer_login_expiration_enabled` numeric,`settings_peer_login_expiration` integer,`settings_regular_users_view_blocked` numeric,`settings_groups_propagation_enabled` numeric,`settings_jwt_groups_enabled` numeric,`settings_jwt_groups_claim_name` text,`settings_jwt_allow_groups` text,`settings_extra_peer_approval_enabled` numeric,`settings_extra_integrated_validator_groups` text,PRIMARY KEY (`id`));
+CREATE TABLE `setup_keys` (`id` text,`account_id` text,`key` text,`name` text,`type` text,`created_at` datetime,`expires_at` datetime,`updated_at` datetime,`revoked` numeric,`used_times` integer,`last_used` datetime,`auto_groups` text,`usage_limit` integer,`ephemeral` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_setup_keys_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `peers` (`id` text,`account_id` text,`key` text,`setup_key` text,`ip` text,`meta_hostname` text,`meta_go_os` text,`meta_kernel` text,`meta_core` text,`meta_platform` text,`meta_os` text,`meta_os_version` text,`meta_wt_version` text,`meta_ui_version` text,`meta_kernel_version` text,`meta_network_addresses` text,`meta_system_serial_number` text,`meta_system_product_name` text,`meta_system_manufacturer` text,`meta_environment` text,`meta_files` text,`name` text,`dns_label` text,`peer_status_last_seen` datetime,`peer_status_connected` numeric,`peer_status_login_expired` numeric,`peer_status_requires_approval` numeric,`user_id` text,`ssh_key` text,`ssh_enabled` numeric,`login_expiration_enabled` numeric,`last_login` datetime,`created_at` datetime,`ephemeral` numeric,`location_connection_ip` text,`location_country_code` text,`location_city_name` text,`location_geo_name_id` integer,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_peers_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `users` (`id` text,`account_id` text,`role` text,`is_service_user` numeric,`non_deletable` numeric,`service_user_name` text,`auto_groups` text,`blocked` numeric,`last_login` datetime,`created_at` datetime,`issued` text DEFAULT "api",`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_users_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `personal_access_tokens` (`id` text,`user_id` text,`name` text,`hashed_token` text,`expiration_date` datetime,`created_by` text,`created_at` datetime,`last_used` datetime,PRIMARY KEY (`id`),CONSTRAINT `fk_users_pa_ts_g` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`));
+CREATE TABLE `groups` (`id` text,`account_id` text,`name` text,`issued` text,`peers` text,`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policies` (`id` text,`account_id` text,`name` text,`description` text,`enabled` numeric,`source_posture_checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_policies` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policy_rules` (`id` text,`policy_id` text,`name` text,`description` text,`enabled` numeric,`action` text,`destinations` text,`sources` text,`bidirectional` numeric,`protocol` text,`ports` text,`port_ranges` text,PRIMARY KEY (`id`),CONSTRAINT `fk_policies_rules` FOREIGN KEY (`policy_id`) REFERENCES `policies`(`id`) ON DELETE CASCADE);
+CREATE TABLE `routes` (`id` text,`account_id` text,`network` text,`domains` text,`keep_route` numeric,`net_id` text,`description` text,`peer` text,`peer_groups` text,`network_type` integer,`masquerade` numeric,`metric` integer,`enabled` numeric,`groups` text,`access_control_groups` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_routes_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `name_server_groups` (`id` text,`account_id` text,`name` text,`description` text,`name_servers` text,`groups` text,`primary` numeric,`domains` text,`enabled` numeric,`search_domains_enabled` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_name_server_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `installations` (`id` integer,`installation_id_value` text,PRIMARY KEY (`id`));
+CREATE TABLE `extra_settings` (`peer_approval_enabled` numeric,`integrated_validator_groups` text);
+CREATE TABLE `posture_checks` (`id` text,`name` text,`description` text,`account_id` text,`checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_posture_checks` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `network_addresses` (`net_ip` text,`mac` text);
+CREATE INDEX `idx_accounts_domain` ON `accounts`(`domain`);
+CREATE INDEX `idx_setup_keys_account_id` ON `setup_keys`(`account_id`);
+CREATE INDEX `idx_peers_key` ON `peers`(`key`);
+CREATE INDEX `idx_peers_account_id` ON `peers`(`account_id`);
+CREATE INDEX `idx_users_account_id` ON `users`(`account_id`);
+CREATE INDEX `idx_personal_access_tokens_user_id` ON `personal_access_tokens`(`user_id`);
+CREATE INDEX `idx_groups_account_id` ON `groups`(`account_id`);
+CREATE INDEX `idx_policies_account_id` ON `policies`(`account_id`);
+CREATE INDEX `idx_policy_rules_policy_id` ON `policy_rules`(`policy_id`);
+CREATE INDEX `idx_routes_account_id` ON `routes`(`account_id`);
+CREATE INDEX `idx_name_server_groups_account_id` ON `name_server_groups`(`account_id`);
+CREATE INDEX `idx_posture_checks_account_id` ON `posture_checks`(`account_id`);
+
+INSERT INTO accounts VALUES('bf1c8084-ba50-4ce7-9439-34653001fc3b','','2024-10-02 17:00:32.527528+02:00','test.com','private',1,'af1c8024-ha40-4ce2-9418-34653101fc3c','{"IP":"100.64.0.0","Mask":"//8AAA=="}','',0,'[]',1,3600000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO setup_keys VALUES('','bf1c8084-ba50-4ce7-9439-34653001fc3b','A2C8E62B-38F5-4553-B31E-DD66C696CEBB','Default key','reusable','2021-08-19 20:46:20.005936822+02:00','2321-09-18 20:46:20.005936822+02:00','2021-08-19 20:46:20.005936822+02:00',0,0,'0001-01-01 00:00:00+00:00','[]',0,0);
+INSERT INTO peers VALUES('cfvprsrlo1hqoo49ohog','bf1c8084-ba50-4ce7-9439-34653001fc3b','5rvhvriKJZ3S9oxYToVj5TzDM9u9y8cxg7htIMWlYAg=','72546A29-6BC8-4311-BCFC-9CDBF33F1A48','"100.64.114.31"','f2a34f6a4731','linux','Linux','11','unknown','Debian GNU/Linux','','0.12.0','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'f2a34f6a4731','f2a34f6a4731','2023-03-02 09:21:02.189035775+01:00',0,0,0,'','ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzUUSYG/LGnV8zarb2SGN+tib/PZ+M7cL4WtTzUrTpk',0,1,'2023-03-01 19:48:19.817799698+01:00','2024-10-02 17:00:32.527947+02:00',0,'""','','',0);
+INSERT INTO peers VALUES('cg05lnblo1hkg2j514p0','bf1c8084-ba50-4ce7-9439-34653001fc3b','RlSy2vzoG2HyMBTUImXOiVhCBiiBa5qD5xzMxkiFDW4=','','"100.64.39.54"','expiredhost','linux','Linux','22.04','x86_64','Ubuntu','','development','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'expiredhost','expiredhost','2023-03-02 09:19:57.276717255+01:00',0,1,0,'edafee4e-63fb-11ec-90d6-0242ac120003','ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMbK5ZXJsGOOWoBT4OmkPtgdPZe2Q7bDuS/zjn2CZxhK',0,1,'2023-03-02 09:14:21.791679181+01:00','2024-10-02 17:00:32.527947+02:00',0,'""','','',0);
+INSERT INTO peers VALUES('cg3161rlo1hs9cq94gdg','bf1c8084-ba50-4ce7-9439-34653001fc3b','mVABSKj28gv+JRsf7e0NEGKgSOGTfU/nPB2cpuG56HU=','','"100.64.117.96"','testhost','linux','Linux','22.04','x86_64','Ubuntu','','development','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'testhost','testhost','2023-03-06 18:21:27.252010027+01:00',0,0,0,'edafee4e-63fb-11ec-90d6-0242ac120003','ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINWvvUkFFcrj48CWTkNUb/do/n52i1L5dH4DhGu+4ZuM',0,0,'2023-03-07 09:02:47.442857106+01:00','2024-10-02 17:00:32.527947+02:00',0,'""','','',0);
+INSERT INTO users VALUES('f4f6d672-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','user',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 17:00:32.528196+02:00','api',0,'');
+INSERT INTO users VALUES('edafee4e-63fb-11ec-90d6-0242ac120003','bf1c8084-ba50-4ce7-9439-34653001fc3b','admin',0,0,'','[]',0,'0001-01-01 00:00:00+00:00','2024-10-02 17:00:32.528196+02:00','api',0,'');
+INSERT INTO installations VALUES(1,'');
diff --git a/management/server/testdata/store_with_expired_peers.sqlite b/management/server/testdata/store_with_expired_peers.sqlite
deleted file mode 100644
index ed1133211d28b5b2faf4963e833b2ac521ff7fe0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 163840
zcmeI5Pi!06eaAVXB}%esuCv+9D!WQ(InJ7}C2{yi6df2_N}{xi^~b9}>$Ml@a7aE;
zW05oT%utrRNCB?1Mi8J#i{@CMIrY#(QUqwW*PMzTg7#7%*P=c2(%T*iY!3a+U(WE4
zCDoh4t9)sh!+G!b-n{qu{oe2Q-pp{g{r;M4u=t*;H6$aR4!suQxX_=(<DpRKZTf$M
z{=2Vl(uWJ~4sAK#=RqIe4$WvkA2x+!Uzjp)#J(8+)uoTdZ;uR*$A&)}-VW~%-w0pe
zq@mA3zX|<}{?Y5^*GBkvC%BNTRN0aKxK0ferIw*u`(jN~TTNXQ?CtCA$=4$M`+2T?
z$I6zgM`Dv{x~fQZQL0p!u8W3xz!Y6<=}Z&lYX96Ti(AFQPBFf^u~hspUOKs&QhakG
zUg}?2=|;&pSSj(z_T>nl&vQR27*e^;`WNV*8gtsTQ&?Cl4m?);2DP>nH`tMJ%R8*I
zt4IyzX6;M*KC9X=+%$I7lr_naRYj~y28o*QhTLGcN)?UK=c-sfc7@#($?(h7CEYO5
zQWLzw_qJBo3tJE3cZ(0~)+KH&Zf<PvY!y~FcH*VI14|dW*px&=7i*>X^5#}?b!EdT
z;IWHu6_<-!#f`<{cHHWkPGqUGiNxL52ruRbnMi+}qR>D6wQ@AVXL+tY>{*c60^Kwp
zwWSzjGuHm)UK8n-vyH+^rIvQemlDtJT#WEM&pm%&nSmu@y<G|_*)AK<sjnJGt(sc*
z)GF&DHTF=hFbirauCy9VlPkAMim6prXVw9I>3(t1Zz1LwbB33z^KxCS9GJTGYPIxT
zS8KB3Q@Cd>LEDgZy=4|QZ8N@9TrTXc?Zl^~raX14Br681Iku;<J%U_{TWL(|lj##S
zj+<`hPqs6Mojv&bn3|7mB4BN9LD%3Cmqz$I{2+s~v?dDHCR!fvHm4>Fnv=DEvDcis
z<y;>_rMt{&ZES>phv#I^V(p>_jNp*;_@KH;AXurHkoa*VVj1U88;*~nDy(`&gT`s4
zl}<2D>kzg#(wWg}ioOK7=^9pp%u?J}b;ECfR$@&RRXrefz%+%`14$KCbB&;6m1@={
z!wg~psjhldT|A_ok+%y-Ju&(wx8%Obc4PWxDa?4HY6qfJt!fl^Sg;rRv2L)2Iap;1
zO*Ed$ObfKb5ol^^wN)_!Bh%`lli!e()}B-`T3T0mrX0$esx+8F4%$|LRc=qNcbekI
zU8SH{m&zTqrhY};kc^g@L4I9lEHKRd0u@zJScO7_&pG(>EgvCT5oVx_#vZq1VkJsV
z>h_^TO7<L$IhZW3;MkJB@3$nKc9~*ERR8gP$F!qb9}%-(r}ST}xzEU%2AV|<(XQI*
zzZp9_X6?(R$e|sJ6}9RaY9~`RjsyDja%xPqG6L@K3~tUEp}i6H^lonSMQ+Znox&)M
zqOrq~2><R?u07%TAaA()LuV&3((9BunZ96aJE%@pm+O1>-3t-^>Q(MJZ#k=uT<6np
z&~0@x&fvTJ1H~6|21GjB%&FgjxlyZWPKl~rsTw<^38~*~$<%3LM$<0x7+wtQH?b=9
z3DGTGsxh%HH)J}tSGtesp23Vd#9qRd(!(SC%GE(3({~7=^LeBkj_~P8uFZK?<wjz$
zsx~B9ad$8DT9cdQNZNMfCXyA|6_gU6-s2+t<RteKa&_cDTnTqO6to^UIcPiXWcZ}%
zv2#qvAKQB(c@S1pHE(83b2ulbsmTqA+=g>dpF4Dei(DoDF7L@5=kMmw*7f^t5_$OU
zBs>22EX9lhqyR%!YSau_w|uHdQHIRQj3r$&LQmB4^`~&SFD~F~h$pDATB|N;&LZJZ
zW>3W4d8jAttOqH6G^N@gukT4eqG<1w=#35iq$+huZUmflKuW6D)hB}x(X>~SXgNxO
z%nfjTf|ggGE$&W?$t6%gl*xmrTJQk91357}G{P@V4jOB&35$aJDQvE@L!qx<j?z09
zTME%1ULXJhAOHd&00JNY0w4eaAOHd&00J){(9Uyj>_*oo-x}M!A053iHat2yYObrx
zdqQPCIiHy>OWEXfrowX5`Aj-LozBc<)5)Z;S4o#s$y8=qNKPkHaUpj*nY^7&&16%#
zY-;{yGDZ6a(~X&m+Mp9dhji9RvZ|ya`%=cLGDTGi^LCYjRb}PlsnvT^x2J?;a%L_w
zlblIT-I`jL^aDzpot-Zf3U}^I{qUn7gqM^5`18;>wUdkeE<}HLfdB}A00@8p2!H?x
zfB*=900@8p2z<o|yc6CXJI(nAd;R};DE9eRtb=GS2!H?xfB*=900@8p2!H?xfB*=9
zzzYdn3{Q@^_Z8Up|HneH*b9pw69hm21V8`;KmY_l00ck)1V8`;&J%&Q!o{MyyVoYS
zx3@<}-@P(AdYX&qh1BAFaW1tmot|ILPG_>&^z=enC{8ae&CM;&<>wZQ3kyqZPiobT
zI6VzXWAw}pdhi6@`!7r<=ck2yJe9ninY*2$oAr~~e0pv^m9lUDPo+(f{IoDXSmfkd
zlJsSRY3nae-!QQLZd&gj{lLEd|NBtv_vcBC=nDvd00@8p2!H?xfB*=900@8p2!Mb~
zARLa4;rstC4QxRG1V8`;KmY_l00ck)1V8`;K;WxK;I!ZWH}C%skL#h!-@a6&4PGDs
z0w4eaAOHd&00JQJWfOR|8NQL-Wzn0H^n<t)6VYqYXeb(u7DAJgbkFVRZhLxkbbEdD
zN;EoJsilQEL9466zMii<&Sz@X+G%dcZG2Ez*uMKHHD5ct`TZ?@FUOJ_#g)6Y?ah^)
zz1>;m-a@L<Y^`MH-rK$7J}6rdax?k4Df5f5=I@f$Wu<krX1=9TGs(=+{G2$K*)7wr
zI<~6pkk!?u`QvCGPc7EfR+S#DO%K_==llk#x%Wf29(PMO`=+Op^fwn5=5MEj+o{}4
zDw|5uW4cqhn@NFg%Vkw*kFgA!o=fkQrv-skrt`__96cL6laeYzif-dg)9+qRvuY}v
zrJIK7QQn2c^u|+ZQK&y$S`{{Sidi#lb>sfw;qJlmaz%TTnP0rWbFi^no~^30N;V}6
zYuW01nWg=e*3Hbr*1FfMTs)b-O^+PU<YqFN)O<E4B<JjA4R}O(K10nmA5lIv_3ZwT
zrP0K-E{$Hhwmmv#X>`ofXfj(@=;z#o{exQSQC7$_lc&+>R(<<8b@)_WNxgTxzOb{q
z+W2r&{$PJ`L6#S!?Bk{E(bM^Gre#X;iIzN-mOgX<m`eo?USC#LhhcIO#6!N#T
zq}kkDPRNm(zGTg=m+xjDe)xTTWpnesy0DYkY#iJ(YSnuWS?c{<d8xHM`}C2LT6}o4
zf48ey8M3*VTwa)?|MSABHT$QWsoC9|*LnWRThq}AcdTB&ZjRL`ja5&xdxuR;x5nyY
zRn6qpef3mhHLD%&A8PX5?>|g$=hdSJJL(6IvO7<g*7L3W@qFc|mfJU0*YDRK6l!;f
zXlAaE%1_TNEY447(t<F(u(-T9onKs9SWc&xg+gY&GoCXuX<=$FC8aZab5bUk7CK{E
z5L(KCqCQcUSXq{o_{zratTot^GXf3w!Nb~Lo&R%?HVyA&YDSpPC)3$n&M|^h4c)b;
zySv*DR%X{$ln>^gN?JL!y|QuBkju089^PEfRn{{1jh&~v+D`MpJERaNqsz>b>CMaw
zxm-R!m#1G3Fg*&1^!s%I-_SL$|A%A04#oZ}_Aj)-3j{y_1V8`;KmY_l00ck)1V8`;
zK;V@j@Mbv6^*c8jwljK9u?_Lz>{zAG85(>2uY_X%8vC1=^2&4&4FLfV009sH0T2KI
z5C8!X009sHfv+%uWSDVhxi=|n7C6hTFGI6oHg=XfD(v<D^HA(}v0uiXe}&Pa=^y|C
zAOHd&00JNY0w4eaAOHd&@X8ao5#Hra^DUV0X$6PQ^8Npz%l{mTF?z!b1V8`;KmY_l
z00ck)1V8`;KmY_@bpq{)q076wJUx@(%ILf6ua8Dg^E8dqthuFXLsmZe!NA|p>;E15
zc_B}a&oCd4AvNXpn;f<6jZWM4=!pc?xm@Z+Px?4b+gdu)Uao28_5Y#RFGF<o|97vt
ziqSq0009sH0T2KI5C8!X009sH0TB2jAz)trKh22^>-zs`&N6uGf4cwwkAxw*2?8Jh
z0w4eaAOHd&00JNY0w4eauR4K0$o>DJ*IxB*qkSL%0w4eaAOHd&00JNY0w4eaAOHd{
zL%_WLkM;k{5JXuJ009sH0T2KI5C8!X009sH0T6ig31I#I>gxzC1OX5L0T2KI5C8!X
z009sH0T2Lzmn9H2E5QB#FN+c7K>!3m00ck)1V8`;KmY_l00cnbl_r4e|F5)q&^QnP
z0T2KI5C8!X009sH0T2KI5cpCEL}ULGy3G9|bm{ZhKVABZ@n2o~X#Dob@OW(av*GRV
zUxoL>7r0*xeHQvn=x6kgUN^rs!oNGgg=D45j`YWM*<hm7GE{3{tZ8bisf&WWeZ4*T
zT7-W;&$aJZ*>d$rY%)z(6{#*tl?u~!(NGVVqKoDa8H#e%?$RIj82wvtWpS%m*eS+W
zH<pSY#!DwRwG`jnh?n|TR=QDgI#f!0vVA$i=kwf;3Wij!v;GD8r^cK%?GzT)iq^5d
z)XMtkp%lMCT`$EAc4XZ0`rzy;QiHi!`;xxTs<!srG<MXKHOY`wMXX8&iJI?*++ep#
z6^+s7s#rdDh20d%@XOUD-7sx|n&1__x3#)n*m@AZTYO-*E^%vdb7OmFtFXGU6EE!@
zSjMA^O-VF#u~v#NZ*CP=S2mmio+9E~#pU8wabvN#9k;rslbWcri9|UX;j=u~9`>x%
zETo$zs<sq^?9$r5+-oA;a<)-esZ@EVJRRiH2!DqkG;ZvA1Zxw0cIRS*=Xvh=1IuEp
zMC<KR&>pO`pvHVhbd;v4bx&!sE>gb^<qETqmEuaP!8EyYtE8AZV|8X7(3kEP7ybG-
zhrBb|U5%FOYURMxoL8%*&AM8X6`wjiTL@}i*7cTI*tER(QgOMkyS5XbqTf!Px>b@D
zgVh|%(%2s9qZGH&nARuLCu|%y-OitEMGiaL7xghDAKOI0mfV7#IgNLlQ<DYF$=biz
zYfjyAu8*P8UFNhlHp0KdbFyc#cF_YyJtpb#L3NWruu?N2@#9Fuvbdi%93MqhSoMqs
zEzU|i$>OX-*bYQzMyo0M66B_9Ee*0YabML9zg1a@HC0sgfY<@k6jl!;RaDK@Y{@Fs
ztV_n8sx<;qUG=ECct|}X2NjTdV)RXJ$$gXU#`MinnDIo_4n(P1)hM>HU@!Dz-CzxK
z1j-ctXpoed7HEef(A3mwt6~I(o7F`pzac5DJ*i@}w65|@Ig~Y3X)uL+s;vO4+@4(T
zG{uj*N`bd7l{;un{ffFF87(t|T(QnrVC?z@DypKe3VC(ki1+7P17Ea)!ax~~J#NXw
zN|c(^?L&!_?0FB<y;(!uu_b-qZ%I1sGR2Ij{^R?OX$PV{B4)o%>6BP=pOJ?QG>g2P
zUA5DHGu(B|+Lud_Lpv5LYSlB;PNr-e2lVUZ)R<~z1bo~Xe3vysdxPMqeOF@iMPbUW
zU9dJ|ha(aG-K$)C!t+7iaQBDKPGY3jDRnY^!Pa(Aovbd`_w2hDBK*~>+;iS?Rvo#{
zr{SR6>SUb3clig3FOCcdU$&W3zXQ{mR@0otRJ&3&c1V+6zuA(h(_D&XO5`!Tz}9ar
zRO%CVTe?(ZVqI>?bZoD5AJaX98Fh%gge|3qNBEVigQh&bLkOMEBjs>}Pfv1f&a)~v
zyoyz|A<2rnd!g5w+$=}Zwj(!@tjMmQl=$=>7vU!-xu1}$BM0J2xZ9zi^|;AF+i~Zw
zC(US`V><rW-V@1#u$roQlVO^eIXO*DZb;-doP+w@p&MM}D*1PLPwqH>H;1;a-*=P9
z!*?gy@yBN=W)vU=7_w5MX2`nbQ$>n0WL9P@>6+$wqL!~eg~NSu0bfHrL5<Z~bxCvP
z^@lQhBKA%$J!xmnN%5m8)dqQePx=u>d#6NiZ0ILdsY`Mr;H(2uQoXJ|8H9-DvYJFo
zUJ7Jxfa?>qy!vc$ceYC|fdZmT9z@lG2k0HhiP@nMesOZpSaVHS6x>f?T4|4(tL^CM
zZ$o_Oz0gHr{4d8Ijolgjx5%H5{&i$>xHR&g7ycuB`NFS<{x<aQLsICy*vFUuJNkE*
z|2}&4(mzn)-`Z<+_r3j%Z%6n|fotczfopnDYr#R?caS@Wr|8z3In_I$dxhMAVZ}#t
z0p2Up6)ryc;bept1n$%8)?n|I?@fsZ9YC)@&=qt#<&8DpO1aAPiY7PBWwAfo0pkr%
z8;~pExB=hrxBY`B-p_U=t+Ma<5xv*UdX1)g8SUDJJpnP7ejUa2EUSH;e(`E(@mnMO
zePNJg_Oca)-n6TGZ%6pt1lJz(jEhb*8RopvTcX<u-|jV{9!Wbc*vVbS^6dIIBmBe!
z_uMuXTgHB$3>t+~JnlbV(rJvVN5>DlyIo2=V5})x75NlRMSQc~KGtKp6SqRkwFFJa
zb^Z37#hVW_B>i!Vrn2U2)SF_{@_?5AJ{R0;R>8`thvrE;n)(`aV&NpOG|<3ocrP)v
zxcSzL&O$oX3-<O~A5TR1!ga1a=^0N`t;>~TQESn{NOX4Osz3GZUOVz<cM3VHX<vn8
zQeKs%#50bM@Yk<%pBC+<wNKDr;WvZU<<AN_n@-ivl)@Y>t~vCvmR^n0($VLOs0c-V
zD{OksMORxI>DjHdELUlbW|a!8gec+~YDM)H=1o;Iyh7%Vs7XrAtLJ0~Wc5uZl~{`D
zK9SeydC=jwrHH$EHqSgQyHs2&(z)El!uDceshG&UIl|w)KF9?*_1eZD`1jsYz7gTS
zN0ZSjLCZ0l*ct2Y@h1kDOi<cqFO<>cem=SMb!%e!?4V;TB;_7~?_(rpB_}zdvs#F)
zf3k7iJjozd_F3h?RqV-HbjUaZ%W7ZnjBE!TY0H07)-CC1GBNwcizYQL717oi9q7%A
ze`Zf=_FnG}7d`V2JK-C>I_r_NHRkxi;7Q#xU8wlvJ6EjO@}p~(a_tK3_pb#N>m2J0
zYW1Hzy+s!#%oB!=e{iRh=6Q<$hm)sv+h4-9pZS_m|7$0Iu<JQ@V<WtnALvYoe4oo(
zbjqY(I(_e!%YA7Vhx!~i=o-4tsQDwuSL=Gtqw5iVc9v_0?J0ftX;*g&<ei7T5gcDV
z`6ec7-qkrhEzz{dJn@)lk9;S>uOzs3!WRVmjxi7l{2A}`I+vhJ^_6tPg1<buLBFf~
zBs>-26AA8_b0IO{or4u$5B4{h8MFz%5%ifp_!{8&lmB}(2=uM%DxL2*FOCV{yEeja
zCI$|_02DJa_z(Ks_Qk6f!uI=?;n?eKcljOM`%VyHFw;bM(yHF|y91Z;iS|%D!oTwl
z*Iu+*BP(<|s!o?N$W!Zqoom6i1oB*MdJ}zrE-fU?a|kVWg4i3p6S)81J%fQQ2!H?x
zfB*=900@8p2!H?xfB*=bUjlgk-}%)odIka@00JNY0w4eaAOHd&00JNY0xkhu|944X
z3j!bj0w4eaAOHd&00JNY0w4ea=a&H1|L0e?=otur00@8p2!H?xfB*=900@8p2)G1r
z|G!HDTMz&N5C8!X009sH0T2KI5C8!XIKKpN{r~*x7Ci$25C8!X009sH0T2KI5C8!X
z00EZ(*8eUEY(W47KmY_l00ck)1V8`;KmY_l;QSK6{r~4zx9AxNfB*=900@8p2!H?x
zfB*=900_7QaQ)vUfh`Dt00@8p2!H?xfB*=900@8p2%KL6SpT12-J)k800JNY0w4ea
zAOHd&00JNY0wCZL!2SO&32Z?C1V8`;KmY_l00ck)1V8`;K;Zlm!1e$0t6TI81V8`;
zKmY_l00ck)1V8`;KmY_>0$BgMB(Mbm5C8!X009sH0T2KI5C8!X0D<#Mz`XyTi+vHI
zKfFKy1V8`;KmY_l00ck)1V8`;KmY{JAAv9z4n^_(|MRC<^aun%00ck)1V8`;KmY_l
z00ck)1iA@e{ohRl`yc=UAOHd&00JNY0w4eaAOHd&aQ+D3`~T-pr|1y~fB*=900@8p
z2!H?xfB*=900?vw!1}+N2=+k$1V8`;KmY_l00ck)1V8`;K;Zll!2SQ{Pp9Y+2!H?x
WfB*=900@8p2!H?xfB*<|6Zl`7K~6CM
diff --git a/management/server/testdata/storev1.sql b/management/server/testdata/storev1.sql
new file mode 100644
index 000000000..69194d623
--- /dev/null
+++ b/management/server/testdata/storev1.sql
@@ -0,0 +1,39 @@
+CREATE TABLE `accounts` (`id` text,`created_by` text,`created_at` datetime,`domain` text,`domain_category` text,`is_domain_primary_account` numeric,`network_identifier` text,`network_net` text,`network_dns` text,`network_serial` integer,`dns_settings_disabled_management_groups` text,`settings_peer_login_expiration_enabled` numeric,`settings_peer_login_expiration` integer,`settings_regular_users_view_blocked` numeric,`settings_groups_propagation_enabled` numeric,`settings_jwt_groups_enabled` numeric,`settings_jwt_groups_claim_name` text,`settings_jwt_allow_groups` text,`settings_extra_peer_approval_enabled` numeric,`settings_extra_integrated_validator_groups` text,PRIMARY KEY (`id`));
+CREATE TABLE `setup_keys` (`id` text,`account_id` text,`key` text,`name` text,`type` text,`created_at` datetime,`expires_at` datetime,`updated_at` datetime,`revoked` numeric,`used_times` integer,`last_used` datetime,`auto_groups` text,`usage_limit` integer,`ephemeral` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_setup_keys_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `peers` (`id` text,`account_id` text,`key` text,`setup_key` text,`ip` text,`meta_hostname` text,`meta_go_os` text,`meta_kernel` text,`meta_core` text,`meta_platform` text,`meta_os` text,`meta_os_version` text,`meta_wt_version` text,`meta_ui_version` text,`meta_kernel_version` text,`meta_network_addresses` text,`meta_system_serial_number` text,`meta_system_product_name` text,`meta_system_manufacturer` text,`meta_environment` text,`meta_files` text,`name` text,`dns_label` text,`peer_status_last_seen` datetime,`peer_status_connected` numeric,`peer_status_login_expired` numeric,`peer_status_requires_approval` numeric,`user_id` text,`ssh_key` text,`ssh_enabled` numeric,`login_expiration_enabled` numeric,`last_login` datetime,`created_at` datetime,`ephemeral` numeric,`location_connection_ip` text,`location_country_code` text,`location_city_name` text,`location_geo_name_id` integer,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_peers_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `users` (`id` text,`account_id` text,`role` text,`is_service_user` numeric,`non_deletable` numeric,`service_user_name` text,`auto_groups` text,`blocked` numeric,`last_login` datetime,`created_at` datetime,`issued` text DEFAULT "api",`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_users_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `personal_access_tokens` (`id` text,`user_id` text,`name` text,`hashed_token` text,`expiration_date` datetime,`created_by` text,`created_at` datetime,`last_used` datetime,PRIMARY KEY (`id`),CONSTRAINT `fk_users_pa_ts_g` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`));
+CREATE TABLE `groups` (`id` text,`account_id` text,`name` text,`issued` text,`peers` text,`integration_ref_id` integer,`integration_ref_integration_type` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policies` (`id` text,`account_id` text,`name` text,`description` text,`enabled` numeric,`source_posture_checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_policies` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `policy_rules` (`id` text,`policy_id` text,`name` text,`description` text,`enabled` numeric,`action` text,`destinations` text,`sources` text,`bidirectional` numeric,`protocol` text,`ports` text,`port_ranges` text,PRIMARY KEY (`id`),CONSTRAINT `fk_policies_rules` FOREIGN KEY (`policy_id`) REFERENCES `policies`(`id`) ON DELETE CASCADE);
+CREATE TABLE `routes` (`id` text,`account_id` text,`network` text,`domains` text,`keep_route` numeric,`net_id` text,`description` text,`peer` text,`peer_groups` text,`network_type` integer,`masquerade` numeric,`metric` integer,`enabled` numeric,`groups` text,`access_control_groups` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_routes_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `name_server_groups` (`id` text,`account_id` text,`name` text,`description` text,`name_servers` text,`groups` text,`primary` numeric,`domains` text,`enabled` numeric,`search_domains_enabled` numeric,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_name_server_groups_g` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `installations` (`id` integer,`installation_id_value` text,PRIMARY KEY (`id`));
+CREATE TABLE `extra_settings` (`peer_approval_enabled` numeric,`integrated_validator_groups` text);
+CREATE TABLE `posture_checks` (`id` text,`name` text,`description` text,`account_id` text,`checks` text,PRIMARY KEY (`id`),CONSTRAINT `fk_accounts_posture_checks` FOREIGN KEY (`account_id`) REFERENCES `accounts`(`id`));
+CREATE TABLE `network_addresses` (`net_ip` text,`mac` text);
+CREATE INDEX `idx_accounts_domain` ON `accounts`(`domain`);
+CREATE INDEX `idx_setup_keys_account_id` ON `setup_keys`(`account_id`);
+CREATE INDEX `idx_peers_key` ON `peers`(`key`);
+CREATE INDEX `idx_peers_account_id` ON `peers`(`account_id`);
+CREATE INDEX `idx_users_account_id` ON `users`(`account_id`);
+CREATE INDEX `idx_personal_access_tokens_user_id` ON `personal_access_tokens`(`user_id`);
+CREATE INDEX `idx_groups_account_id` ON `groups`(`account_id`);
+CREATE INDEX `idx_policies_account_id` ON `policies`(`account_id`);
+CREATE INDEX `idx_policy_rules_policy_id` ON `policy_rules`(`policy_id`);
+CREATE INDEX `idx_routes_account_id` ON `routes`(`account_id`);
+CREATE INDEX `idx_name_server_groups_account_id` ON `name_server_groups`(`account_id`);
+CREATE INDEX `idx_posture_checks_account_id` ON `posture_checks`(`account_id`);
+
+INSERT INTO accounts VALUES('auth0|61bf82ddeab084006aa1bccd','','2024-10-02 17:00:54.181873+02:00','','',0,'a443c07a-5765-4a78-97fc-390d9c1d0e49','{"IP":"100.64.0.0","Mask":"/8AAAA=="}','',0,'[]',0,86400000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO accounts VALUES('google-oauth2|103201118415301331038','','2024-10-02 17:00:54.225803+02:00','','',0,'b6d0b152-364e-40c1-a8a1-fa7bcac2267f','{"IP":"100.64.0.0","Mask":"/8AAAA=="}','',0,'[]',0,86400000000000,0,0,0,'',NULL,NULL,NULL);
+INSERT INTO setup_keys VALUES('831727121','auth0|61bf82ddeab084006aa1bccd','1B2B50B0-B3E8-4B0C-A426-525EDB8481BD','One-off key','one-off','2021-12-24 16:09:45.926075752+01:00','2022-01-23 16:09:45.926075752+01:00','2021-12-24 16:09:45.926075752+01:00',0,1,'2021-12-24 16:12:45.763424077+01:00','[]',0,0);
+INSERT INTO setup_keys VALUES('1769568301','auth0|61bf82ddeab084006aa1bccd','EB51E9EB-A11F-4F6E-8E49-C982891B405A','Default key','reusable','2021-12-24 16:09:45.926073628+01:00','2022-01-23 16:09:45.926073628+01:00','2021-12-24 16:09:45.926073628+01:00',0,1,'2021-12-24 16:13:06.236748538+01:00','[]',0,0);
+INSERT INTO setup_keys VALUES('2485964613','google-oauth2|103201118415301331038','5AFB60DB-61F2-4251-8E11-494847EE88E9','Default key','reusable','2021-12-24 16:10:02.238476+01:00','2022-01-23 16:10:02.238476+01:00','2021-12-24 16:10:02.238476+01:00',0,1,'2021-12-24 16:12:05.994307717+01:00','[]',0,0);
+INSERT INTO setup_keys VALUES('3504804807','google-oauth2|103201118415301331038','A72E4DC2-00DE-4542-8A24-62945438104E','One-off key','one-off','2021-12-24 16:10:02.238478209+01:00','2022-01-23 16:10:02.238478209+01:00','2021-12-24 16:10:02.238478209+01:00',0,1,'2021-12-24 16:11:27.015741738+01:00','[]',0,0);
+INSERT INTO peers VALUES('oMNaI8qWi0CyclSuwGR++SurxJyM3pQEiPEHwX8IREo=','auth0|61bf82ddeab084006aa1bccd','oMNaI8qWi0CyclSuwGR++SurxJyM3pQEiPEHwX8IREo=','EB51E9EB-A11F-4F6E-8E49-C982891B405A','"100.64.0.2"','braginini','linux','Linux','21.04','x86_64','Ubuntu','','','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'braginini','braginini','2021-12-24 16:13:11.244342541+01:00',0,0,0,'','',0,0,'0001-01-01 00:00:00+00:00','2024-10-02 17:00:54.182618+02:00',0,'""','','',0);
+INSERT INTO peers VALUES('xlx9/9D8+ibnRiIIB8nHGMxGOzxV17r8ShPHgi4aYSM=','auth0|61bf82ddeab084006aa1bccd','xlx9/9D8+ibnRiIIB8nHGMxGOzxV17r8ShPHgi4aYSM=','1B2B50B0-B3E8-4B0C-A426-525EDB8481BD','"100.64.0.1"','braginini','linux','Linux','21.04','x86_64','Ubuntu','','','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'braginini','braginini-1','2021-12-24 16:12:49.089339333+01:00',0,0,0,'','',0,0,'0001-01-01 00:00:00+00:00','2024-10-02 17:00:54.182618+02:00',0,'""','','',0);
+INSERT INTO peers VALUES('6kjbmVq1hmucVzvBXo5OucY5OYv+jSsB1jUTLq291Dw=','google-oauth2|103201118415301331038','6kjbmVq1hmucVzvBXo5OucY5OYv+jSsB1jUTLq291Dw=','5AFB60DB-61F2-4251-8E11-494847EE88E9','"100.64.0.2"','braginini','linux','Linux','21.04','x86_64','Ubuntu','','','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'braginini','braginini','2021-12-24 16:12:05.994305438+01:00',0,0,0,'','',0,0,'0001-01-01 00:00:00+00:00','2024-10-02 17:00:54.228182+02:00',0,'""','','',0);
+INSERT INTO peers VALUES('Ok+5QMdt/UjoktNOvicGYj+IX2g98p+0N2PJ3vJ45RI=','google-oauth2|103201118415301331038','Ok+5QMdt/UjoktNOvicGYj+IX2g98p+0N2PJ3vJ45RI=','A72E4DC2-00DE-4542-8A24-62945438104E','"100.64.0.1"','braginini','linux','Linux','21.04','x86_64','Ubuntu','','','','',NULL,'','','','{"Cloud":"","Platform":""}',NULL,'braginini','braginini-1','2021-12-24 16:11:27.015739803+01:00',0,0,0,'','',0,0,'0001-01-01 00:00:00+00:00','2024-10-02 17:00:54.228182+02:00',0,'""','','',0);
+INSERT INTO installations VALUES(1,'');
+
diff --git a/management/server/testdata/storev1.sqlite b/management/server/testdata/storev1.sqlite
deleted file mode 100644
index 9a376698e4d226fc08fa68c12fb9bb4cf50375cd..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001
literal 163840
zcmeI5U2GfKb;miPBucg=uCv)poJ29DU9U~Zv^o5y17WKV+N-Q3c_lkpV-XC8<P|j*
zIYZA3Wht9&Av?PW0u*VGeJs#E^`St6B0#ebeacJv6reA8El@PCeQJReO&@yZdxjtS
zh~xD}`E$J-&b{Y;{m!}P+&eR*w%)xf8!WM{YHi6#WFxOcI4<&Mi9{q4nW6u$(f{u2
zEA(O1J)t8P_&n_6Oyq|4w_~Po{CB3zYw_Qm``Lx}&)pgyI~O1ObZjfSGj=UH%1I-i
zMt%|bg#M$~{1?Xgw=QuJS!u9+{c(#rC`w&Jwa&$+rgl5JDA>nW4`*J9@$Z(o!v!l_
zZtRO4rs=98wM402XSyyL>Mm1sv8yvplpBL{FD`FZ7VlRQtLrP3_Y&3PtEnb7))Upi
zl~u1*oyMxkr(4r8zFg+Mzi3Fc78_h(aBAG?)BVMzyOp7BC9Y9#s|kbc8`r&Nol`|>
zGdF8T(sx+HhT*2M{f?|jhO8=LLo!Izd^hAayI!qpj6OHS+JP(VrbtFmt|jS)iI%$H
z6~4E*y0*CaF!4_1q20UW_2rHAt^1pctLyg@)$LtN7rNMyL_-&w)x_<M&C2SXb*F&G
zF0om;UD>RxFITn_*3fh!OM^`&--(a&VtJT}48|!6gVSHBO~v>;&mE3=7G(B7H_b=w
zDhAn%bw1s1BE539QCO+eQ@?yQ`E22QjOTgo<A;_RSR&Tjg|L$CvLT%Ys&Uk+sVz^f
zvMy3*_vAXWpjHz~x6L%Ue!Z%gT4gO}H5f<_ii<%DG3S^wy<DBwT55gQ)U8*mrSF#7
zl$C(OJ!=WuhOFydv#@EKiIvLj#RqrqC+4J%Ja@e+D+X&iwx_Xef?Q2lX-pfC84xxO
zI_}_)w=;*GJ^2TiT7YdbWNmIi*Wi*D#`y()n88_E69wxqRXf*fP8}9DC+qxtzd7~F
zxju$U_n6b&$#MQF&&i&}+C_I6!6E5$!|Eo1aHVEK@&~b)Wt=~1J3fl4u<Drz8>f|4
zJ;pe#CTwq{Go#xP0||1+HLNz7rMRQ&M$iDQ#HK2$dPr=SX$otFlIp7F8bQ@6)oDqF
z8N@<TJ@u%%xJM%+Zx@n!Vhl{~$^(<_&J4^_nDIo_c15Yt&?xS(@F?^H-C%8VvdR>i
zXg<}L7V3v1(9zUJw{C=HrZq$-zbz@<ZK-Z_wVv`!*^@O@X)}c!w5<TE+_v2EyAs6R
zprF{2YCc+1zoKqPM%T<BzpgVDn&v@)x~eFwP9Y-T9D@0lj}Wa0GgL-nkGnFl5~U6e
zdru-IdydAOOqN%0Y)Rh<T9QtuOfe&Bu>C-rc2pZ6Vvg&C{)=^X7&+5Wx5y#dRXgK1
zW2bM{fn16l+JRVC8=j&1nX+*Z(yy1(WU7@Ba)+mIbJh&)kEkbia}!6oIlFcWqcn>q
z_r_!VTeIBZCC>+W(>)kE{lr+mQ}Qzd!Pa(AepZj`d-mpNjGvw5KIScF<;(e>#=>sP
z&p3te3Qm+j$QcspY%`~Eht@{jj=3ai^rUKRj~1jsvn5lfg&8fo$YXdhaL~f4Iv_-M
zb*ah3mfV)9ZLjnI(>;Y5`NW>Xma=2x{GHihAv4f~;C~*kMPqz+hCAdut8yc;*ihS&
zthlG6{nq4WIg+*=xrt;&b_LbsNB6iGKQqJqkX#)(5Ld!Ij)bkpO%B_RyBI!hdF-_5
z_+$G_BoD%xs^+b%X$|M(bTqjwk=t+@4Y)%$xX2Ci@A9_nJAXHaj;`N#lgPvOCfV^P
zU@2x4AO#q*(xh(4y5&<viZWzYW-RGh5qhGQuRnpqJ-R@kBc7nfn%$P9Ih%w%nLQEv
z*P))Yvmd1R(UF?NyuK&>h@!nyqCYkalB%~PxgB!WAt|ZVQlAV%M9W@HqU|UJGB>~t
z2wGl!wz#`6CYL|~Q6>+fYT*X@Cvx)U$T+_|Gi<K8CM*i>r>MEljzqpVJw@*$)Bg~O
zKcqLjKmY_l00ck)1V8`;KmY_l00cnb^FZJ*Ir7@p)Y{b4#Di~7O<bH9o0ym|H?U1r
zZMIlSrK@8*nePedY$h!TLMbQYvuPolrG!!@oynzybSj-m2*q3J^sRjEMkbRlrL*(t
z44u~sjdV@OXHwZhj-_(xx{#7el91Y#inY2_&twY4?GNTw@6Fws6VmA$h1`wwjr830
zxiv}OrL>!+MS3kP%zgO&ch*1o@kS(a_y+gd>VUqQeN2C^Ak?-?nMQ+2wR9<$P8TFe
zsMYI@LERKeLaFF<Q_AJC^>k56<%@-UDkl|7sd90<p30WfjdERRq*<<fs&1Ymd?WFn
zN8<lRZ+L+K2!H?xfB*=900@8p2!H?xfB*=5jtE?hZgD5L=rJ-IU7bAof`h&P|7|4x
zfAQabjs}RXfB*=900@8p2!H?xfB*=900@8p2s}T5(dZO65{*txnvYM6UKo$Wqtl~P
zlk@>E5C8!X009sH0T2KI5CDNQPT*-|G(Nla;PtO=ZEa0VZe5(1$mY|zlKHQAg8Ph%
z#Y`o)vYbh!(<_x!E}zS!N{jTobs<xxlWa*y=PDZtJ)ph4ouFTXQSFcPth103GO0{1
zArx*2>09Z{jZC(bE7HT-<@vNgPi2z`RVt)1*`q{GP)krmxRoj1NDKL5PAFzec0=!f
z=Wsu2A(&ZPTeA^la;1E^kShq;6ClVh-d-xCSC&!*;dUmK%jAVrsUireTscQ0s#Hp)
zN_mBCOWl@XBG4H9Yy<uFz)%K-V*vR1!J+vK2j|n1?)e+#axR-L7KNfW^zV(tXICG*
zKI3U$C>F~3LW!Q9Kl<)*WhpOI%9W+mq9EK(<!%=$H0oSAwOlS`N@Zawm(DL9JL+`#
zR*rg=DWr?pLdH=@So6a~0%Jdch>*RNE|7^8ilo_q=D*9uFVpaS<1b}}Vx}l$jv2kM
zlv&EBm(r=FY^9XSEv1)Ji@8i8mCxiWD@&zZNmyDr&g=u-&KL8UL0TUsGI;QzS^^?M
z#-v;<WOJDuY2VeodH;Vj{>w=GH}PM`e;NO;Gw$dxJP-f@5C8!X009sH0T2KI5C8!X
z_#-AT9i8R;D|Vyisekn<YM%O6bVe>jFHd?`IPCrZuKE4{e~$kozWYZE0bK_H5C8!X
z009sH0T2KI5C8!X0D;c~ffIgdfAoZM(Yfd<cl6^KC;0xq_5A<j|3;>tPK})Z3;KW;
z2!H?xfB*=900@A<871&+Wb`WAVh^rdroT&j>CzOvBJ}@a<nrrV=I?4xO-#JCHgS=T
z8@u!Qch?%m%?FRvU1NQN{@CoDhmYo0-^(=1rOteMJ#+7y*}ZS(@|&v*CwNr)G}WEt
z$#VY(xrMo!CedG}rT<#8(%rvnzGZ|P>D+#)AQo~DYV=1LyC2Lgx72Qfezlu^zx$r^
zcSFsy553af2YNm|{FJ))@OZXt{dTzdlsdfx^C|VTkf0wHxBksr?^JfckB-yNdDC;g
z=8ulg%{_}mhbZB4j}i*Ik8162Jr;J_-TJq_ySMb7n&0TwALch6?#(~i(wBrs5ANT6
zoGA+{PfntQ(^PkoXWM-xWd7hv=uv_H5WD%^0{cPc=TO1Z4@a)D)sxJF{nmc@W_hJF
zFV~b!d3ANEq`ZA+ZU4^3clW;~6t&XU&b_yra!z`<wYG5d#_TjTo#ZKVpZ;es1?WNY
z@{M$<oXyfd`d#`{PXV(3f<TJ1r@+$>xFP&|r+~V)F0Gaxe_Kv3AJki0-6wZ8=jXS&
z+Wt2W*0P;<EAqX{+fUvrt!`G-WB8w@rjvZf!RP<Ntv`E95N>4X&j8SOOmf0=)3@*c
zFGS)>d?Eg?@xM8v!4AU$0T2KI5C8!X009sH0T2KI5CDPSpFldwxYJzC95oA^=E_^t
zEO45OMI$$(Z1OZ$H?aTz{nd|>AOHd&00JNY0w4eaAOHd&00Ms^1kTL<AK(A~6R}tf
z69hm21V8`;KmY_l00ck)1VG@$6FA}b`ak>c|3_YV@q<STAOHd&00JNY0w4eaAOHd&
z00JNY0xyq%`TRfj|1Xa}S_T0S009sH0T2KI5C8!X009sHfzN^f_Wz#+WwZeTAOHd&
z00JNY0w4eaAOHd&00J+Ufcf|TaR2}1>Hw{S00@8p2!H?xfB*=900@8p2!OzgCV>0@
zFPbpw2LTWO0T2KI5C8!X009sH0T2Lzmrnru|Cg@=^Z*1v00ck)1V8`;KmY_l00ck)
z1YR@&Jpccq38Q`x009sH0T2KI5C8!X009sH0T6ik1aSZV<?8@F009sH0T2KI5C8!X
z009sH0T2Lz7foO){y&jv?x&Fp{~iCA3x9R)XBXZ-cWZp?Tzu@)v90J&qC3%1?x!Q4
zMt%|bg#M$~{1?Xgw=QuJS!u9+{c%e+m?(7()jAiOn%eE?qF^6iJ)C(Z#=l$U4i~I!
zxv?*Hn5L_W)Doq7o$0!0sJl$j#jegYQEu3yeX(r}?!m?7&C25aN@8_=rSe{)dVE)_
ziH-F{b#P_XYgK1J)#THy=@?%wbKhSyq*{v&E-*MX?)2&Y;?muU)z%-hvH^OiCa%%Y
zs|kbc8`r%tIH!u#W^UGwr0=kXtvxr5?RR8NGGtW|8<Ihy=DQ)c+4X8&WAwQp)(%`@
zH$^gnaxF<WOk1EXc!lq6uC6U^K1{q*d1&`8d3||fee3?_;_CYSM0I=DG9F#*NTQ*O
z&1&NI#%5*p&bm{;Q$%93a=WrwSzoSfC9I+8q$V0{GFh97@p+y*9P_NyETo$zs&*BF
z?9w`)?l+NMIol|#RI1!BPmNp{=NI^4^Tw`6untqt7S6|bp65P(XjzPvXuVws+k=%B
z)>xoLM`@bc@{}g)B8_WLt}_c+HKBCdOq1)^tBR>J)?!wJf%Krb7}UQx<(=8?YP8l;
z>$|4ryjm@7w$!Gq1k~x-LRj;%u6NDCrsXA8Dz_IO+`XTelREO;^{T8Gtm#;m#<ocx
z)r6JCv;mm`VdJ3V4*qy6a@g6vXn-LF*d{}^<QDYI>0GZlby(P(tn>5z=F}_a`WPzR
zV@`J`$N8%~Cwmra7u{tvVv;^LtZotrS866Ce-MjV7WbpJ<D;kwtDcFl#aU^`S)A2`
z?Lc&9bUR`oLGHNL(k5FIcU0X7T9uX9R7F(}iS05?VXaV7UDaI8R;^N<mSk+JT011w
zQ;({Pdo(g~P$8)&#=zvRJTTer%)lBbJgSCkqJjba-Mk3v7t4c0bipiJS9CP|HH
zp?)|59ZhX?>qcn0SwnR4+mh1Vmg+`V>nYEaJy}zgHdDx_+6u7BZObjcD?!{13cM|;
z=A$+BE9!=1bj=KM#X4i5xf>LytBS(v<kbT+KA3M!e9;ODLuEAfxGNJYQR>jJ_asuX
z=RHjKW=(a+mh_#VCFyj^6f>d*+Yhv92ciKY=D1Gilvrnnk%tU*i@cm&wKIM*-1%l5
z$fd}k9f)<c;Tfu*DH{hN{dze~rdk;xA9o7hWzEq3Ab4Wmm7F*#Oxd*y)?spQJjTB@
z%N<_we2_QYgQ3$;jP*MuKQj<)Z3pFN^|-!gZ;r<J*;(#m-f~vHod0Po?6&-jQ~0jn
zL<z)^A>qq5a~gMOIn(W!tC&Vls>b$c(Hk^dGId%@(MpLth8Nfdt%a%s;%--$noMlT
zZJFBkN)IsIQ<#xY>^W>HJ2uYWnH{#|2{a-2pT}#_7@wWt4mr=N-0&(k)V3rm?&)a1
zHMv=iq-{rTB3Y4LK{ff&Jub%2%y2&>S4R%Sm2i(EVe4^|!?xqDUyobSI&C`s*gg}<
zgRrKmd5d9Mm^nEeO>Rr%Hk?KS?$8Y`a)bQ4ye<3A-_4<;>-XIx^6<S$cKiugiWvn+
z0fwwJsT;Cx`Bagj44IV~OL~@ho~Y&PPvCHmE)eL5C#bPzw<T%Lx_(b)PsIMkr6=v|
zIVpa0q~<WM?@2$RXz!Hhj}3#Q>Mcobhn#gtN@}&#C&LiYT2_;2%S(aG4R8a3mRFxG
z?yh#pB~U<=$%Cj`xPktOoV+<Q&M(gln`^EKi-P+pN;~ZdbGJP;@v8_Qc{_4mIQQep
zN0SQ^zmEOo#9zl|#;W7L8U2sw^ytq={x0(GBU0q;_y^PfIraC`|2Q>!;h(7Ruk5|L
z`+oSP%Q1dK;10{)#5Fyrwc()QJII~pDZ2G%&h<~|ej#^aSn<)^fcJ~^go~#i&ct{@
z;6A!yP4<5I{**-60rU%mU4cI+Z>|M)$_=L1HMwJMi-Xw?7;k#ofLsa34FsmY?H@ex
zLAEPt^&Q8L=>2BaZ#2EzXxBFE1&F!z^A*>(tqu(O=-trr*T?y93&Sk4pRFkLr_FAE
zEyfowafg$hanXe)!(2CdTXZ|&a=#JvN!oG2PVO<5XIH)w<1by}KDLd;ma*Sw!baf~
zPXw=*_?>a}==fpxv`2}%jCDk-qJW~QNMO}Fz<Nw~;#O$6mayr#uHRm>c<X_-q(AP`
zQr29JdP{8D9?<qb;DY<jDqJ~@(7b3zOJ9R7EF9;Rh8ma+?>Uwh^ItvcDx_1rU?0E!
z!KE0#c!fKh@r<XVw&ePOsC8*$BswQ@BbfTNeme?g`-Pm{bf7{qDX+?E@)^g+_$ybq
zk1F=oIv^OV@GD{K3TB0!jbF91q%dcTYYqdfrC+18bqx3-DngOp3Y(sD(bcX-dUk8A
z$qm}0S*1cdA&R($T35Y|c}LX@uaJ2nYLe3Q>N(y4S!0t)C6;1(FXZ_n4?7&U6md7N
z=9!meS1NZabS-yzacg;TrIIXud7OXe$}kt?)N31q5Ip;;@}(I64O)y|3|o%bMSrfl
z?Oz&VGGXa}y--Gv`+0idi`K&Q*{*LaB;~fi4=@t5lH;7vX)VOoKiRl$UStsKJFLFz
zD)x9SI%J%QW%Vz7Mb<}0+6rEjbxS&$Ox}F$s6~xSMYMHB4So6ipWBO??N@ulMc?|v
zPWV#4&iW*6jX8cWd{OsQH!7aKanXt`-+$dwu3e%1{)Mn&owiP)*5K9C>vU7XykO|~
z2X{GXUZ?mBE}q(be-77v>U&0m@14A``#JB#$9b_l)R_?Z0k^m4lF6X-S0WLv_y@Z=
zG@#+IYv{S67K|K!T=#PxU5W8GZ*qrGdr9AW+0|VFdDmgDh38jazKO|Nclnp6C0Z7l
z7ao&`<8Q?HJ4x;^83+PF#~2C)!Hlc@&L!+p10~(C5G+q_Fz70uM(1LDGRZx2ZX|}h
zbGYIw;qitu!!{8#f&t5iKnEOu^7}`F(AawJ(goT%IwpMM^>Kb9IduAkpqP;%*yx*w
z=VvX1hwoa3WAC@!?RWU>jWEJ+rit*lUA^mfhi>DOha-s?fAuPNxNP-CR_Jn6i*93(
zr`AI!uZQ~*%5$~pE%bxAw2?5cA#~jZVt?>X;`x8~3I>iK00JNY0w4eaAOHd&00JNY
z0w8d93E=nt&aQ4TG7ta(5C8!X009sH0T2KI5C8!Xa0%f4ze@r~5C8!X009sH0T2KI
z5C8!X009s<y9BWRKfAic$Up!DKmY_l00ck)1V8`;KmY_lz$Jj^|6LL|f&d7B00@8p
z2!H?xfB*=900@A<*(HGc|7TaX7#RqF00@8p2!H?xfB*=900@8p2)G2W|945?2m&Ag
z0w4eaAOHd&00JNY0w4eaXO{q;|3ACB#mGPa1V8`;KmY_l00ck)1V8`;K)@w{`~NNp
z96<mCKmY_l00ck)1V8`;KmY_l;Or8>{{QUi79#@z5C8!X009sH0T2KI5C8!X00EZ(
zp8t1A;0OXB00JNY0w4eaAOHd&00JNY0%w;1?*E@%-C|@Q00JNY0w4eaAOHd&00JNY
z0wCZL!2aJQfg=cj00@8p2!H?xfB*=900@8p2%KF4=JWqt{C5%hhZhKd00@8p2!H?x
zfB*=900@8p2!O!ZBM{}Hktuxt|LiFiBLV>s009sH0T2KI5C8!X009sHfnEaG|MwEX
zIS7CN2!H?xfB*=900@8p2!H?xoIL{g{{Pw2DMkbWAOHd&00JNY0w4eaAOHd&00O-P
zu>bERf^!f60T2KI5C8!X009sH0T2KI5IB1T@cjST(<w#-0w4eaAOHd&00JNY0w4ea
KAOHfr1pXgsa5w<~