Add optional test DB credentials to config

Author: VegasNative

README.md

@@ -25,6 +25,8 @@ ripe:
     db_username: "op://vault/item/username"
     db_password: "op://vault/item/password"
     rpki_api_key: "op://vault/item/rpki-api-key"
+    test_db_username: "op://vault/item/test-username"  # optional
+    test_db_password: "op://vault/item/test-password"  # optional
   sso_emails:
     - "admin@example.com"
   routes:
@@ -49,9 +51,11 @@ Secrets are fetched from 1Password via the `op` CLI. The `credentials` block in
 
 | Field | Used for |
 |-------|----------|
-| `db_username` | RIPE DB REST API username |
-| `db_password` | RIPE DB REST API password |
+| `db_username` | RIPE DB REST API username (production) |
+| `db_password` | RIPE DB REST API password (production) |
 | `rpki_api_key` | RIPE RPKI Management API key |
+| `test_db_username` | RIPE test DB username (optional, overrides `db_username` in test mode) |
+| `test_db_password` | RIPE test DB password (optional, overrides `db_password` in test mode) |
 
 References use the `op://vault/item/field` format. You must be signed in to the 1Password CLI (`op signin`) before running the tool.
 

config.example.yaml

@@ -4,6 +4,8 @@ ripe:
     db_username: "op://vault/item/username"
     db_password: "op://vault/item/password"
     rpki_api_key: "op://vault/item/rpki-api-key"
+    test_db_username: "op://vault/item/test-username"   # optional: overrides db_username for test DB
+    test_db_password: "op://vault/item/test-password"   # optional: overrides db_password for test DB
   sso_emails:
     - "admin1@example.com"
     - "admin2@example.com"

src/rir_updater/config.py

@@ -77,6 +77,8 @@ class RipeCredentials(BaseModel):
     db_username: str
     db_password: str
     rpki_api_key: str
+    test_db_username: str | None = None
+    test_db_password: str | None = None
 
 
 class RipeConfig(BaseModel):

src/rir_updater/main.py

@@ -50,8 +50,13 @@ def _run(args, parser):
 
     if config.ripe:
         creds = config.ripe.credentials
+        use_test_env = not args.production
+        if use_test_env and creds.test_db_username and creds.test_db_password:
+            db_auth = get_ripe_db_auth(creds.test_db_username, creds.test_db_password)
+        else:
+            db_auth = get_ripe_db_auth(creds.db_username, creds.db_password)
         with RipeClient(
-            db_auth=get_ripe_db_auth(creds.db_username, creds.db_password),
+            db_auth=db_auth,
             rpki_key=get_ripe_rpki_key(creds.rpki_api_key),
             maintainer=config.ripe.maintainer,
             dry_run=not args.commit,