require 'spec_helper'

describe 'keystone::resource::authtoken' do

  let (:title) { 'keystone_config' }

  let :required_params do
    { :username     => 'keystone',
      :password     => 'secret',
      :auth_url     => 'http://127.0.0.1:35357/',
      :project_name => 'services' }
  end

  shared_examples 'shared examples' do

    context 'with only required parameters' do
      let :params do
        required_params
      end

      it { is_expected.to contain_keystone_config('keystone_authtoken/username').with(
        :value  => 'keystone',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/user_id').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/password').with(
        :value  => 'secret',
        :secret => true,
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/auth_plugin').with(
        :value  => 'password',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/auth_url').with(
        :value  => 'http://127.0.0.1:35357/',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_name').with(
        :value  => 'services',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_id').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/user_domain_name').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_domain_name').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/user_domain_id').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_domain_id').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/domain_name').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/domain_id').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/trust_id').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/cacert').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/cert').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/key').with(
        :value => '<SERVICE DEFAULT>',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/insecure').with(
        :value => 'false',
      )}

    end

    context 'when omitting a required parameter password' do
      let :params do
        required_params.delete(:password)
      end
      it { expect { is_expected.to raise_error(Puppet::Error) } }
    end

    context 'when specifying auth_url' do
      let :params do
        required_params.merge({:auth_url => 'https://host:11111/v3/'})
      end
      it { is_expected.to contain_keystone_config('keystone_authtoken/auth_url').with(
        :value  => 'https://host:11111/v3/',
      )}

    end

    context 'when specifying project and scope_domain' do
      let :params do
        required_params.merge({:domain_name => 'domain'})
      end
      it { expect { is_expected.to raise_error(Puppet::Error, 'Cannot specify both a project (project_name or project_id) and a domain (domain_name or domain_id)') } }
    end

    context 'when specifying neither project nor domain' do
      let :params do
        required_params.delete(:project_name)
      end
      it { expect { is_expected.to raise_error(Puppet::Error, 'Must specify either a project (project_name or project_id, for a project scoped token) or a domain (domain_name or domain_id, for a domain scoped token)') } }
    end

    context 'when specifying domain in name' do
      let :params do
        required_params.merge({
          :username            => 'keystone::userdomain',
          :project_name        => 'services::projdomain',
          :default_domain_name => 'shouldnotuse'
        })
      end
      it { is_expected.to contain_keystone_config('keystone_authtoken/user_domain_name').with(
        :value => 'userdomain',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_domain_name').with(
        :value => 'projdomain',
      )}

    end

    context 'when specifying domain in parameters' do
      let :params do
        required_params.merge({
          :username            => 'keystone::userdomain',
          :user_domain_name    => 'realuserdomain',
          :project_name        => 'services::projdomain',
          :project_domain_name => 'realprojectdomain',
          :default_domain_name => 'shouldnotuse'
        })
      end
      it { is_expected.to contain_keystone_config('keystone_authtoken/user_domain_name').with(
        :value => 'realuserdomain',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_domain_name').with(
        :value => 'realprojectdomain',
      )}

    end

    context 'when specifying only default domain' do
      let :params do
        required_params.merge({
          :default_domain_name => 'defaultdomain'
        })
      end
      it { is_expected.to contain_keystone_config('keystone_authtoken/user_domain_name').with(
        :value => 'defaultdomain',
      )}

      it { is_expected.to contain_keystone_config('keystone_authtoken/project_domain_name').with(
        :value => 'defaultdomain',
      )}

    end

  end

  on_supported_os({
    :supported_oos => OSDefaults.get_supported_os
  }).each do |os,facts|
    context "on #{os}" do
      let (:facts) do
        facts.merge!(OSDefaults.get_facts())
      end

      include_examples 'shared examples'
    end
  end
end