Add a test CLI-Svc

This test service can be started with `make start-test-cli-service`.
The service provides three endpoints:
- localhost:8080/cli/v1/install/
- localhost:8080/cli/v1/binary/
- localhost:8080/cli/v1/plugin/discovery/

The "plugin/discovery" endpoint will randomly pick what to recommend
between different versions of the plugin group; this allows to simulate
a different recommendation that can happen at any time, as if TP had
been upgraded.

Signed-off-by: Marc Khouzam <marc.khouzam@broadcom.com>

Author: marckhouzam

Makefile

@@ -289,8 +289,8 @@ start-test-central-repo: stop-test-central-repo setup-custom-cert-for-test-centr
 		-e REGISTRY_HTTP_TLS_KEY=/certs/localhost.key  \
 		-v $(ROOT_DIR)/hack/central-repo/registry-content:/var/lib/registry \
 		$(REGISTRY_IMAGE) > /dev/null && \
-		echo "Started docker test central repo with images:" && \
-		$(ROOT_DIR)/hack/central-repo/upload-plugins.sh info
+	echo "Started docker test central repo with images:" && \
+	$(ROOT_DIR)/hack/central-repo/upload-plugins.sh info
 
 .PHONY: stop-test-central-repo
 stop-test-central-repo: ## Stops and removes the local test central repository
@@ -309,7 +309,7 @@ start-airgapped-local-registry: stop-airgapped-local-registry
 		-e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \
 		-e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \
 		$(REGISTRY_IMAGE) > /dev/null && \
-		echo "Started docker test airgapped repo with authentication at 'localhost:6002'."
+	echo "Started docker test airgapped repo with authentication at 'localhost:6002'."
 
 	@docker logout localhost:6002 || true
 
@@ -318,6 +318,20 @@ stop-airgapped-local-registry:
 	@docker stop temp-airgapped-local-registry temp-airgapped-local-registry-with-auth > /dev/null 2>&1 && \
 	  echo "Stopping docker test airgapped repo if running..." || true
 
+.PHONY: start-test-cli-service
+start-test-cli-service: stop-test-cli-service ## Starts a test CLI service locally with docker
+	@docker run -d --rm --name cli-service -p 8080:80 \
+		-v $(ROOT_DIR)/hack/service/install.sh:/var/www/html/cli/v1/install/install.txt \
+		-v $(ROOT_DIR)/hack/service/discovery:/var/www/html/cli/v1/plugin/discovery \
+		-v $(ROOT_DIR)/hack/service/binaries:/var/www/html/cli/v1/binary \
+		-v $(ROOT_DIR)/hack/service/cli-service.conf:/etc/nginx/conf.d/cli-service.conf \
+		nginx:alpine && \
+	echo "Started docker test cli service at 'localhost:8080'"
+
+.PHONY: stop-test-cli-service
+stop-test-cli-service: ## Stops and removes the local test CLI service
+	@docker stop cli-service > /dev/null 2>&1 && echo "Stopped docker test cli service" || true
+
 .PHONY: fmt
 fmt: $(GOIMPORTS) ## Run goimports
 	$(GOIMPORTS) -w -local github.com/vmware-tanzu ./

hack/service/README.md

@@ -0,0 +1,53 @@
+# Test CLI-Svc
+
+This mock allows to run an nginx docker image which serves the same endpoints as
+the ones the real CLI-Svc serves.  It allows to test the CLI without using the
+real CLI-Svc.
+
+The endpoints being mocked are:
+
+- localhost:8080/cli/v1/install
+- localhost:8080/cli/v1/plugin/discovery
+- localhost:8080/cli/v1/binary
+
+## Using the test CLI-Svc
+
+From the root directory of the tanzu-cli repo, run `make start-test-cli-service`.
+This will start the test CLI-Svc as a configured nginx docker image.
+
+To access the endpoints manually, e.g.,:
+
+```console
+# NOTE: the trailing / is essential
+curl localhost:8080/cli/v1/plugin/discovery/
+```
+
+## Testing plugin discovery
+
+If testing plugin discovery (localhost:8080/cli/v1/plugin/discovery/), the
+test CLI-Svc will randomly serve different discovery data which is configured in
+`hack/service/cli-service.conf`.
+
+To tell the CLI to use the test CLI-Svc we must execute:
+
+```console
+export TANZU_CLI_PLUGIN_DISCOVERY_HOST_FOR_TANZU_CONTEXT=http://localhost:8080
+```
+
+To allow testing using different central repositories the endpoint serves some
+discoveries using both:
+
+- projects.packages.broadcom.com/tanzu_cli/plugins/plugin-inventory:latest
+- localhost:9876/tanzu-cli/plugins/central:small
+
+Therefore, it is required to also start the test central repo by doing:
+
+```console
+export TANZU_CLI_PLUGIN_DISCOVERY_IMAGE_SIGNATURE_VERIFICATION_SKIP_LIST=localhost:9876/tanzu-cli/plugins/central:small
+make start-test-central-repo
+
+# If the certificates should be handled automatically by the CLI itself
+# we should remove their configuration done by the make file so that the
+# testing is more appropriate.  This would be done by doing:
+tanzu config cert delete localhost:9876
+```

hack/service/binaries/tanzu-v1.5.2

@@ -0,0 +1,27 @@
+# Use the current time a semi-random hash.
+# This will allow to sometimes get a different set of recommended plugins when querying the endpoint.
+# Beyond possibly changing the recommended plugins when changing contexts, it also simulates
+# the upgrade of an existing context, which can happen at any time.
+split_clients "${msec}" $discovery {
+    50%   discovery-with-certs.txt;
+ #   33%   discovery-1.0.txt;
+    *     discovery-1.1.txt;
+}
+
+server {
+    listen 80;
+    server_name localhost;
+    root /var/www/html;
+
+    location /cli/v1/install {
+        index install.txt;
+    }
+
+    location /cli/v1/plugin/discovery {
+        index $discovery;
+    }
+
+    location /cli/v1/binary {
+        autoindex on;
+    }
+}

hack/service/binaries/tanzu-v1.5.3

@@ -0,0 +1,16 @@
+{
+    "pluginGroups": [
+        {
+            "name": "vmware-tanzu/platform-engineer",
+            "recommendedVersion": "v1.0"
+        }
+    ],
+    "pluginSources":  [
+        {
+            "oci": {
+                "name": "discovered-from-tpsm",
+                "image": "projects.packages.broadcom.com/tanzu_cli/plugins/plugin-inventory:latest"
+            }
+        }
+    ]
+}

hack/service/cli-service.conf

@@ -0,0 +1,16 @@
+{
+    "pluginGroups": [
+        {
+            "name": "vmware-tanzu/platform-engineer",
+            "recommendedVersion": "v1.1"
+        }
+    ],
+    "pluginSources":  [
+        {
+            "oci": {
+                "name": "discovered-from-tpsm",
+                "image": "projects.packages.broadcom.com/tanzu_cli/plugins/plugin-inventory:latest"
+            }
+        }
+    ]
+}

hack/service/discovery/discovery-1.0.txt

@@ -0,0 +1,16 @@
+{
+    "pluginGroups": [
+        {
+            "name": "vmware-tkg/default",
+            "recommendedVersion": "v9.9.9"
+        }
+    ],
+    "pluginSources":  [
+        {
+            "oci": {
+                "name": "discovered-from-tpsm",
+                "image": "localhost:9876/tanzu-cli/plugins/central:small"
+            }
+        }
+    ]
+}

hack/service/discovery/discovery-1.1.txt

@@ -0,0 +1,6 @@
+#!sh
+
+# Copyright 2025 VMware, Inc. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+echo "Fake installation of the Tanzu CLI"