fix: Updating regex validation for the Sysdig public API url

Signed-off-by: S3B4SZ17 <[email protected]>

Author: S3B4SZ17

tests/config_test.py

@@ -0,0 +1,51 @@
+"""
+Testing overall configuration of the MCP server.
+"""
+
+
+def test_api_url_format() -> None:
+    """
+    Test that the API URL is formatted correctly.
+    This test checks if the public API URL is constructed properly
+    when the old API format is not used.
+    """
+    from utils.sysdig.client_config import _get_public_api_url
+
+    # URL regions refer to https://docs.sysdig.com/en/administration/saas-regions-and-ip-ranges/
+    region_urls = {
+        "us1": {"url": "https://secure.sysdig.com", "public_url": "https://api.us1.sysdig.com"},
+        "us2": {"url": "https://us2.app.sysdig.com", "public_url": "https://api.us2.sysdig.com"},
+        "eu1": {"url": "https://eu1.app.sysdig.com", "public_url": "https://api.eu1.sysdig.com"},
+        "au1": {"url": "https://app.au1.sysdig.com", "public_url": "https://api.au1.sysdig.com"},
+        "me2": {"url": "https://app.me2.sysdig.com", "public_url": "https://api.me2.sysdig.com"},
+        # Edge case that does not follow the standard pattern it should return the same passed URL
+        "edge": {"url": "https://edge.something.com", "public_url": "https://edge.something.com"},
+    }
+
+    # Check if the public API URL is formatted correctly
+    public_api_us1 = _get_public_api_url(region_urls["us1"]["url"])
+    public_api_us2 = _get_public_api_url(region_urls["us2"]["url"])
+    public_api_eu1 = _get_public_api_url(region_urls["eu1"]["url"])
+    public_api_au1 = _get_public_api_url(region_urls["au1"]["url"])
+    public_api_me2 = _get_public_api_url(region_urls["me2"]["url"])
+    public_api_edge = _get_public_api_url(region_urls["edge"]["url"])
+
+    assert public_api_us1 == region_urls["us1"]["public_url"], (
+        f"Expected {region_urls['us1']['public_url']}, got {public_api_us1}"
+    )
+    assert public_api_us2 == region_urls["us2"]["public_url"], (
+        f"Expected {region_urls['us2']['public_url']}, got {public_api_us2}"
+    )
+    assert public_api_eu1 == region_urls["eu1"]["public_url"], (
+        f"Expected {region_urls['eu1']['public_url']}, got {public_api_eu1}"
+    )
+    assert public_api_au1 == region_urls["au1"]["public_url"], (
+        f"Expected {region_urls['au1']['public_url']}, got {public_api_au1}"
+    )
+    assert public_api_me2 == region_urls["me2"]["public_url"], (
+        f"Expected {region_urls['me2']['public_url']}, got {public_api_me2}"
+    )
+    assert public_api_edge == region_urls["edge"]["public_url"], (
+        f"Expected {region_urls['edge']['public_url']}, got {public_api_edge}"
+    )
+    print("All public API URLs are formatted correctly.")

tests/events_feed_test.py

@@ -23,7 +23,8 @@ def test_get_event_info(mock_success_response: MagicMock | AsyncMock, mock_creds
         mock_success_response (MagicMock | AsyncMock): Mocked response object.
         mock_creds: Mocked credentials.
     """
-
+    # Override the environment variable for MCP transport
+    os.environ["MCP_TRANSPORT"] = "stdio"
     # Successful response
     mock_success_response.return_value.json.return_value = EVENT_INFO_RESPONSE
     mock_success_response.return_value.status_code = HTTPStatus.OK

utils/sysdig/client_config.py

@@ -67,20 +67,30 @@ def get_api_env_vars() -> dict:
 
 def _get_public_api_url(base_url: str) -> str:
     """
-    Get the public API URL from the base URL.
+    Maps a Sysdig base URL to its corresponding public API URL.
+    This function extracts the region from the base URL and constructs the public API URL in the format
+    https://api.{region}.sysdig.com.
+
+    If the base URL does not match any known patterns, it returns the original base URL.
 
     Args:
         base_url: The base URL of the Sysdig API
 
     Returns:
-        str: The public API URL in the format https://api.<region>.sysdig.com
+        str: The public API URL in the format https://api.{region}.sysdig.com
     """
-    # Regex to capture the region pattern (like us2, us3, au1, etc.)
-    # This assumes the region is a subdomain that starts with 2 lowercase letters and ends with a digit
-    pattern = re.search(r"https://(?:(?P<region1>[a-z]{2}\d)\.app|app\.(?P<region2>[a-z]{2}\d))\.sysdig\.com", base_url)
-    if pattern:
-        region = pattern.group("region1") or pattern.group("region2")  # Extract the region
-        return f"https://api.{region}.sysdig.com"
-    else:
-        # Edge case for the secure API URL that is us1
-        return "https://api.us1.sysdig.com"
+
+    patterns = [
+        (r"^https://secure\.sysdig\.com$", lambda m: "us1"),
+        (r"^https://([a-z]{2}\d)\.app\.sysdig\.com$", lambda m: m.group(1)),
+        (r"^https://app\.([a-z]{2}\d)\.sysdig\.com$", lambda m: m.group(1)),
+    ]
+
+    for pattern, region_fn in patterns:
+        match = re.match(pattern, base_url)
+        if match:
+            region = region_fn(match)
+            return f"https://api.{region}.sysdig.com"
+
+    log.warning("A not recognized Sysdig URL was provided, returning the same URL. This may lead to unexpected behavior.")
+    return base_url