cookbook-openstack-orchestration/spec/identity_registration_spec.rb

# encoding: UTF-8
require_relative 'spec_helper'

describe 'openstack-orchestration::identity_registration' do
  describe 'redhat' do
    let(:runner) { ChefSpec::Runner.new(REDHAT_OPTS) }
    let(:node) { runner.node }
    let(:chef_run) { runner.converge(described_recipe) }

    include_context 'orchestration_stubs'

    it 'register heat orchestration service' do
      expect(chef_run).to create_service_openstack_identity_register(
        'Register Heat Orchestration Service'
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        service_name: 'heat',
        service_type: 'orchestration',
        service_description: 'Heat Orchestration Service',
        action: [:create_service]
      )
    end

    it 'register heat orchestration endpoint' do
      expect(chef_run).to create_endpoint_openstack_identity_register(
        'Register Heat Orchestration Endpoint'
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        service_type: 'orchestration',
        endpoint_region: 'RegionOne',
        endpoint_adminurl: 'http://127.0.0.1:8004/v1/%(tenant_id)s',
        endpoint_internalurl: 'http://127.0.0.1:8004/v1/%(tenant_id)s',
        endpoint_publicurl: 'http://127.0.0.1:8004/v1/%(tenant_id)s',
        action: [:create_endpoint]
      )
    end

    it 'register heat orchestration endpoint with custom region override' do
      node.set['openstack']['network']['region'] = 'region123'

      expect(chef_run).to create_endpoint_openstack_identity_register(
        'Register Heat Orchestration Endpoint'
      ).with(
        endpoint_region: 'region123',
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        service_type: 'orchestration',
        endpoint_region: 'RegionOne',
        endpoint_adminurl: 'http://127.0.0.1:8004/v1/%(tenant_id)s',
        endpoint_internalurl: 'http://127.0.0.1:8004/v1/%(tenant_id)s',
        endpoint_publicurl: 'http://127.0.0.1:8004/v1/%(tenant_id)s',
        action: [:create_endpoint]
      )
    end

    it 'register heat cloudformation service' do
      expect(chef_run).to create_service_openstack_identity_register(
        'Register Heat Cloudformation Service'
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        service_name: 'heat-cfn',
        service_type: 'cloudformation',
        service_description: 'Heat Cloudformation Service',
        action: [:create_service]
      )
    end

    it 'register heat cloudformation endpoint' do
      expect(chef_run).to create_endpoint_openstack_identity_register(
        'Register Heat Cloudformation Endpoint'
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        service_type: 'cloudformation',
        endpoint_region: 'RegionOne',
        endpoint_adminurl: 'http://127.0.0.1:8000/v1',
        endpoint_internalurl: 'http://127.0.0.1:8000/v1',
        endpoint_publicurl: 'http://127.0.0.1:8000/v1',
        action: [:create_endpoint]
      )
    end

    it 'registers service tenant' do
      expect(chef_run).to create_tenant_openstack_identity_register(
        'Register Service Tenant'
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        tenant_name: 'service',
        tenant_description: 'Service Tenant'
      )
    end

    it 'registers heat service user' do
      expect(chef_run).to create_user_openstack_identity_register(
        'Register Heat Service User'
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        tenant_name: 'service',
        user_name: 'heat',
        user_pass: 'heat-pass',
        user_enabled: true,
        action: [:create_user]
      )
    end

    it 'grants admin role to service user for service tenant' do
      expect(chef_run).to grant_role_openstack_identity_register(
        "Grant 'admin' Role to heat User for service Tenant"
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        tenant_name: 'service',
        user_name: 'heat',
        role_name: 'admin',
        action: [:grant_role]
      )
    end

    it 'does not create role for template defined users by default' do
      expect(chef_run).not_to create_role_openstack_identity_register(
        "Create '' Role for template defined users"
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        role_name: '',
        action: [:create_role]
      )
    end

    it 'creates role for template defined users' do
      node.set['openstack']['orchestration']['heat_stack_user_role'] = 'heat_stack_user'
      expect(chef_run).to create_role_openstack_identity_register(
        "Create 'heat_stack_user' Role for template defined users"
      ).with(
        auth_uri: 'http://127.0.0.1:35357/v2.0',
        bootstrap_token: 'bootstrap-token',
        role_name: 'heat_stack_user',
        action: [:create_role]
      )
    end

    it 'does not call domain setup script by default' do
      expect(chef_run).not_to run_execute('heat-keystone-setup-domain')
    end

    it 'calls domain setup script' do
      node.set['openstack']['orchestration']['heat_stack_user_role'] = 'heat_stack_user'
      node.set['openstack']['orchestration']['stack_user_domain_name'] = 'stack_user_domain_name'
      node.set['openstack']['orchestration']['stack_domain_admin'] = 'stack_domain_admin'

      expect(chef_run).to run_execute('heat-keystone-setup-domain')
        .with(
          environment: { 'OS_USERNAME' => 'admin',
                         'OS_PASSWORD' => 'admin_pass',
                         'OS_AUTH_URL' => 'http://127.0.0.1:35357/v2.0',
                         'HEAT_DOMAIN' => 'stack_user_domain_name',
                         'HEAT_DOMAIN_ADMIN' => 'stack_domain_admin',
                         'HEAT_DOMAIN_PASSWORD' => 'stack_domain_admin_pass'
          }
        )
    end
  end
end