651 lines
24 KiB
Ruby
651 lines
24 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'keystone' do
|
|
|
|
shared_examples 'keystone' do
|
|
|
|
context 'with default parameters' do
|
|
it { is_expected.to contain_class('keystone::logging') }
|
|
it { is_expected.to contain_class('keystone::params') }
|
|
it { is_expected.to contain_class('keystone::policy') }
|
|
|
|
it { is_expected.to contain_package('keystone').with(
|
|
'ensure' => 'present',
|
|
'tag' => ['openstack', 'keystone-package'],
|
|
) }
|
|
|
|
it { is_expected.to contain_class('keystone::client').with(
|
|
'ensure' => 'present'
|
|
) }
|
|
|
|
it 'should synchronize the db if $sync_db is true' do
|
|
is_expected.to contain_exec('keystone-manage db_sync').with(
|
|
:command => 'keystone-manage db_sync',
|
|
:user => 'keystone',
|
|
:refreshonly => true,
|
|
:subscribe => ['Anchor[keystone::install::end]',
|
|
'Anchor[keystone::config::end]',
|
|
'Anchor[keystone::dbsync::begin]'],
|
|
:notify => 'Anchor[keystone::dbsync::end]',
|
|
)
|
|
end
|
|
|
|
it 'should set the default values' do
|
|
is_expected.to contain_resources('keystone_config').with({ :purge => false })
|
|
is_expected.to contain_keystone_config('DEFAULT/public_endpoint').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('token/expiration').with_value(3600)
|
|
is_expected.to contain_keystone_config('identity/password_hash_algorithm').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('identity/password_hash_rounds').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('revoke/driver').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('policy/driver').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/enable').with_value(false)
|
|
is_expected.to contain_keystone_config('ssl/certfile').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/keyfile').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/ca_certs').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/ca_key').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/cert_subject').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('token/revoke_by_id').with_value(true)
|
|
|
|
is_expected.to contain_oslo__middleware('keystone_config').with(
|
|
:enable_proxy_headers_parsing => '<SERVICE DEFAULT>',
|
|
:max_request_body_size => '<SERVICE DEFAULT>',
|
|
)
|
|
|
|
is_expected.to contain_keystone_config('catalog/driver').with_value('sql')
|
|
is_expected.to contain_keystone_config('catalog/template_file').with_value('/etc/keystone/default_catalog.templates')
|
|
is_expected.to contain_keystone_config('token/provider').with_value('fernet')
|
|
is_expected.to contain_keystone_config('DEFAULT/max_token_size').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('DEFAULT/notification_format').with_value('<SERVICE DEFAULT>')
|
|
|
|
is_expected.to contain_oslo__messaging__default('keystone_config').with(
|
|
:transport_url => '<SERVICE DEFAULT>',
|
|
:control_exchange => '<SERVICE DEFAULT>',
|
|
:rpc_response_timeout => '<SERVICE DEFAULT>',
|
|
)
|
|
|
|
is_expected.to contain_oslo__messaging__notifications('keystone_config').with(
|
|
:transport_url => '<SERVICE DEFAULT>',
|
|
:driver => '<SERVICE DEFAULT>',
|
|
:topics => '<SERVICE DEFAULT>',
|
|
)
|
|
|
|
is_expected.to contain_oslo__messaging__rabbit('keystone_config').with(
|
|
:kombu_ssl_version => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_keyfile => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_certfile => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_ca_certs => '<SERVICE DEFAULT>',
|
|
:kombu_reconnect_delay => '<SERVICE DEFAULT>',
|
|
:kombu_failover_strategy => '<SERVICE DEFAULT>',
|
|
:kombu_compression => '<SERVICE DEFAULT>',
|
|
:rabbit_use_ssl => '<SERVICE DEFAULT>',
|
|
:rabbit_ha_queues => '<SERVICE DEFAULT>',
|
|
:heartbeat_timeout_threshold => '<SERVICE DEFAULT>',
|
|
:heartbeat_rate => '<SERVICE DEFAULT>',
|
|
:heartbeat_in_pthread => '<SERVICE DEFAULT>',
|
|
:amqp_durable_queues => '<SERVICE DEFAULT>',
|
|
)
|
|
end
|
|
|
|
it { is_expected.to contain_service('keystone').with(
|
|
'ensure' => 'running',
|
|
'enable' => true,
|
|
'hasstatus' => true,
|
|
'hasrestart' => true,
|
|
'tag' => 'keystone-service',
|
|
) }
|
|
|
|
it { is_expected.to contain_anchor('keystone::service::end') }
|
|
|
|
it { is_expected.to contain_exec('keystone-manage db_sync') }
|
|
|
|
it { is_expected.to_not contain_file('/etc/keystone/domains') }
|
|
|
|
it { is_expected.to contain_file('/etc/keystone/credential-keys').with(
|
|
:ensure => 'directory',
|
|
:owner => 'keystone',
|
|
:group => 'keystone',
|
|
'mode' => '0600',
|
|
) }
|
|
|
|
it { is_expected.to contain_exec('keystone-manage credential_setup').with(
|
|
:command => 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone',
|
|
:user => 'keystone',
|
|
:creates => '/etc/keystone/credential-keys/0',
|
|
:require => 'File[/etc/keystone/credential-keys]',
|
|
) }
|
|
it { is_expected.to contain_keystone_config('credential/key_repository').with_value('/etc/keystone/credential-keys')}
|
|
end
|
|
|
|
context 'with overridden parameters' do
|
|
let :params do
|
|
{
|
|
:purge_config => true,
|
|
:public_endpoint => 'http://127.0.0.1:5000',
|
|
:token_expiration => 7200,
|
|
:password_hash_algorithm => 'bcrypt',
|
|
:password_hash_rounds => 12,
|
|
:revoke_driver => 'sql',
|
|
:policy_driver => 'sql',
|
|
:revoke_by_id => true,
|
|
:enable_proxy_headers_parsing => true,
|
|
:max_request_body_size => 114688,
|
|
:catalog_driver => 'templated',
|
|
:catalog_template_file => '/some/template_file',
|
|
:token_provider => 'uuid',
|
|
:max_token_size => 255,
|
|
:notification_format => 'basic',
|
|
}
|
|
end
|
|
|
|
it 'should set the overridden values' do
|
|
is_expected.to contain_resources('keystone_config').with({ :purge => true })
|
|
is_expected.to contain_keystone_config('DEFAULT/public_endpoint').with_value('http://127.0.0.1:5000')
|
|
is_expected.to contain_keystone_config('token/expiration').with_value(7200)
|
|
is_expected.to contain_keystone_config('identity/password_hash_algorithm').with_value('bcrypt')
|
|
is_expected.to contain_keystone_config('identity/password_hash_rounds').with_value(12)
|
|
is_expected.to contain_keystone_config('revoke/driver').with_value('sql')
|
|
is_expected.to contain_keystone_config('policy/driver').with_value('sql')
|
|
is_expected.to contain_keystone_config('ssl/enable').with_value(false)
|
|
is_expected.to contain_keystone_config('ssl/certfile').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/keyfile').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/ca_certs').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/ca_key').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('ssl/cert_subject').with_value('<SERVICE DEFAULT>')
|
|
is_expected.to contain_keystone_config('token/revoke_by_id').with_value(true)
|
|
|
|
is_expected.to contain_oslo__middleware('keystone_config').with(
|
|
:enable_proxy_headers_parsing => true,
|
|
:max_request_body_size => 114688,
|
|
)
|
|
|
|
is_expected.to contain_keystone_config('catalog/driver').with_value('templated')
|
|
is_expected.to contain_keystone_config('catalog/template_file').with_value('/some/template_file')
|
|
is_expected.to contain_keystone_config('token/provider').with_value('uuid')
|
|
is_expected.to contain_keystone_config('DEFAULT/max_token_size').with_value(255)
|
|
is_expected.to contain_keystone_config('DEFAULT/notification_format').with_value('basic')
|
|
end
|
|
end
|
|
|
|
context "when running keystone in wsgi" do
|
|
let :params do
|
|
{ 'service_name' => 'httpd' }
|
|
end
|
|
|
|
let :pre_condition do
|
|
'include apache
|
|
include keystone::wsgi::apache'
|
|
end
|
|
|
|
it do
|
|
expect {
|
|
is_expected.to contain_service(platform_params[:service_name]).with('ensure' => 'running')
|
|
}.to raise_error(RSpec::Expectations::ExpectationNotMetError, /expected that the catalogue would contain Service\[#{platform_params[:service_name]}\]/)
|
|
end
|
|
|
|
it { is_expected.to contain_exec('restart_keystone').with(
|
|
'command' => "systemctl restart #{platform_params[:httpd_service_name]}",
|
|
) }
|
|
end
|
|
|
|
context 'when using invalid service name for keystone' do
|
|
let (:params) do
|
|
{ 'service_name' => 'foo' }
|
|
end
|
|
|
|
it_raises 'a Puppet::Error', /Invalid service_name/
|
|
end
|
|
|
|
context 'with disabled service managing' do
|
|
let :params do
|
|
{ :manage_service => false }
|
|
end
|
|
|
|
it { is_expected.to_not contain_service('keystone') }
|
|
end
|
|
|
|
context 'with invalid catalog_type' do
|
|
let :params do
|
|
{ :catalog_type => 'invalid' }
|
|
end
|
|
|
|
it { should raise_error(Puppet::Error) }
|
|
end
|
|
|
|
context 'when sync_db is set to false' do
|
|
let :params do
|
|
{
|
|
'sync_db' => false,
|
|
}
|
|
end
|
|
|
|
it { is_expected.not_to contain_exec('keystone-manage db_sync') }
|
|
end
|
|
|
|
context 'when enabling SSL' do
|
|
let :params do
|
|
{
|
|
'enable_ssl' => true,
|
|
}
|
|
end
|
|
it {is_expected.to contain_keystone_config('ssl/enable').with_value(true)}
|
|
it {is_expected.to contain_keystone_config('ssl/certfile').with_value('/etc/keystone/ssl/certs/keystone.pem')}
|
|
it {is_expected.to contain_keystone_config('ssl/keyfile').with_value('/etc/keystone/ssl/private/keystonekey.pem')}
|
|
it {is_expected.to contain_keystone_config('ssl/ca_certs').with_value('/etc/keystone/ssl/certs/ca.pem')}
|
|
it {is_expected.to contain_keystone_config('ssl/ca_key').with_value('/etc/keystone/ssl/private/cakey.pem')}
|
|
it {is_expected.to contain_keystone_config('ssl/cert_subject').with_value('/C=US/ST=Unset/L=Unset/O=Unset/CN=localhost')}
|
|
end
|
|
|
|
context 'with RabbitMQ communication SSLed' do
|
|
let :params do
|
|
{
|
|
:rabbit_use_ssl => true,
|
|
:kombu_ssl_ca_certs => '/path/to/ssl/ca/certs',
|
|
:kombu_ssl_certfile => '/path/to/ssl/cert/file',
|
|
:kombu_ssl_keyfile => '/path/to/ssl/keyfile',
|
|
:kombu_ssl_version => 'TLSv1'
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_oslo__messaging__rabbit('keystone_config').with(
|
|
:rabbit_use_ssl => true,
|
|
:kombu_ssl_ca_certs => '/path/to/ssl/ca/certs',
|
|
:kombu_ssl_certfile => '/path/to/ssl/cert/file',
|
|
:kombu_ssl_keyfile => '/path/to/ssl/keyfile',
|
|
:kombu_ssl_version => 'TLSv1'
|
|
)}
|
|
end
|
|
|
|
context 'with RabbitMQ communication not SSLed' do
|
|
let :params do
|
|
{}
|
|
end
|
|
|
|
it { is_expected.to contain_oslo__messaging__rabbit('keystone_config').with(
|
|
:rabbit_use_ssl => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_ca_certs => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_certfile => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_keyfile => '<SERVICE DEFAULT>',
|
|
:kombu_ssl_version => '<SERVICE DEFAULT>'
|
|
)}
|
|
end
|
|
|
|
context 'setting notification settings' do
|
|
let :params do
|
|
{
|
|
:default_transport_url => 'rabbit://user:pass@host:1234/virt',
|
|
:notification_transport_url => 'rabbit://user:pass@host:1234/virt',
|
|
:notification_driver => ['keystone.openstack.common.notifier.rpc_notifier'],
|
|
:notification_topics => ['notifications'],
|
|
:control_exchange => 'keystone',
|
|
:rpc_response_timeout => 120
|
|
}
|
|
end
|
|
|
|
it {
|
|
is_expected.to contain_oslo__messaging__default('keystone_config').with(
|
|
:transport_url => 'rabbit://user:pass@host:1234/virt',
|
|
:control_exchange => 'keystone',
|
|
:rpc_response_timeout => 120,
|
|
)
|
|
|
|
is_expected.to contain_oslo__messaging__notifications('keystone_config').with(
|
|
:transport_url => 'rabbit://user:pass@host:1234/virt',
|
|
:driver => ['keystone.openstack.common.notifier.rpc_notifier'],
|
|
:topics => ['notifications'],
|
|
)
|
|
}
|
|
end
|
|
|
|
context 'setting kombu settings' do
|
|
let :params do
|
|
{
|
|
:kombu_reconnect_delay => '1.0',
|
|
:kombu_compression => 'gzip',
|
|
}
|
|
end
|
|
|
|
it {
|
|
is_expected.to contain_oslo__messaging__rabbit('keystone_config').with(
|
|
:kombu_reconnect_delay => '1.0',
|
|
:kombu_compression => 'gzip',
|
|
) }
|
|
end
|
|
|
|
context 'when disabling credential_setup' do
|
|
let :params do
|
|
{
|
|
'enable_credential_setup' => false,
|
|
}
|
|
end
|
|
|
|
it { is_expected.to_not contain_file('/etc/keystone/credential-keys') }
|
|
it { is_expected.to_not contain_exec('keystone-manage credential_setup') }
|
|
it { is_expected.to contain_keystone_config('credential/key_repository').with_value('/etc/keystone/credential-keys') }
|
|
end
|
|
|
|
context 'when overriding the credential key directory' do
|
|
let :params do
|
|
{
|
|
'enable_credential_setup' => true,
|
|
'credential_key_repository' => '/var/lib/credential-keys',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_file('/var/lib/credential-keys').with(
|
|
:ensure => 'directory',
|
|
:owner => 'keystone',
|
|
:group => 'keystone',
|
|
'mode' => '0600',
|
|
) }
|
|
it { is_expected.to contain_exec('keystone-manage credential_setup').with(
|
|
:creates => '/var/lib/credential-keys/0'
|
|
) }
|
|
it { is_expected.to contain_keystone_config('credential/key_repository').with_value('/var/lib/credential-keys') }
|
|
end
|
|
|
|
context 'when overriding the keystone group and user' do
|
|
let :params do
|
|
{
|
|
'enable_credential_setup' => true,
|
|
'keystone_user' => 'test_user',
|
|
'keystone_group' => 'test_group',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_exec('keystone-manage credential_setup').with(
|
|
:command => "keystone-manage credential_setup --keystone-user #{params['keystone_user']} --keystone-group #{params['keystone_group']}",
|
|
:user => params['keystone_user'],
|
|
:creates => '/etc/keystone/credential-keys/0',
|
|
:require => 'File[/etc/keystone/credential-keys]',
|
|
) }
|
|
end
|
|
|
|
context 'when setting credential_keys parameter' do
|
|
let :params do
|
|
{
|
|
'enable_credential_setup' => true,
|
|
'credential_keys' => {
|
|
'/etc/keystone/credential-keys/0' => {
|
|
'content' => 't-WdduhORSqoyAykuqWAQSYjg2rSRuJYySgI2xh48CI=',
|
|
},
|
|
'/etc/keystone/credential-keys/1' => {
|
|
'content' => 'GLlnyygEVJP4-H2OMwClXn3sdSQUZsM5F194139Unv8=',
|
|
},
|
|
}
|
|
}
|
|
end
|
|
|
|
it { is_expected.to_not contain_exec('keystone-manage credential_setup') }
|
|
it { is_expected.to contain_file('/etc/keystone/credential-keys/0').with(
|
|
'content' => 't-WdduhORSqoyAykuqWAQSYjg2rSRuJYySgI2xh48CI=',
|
|
'owner' => 'keystone',
|
|
'subscribe' => 'Anchor[keystone::install::end]',
|
|
)}
|
|
it { is_expected.to contain_file('/etc/keystone/credential-keys/1').with(
|
|
'content' => 'GLlnyygEVJP4-H2OMwClXn3sdSQUZsM5F194139Unv8=',
|
|
'owner' => 'keystone',
|
|
'subscribe' => 'Anchor[keystone::install::end]',
|
|
)}
|
|
end
|
|
|
|
context 'when disabling credential_setup' do
|
|
let :params do
|
|
{
|
|
'enable_credential_setup' => false,
|
|
'credential_key_repository' => '/etc/keystone/credential-keys',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to_not contain_file(params['credential_key_repository']) }
|
|
it { is_expected.to_not contain_exec('keystone-manage credential_setup') }
|
|
end
|
|
|
|
context 'when enabling fernet_setup' do
|
|
let :params do
|
|
{
|
|
'enable_fernet_setup' => true,
|
|
'fernet_max_active_keys' => 5,
|
|
'revoke_by_id' => false,
|
|
'fernet_key_repository' => '/etc/keystone/fernet-keys',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_file(params['fernet_key_repository']).with(
|
|
:ensure => 'directory',
|
|
:owner => 'keystone',
|
|
:group => 'keystone',
|
|
:mode => '0600',
|
|
) }
|
|
|
|
it { is_expected.to contain_exec('keystone-manage fernet_setup').with(
|
|
:command => 'keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone',
|
|
:user => 'keystone',
|
|
:creates => '/etc/keystone/fernet-keys/0',
|
|
:require => 'File[/etc/keystone/fernet-keys]',
|
|
) }
|
|
it { is_expected.to contain_keystone_config('fernet_tokens/max_active_keys').with_value(5)}
|
|
it { is_expected.to contain_keystone_config('token/revoke_by_id').with_value(false)}
|
|
end
|
|
|
|
context 'when overriding the fernet key directory' do
|
|
let :params do
|
|
{
|
|
'enable_fernet_setup' => true,
|
|
'fernet_key_repository' => '/var/lib/fernet-keys',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_exec('keystone-manage fernet_setup').with(
|
|
:creates => '/var/lib/fernet-keys/0'
|
|
) }
|
|
end
|
|
|
|
context 'when overriding the keystone group and user' do
|
|
let :params do
|
|
{
|
|
'enable_fernet_setup' => true,
|
|
'fernet_key_repository' => '/etc/keystone/fernet-keys',
|
|
'keystone_user' => 'test_user',
|
|
'keystone_group' => 'test_group',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_exec('keystone-manage fernet_setup').with(
|
|
:command => "keystone-manage fernet_setup --keystone-user #{params['keystone_user']} --keystone-group #{params['keystone_group']}",
|
|
:user => params['keystone_user'],
|
|
:creates => '/etc/keystone/fernet-keys/0',
|
|
:require => 'File[/etc/keystone/fernet-keys]',
|
|
) }
|
|
end
|
|
|
|
context 'when setting fernet_keys parameter' do
|
|
let :params do
|
|
{
|
|
'enable_fernet_setup' => true,
|
|
'fernet_keys' => {
|
|
'/etc/keystone/fernet-keys/0' => {
|
|
'content' => 't-WdduhORSqoyAykuqWAQSYjg2rSRuJYySgI2xh48CI=',
|
|
},
|
|
'/etc/keystone/fernet-keys/1' => {
|
|
'content' => 'GLlnyygEVJP4-H2OMwClXn3sdSQUZsM5F194139Unv8=',
|
|
},
|
|
}
|
|
}
|
|
end
|
|
|
|
it { is_expected.to_not contain_exec('keystone-manage fernet_setup') }
|
|
it { is_expected.to contain_file('/etc/keystone/fernet-keys/0').with(
|
|
'content' => 't-WdduhORSqoyAykuqWAQSYjg2rSRuJYySgI2xh48CI=',
|
|
'owner' => 'keystone',
|
|
'mode' => '0600',
|
|
'replace' => true,
|
|
'subscribe' => 'Anchor[keystone::install::end]',
|
|
'tag' => 'keystone-fernet-key',
|
|
)}
|
|
it { is_expected.to contain_file('/etc/keystone/fernet-keys/1').with(
|
|
'content' => 'GLlnyygEVJP4-H2OMwClXn3sdSQUZsM5F194139Unv8=',
|
|
'owner' => 'keystone',
|
|
'mode' => '0600',
|
|
'replace' => true,
|
|
'subscribe' => 'Anchor[keystone::install::end]',
|
|
'tag' => 'keystone-fernet-key',
|
|
)}
|
|
end
|
|
|
|
context 'when not replacing fernet_keys and setting fernet_keys parameter' do
|
|
let :params do
|
|
{
|
|
'enable_fernet_setup' => true,
|
|
'fernet_keys' => {
|
|
'/etc/keystone/fernet-keys/0' => {
|
|
'content' => 't-WdduhORSqoyAykuqWAQSYjg2rSRuJYySgI2xh48CI=',
|
|
},
|
|
'/etc/keystone/fernet-keys/1' => {
|
|
'content' => 'GLlnyygEVJP4-H2OMwClXn3sdSQUZsM5F194139Unv8=',
|
|
},
|
|
},
|
|
'fernet_replace_keys' => false,
|
|
}
|
|
end
|
|
|
|
it { is_expected.to_not contain_exec('keystone-manage fernet_setup') }
|
|
it { is_expected.to contain_file('/etc/keystone/fernet-keys/0').with(
|
|
'content' => 't-WdduhORSqoyAykuqWAQSYjg2rSRuJYySgI2xh48CI=',
|
|
'owner' => 'keystone',
|
|
'mode' => '0600',
|
|
'replace' => false,
|
|
'subscribe' => 'Anchor[keystone::install::end]',
|
|
)}
|
|
it { is_expected.to contain_file('/etc/keystone/fernet-keys/1').with(
|
|
'content' => 'GLlnyygEVJP4-H2OMwClXn3sdSQUZsM5F194139Unv8=',
|
|
'owner' => 'keystone',
|
|
'mode' => '0600',
|
|
'replace' => false,
|
|
'subscribe' => 'Anchor[keystone::install::end]',
|
|
)}
|
|
end
|
|
|
|
context 'with default domain and eventlet service is managed and enabled' do
|
|
let :params do
|
|
{ 'default_domain' => 'test' }
|
|
end
|
|
|
|
it { is_expected.to contain_exec('restart_keystone').with(
|
|
'command' => "systemctl restart #{platform_params[:service_name]}",
|
|
) }
|
|
it { is_expected.to contain_anchor('default_domain_created') }
|
|
end
|
|
|
|
context 'with default domain and wsgi service is managed and enabled' do
|
|
let :pre_condition do
|
|
'include apache'
|
|
end
|
|
|
|
let :params do
|
|
{
|
|
'default_domain'=> 'test',
|
|
'service_name' => 'httpd',
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_anchor('default_domain_created') }
|
|
end
|
|
|
|
context 'with default domain and service is not managed' do
|
|
let :params do
|
|
{
|
|
'default_domain' => 'test',
|
|
'manage_service' => false,
|
|
}
|
|
end
|
|
|
|
it { is_expected.to_not contain_exec('restart_keystone') }
|
|
it { is_expected.to contain_anchor('default_domain_created') }
|
|
end
|
|
|
|
context 'when using domain config' do
|
|
let :params do
|
|
{ 'using_domain_config'=> true }
|
|
end
|
|
|
|
it { is_expected.to contain_file('/etc/keystone/domains').with(
|
|
'ensure' => "directory",
|
|
) }
|
|
it { is_expected
|
|
.to contain_keystone_config('identity/domain_specific_drivers_enabled')
|
|
.with('value' => true,
|
|
) }
|
|
it { is_expected
|
|
.to contain_keystone_config('identity/domain_config_dir')
|
|
.with('value' => '/etc/keystone/domains',
|
|
) }
|
|
end
|
|
|
|
context 'when using domain config and a wrong directory' do
|
|
let :params do
|
|
{
|
|
'using_domain_config'=> true,
|
|
'domain_config_directory' => 'this/is/not/an/absolute/path'
|
|
}
|
|
end
|
|
|
|
it { should raise_error(Puppet::Error) }
|
|
end
|
|
|
|
context 'when setting domain directory and not using domain config' do
|
|
let :params do
|
|
{
|
|
'using_domain_config'=> false,
|
|
'domain_config_directory' => '/this/is/an/absolute/path'
|
|
}
|
|
end
|
|
|
|
it 'should raise an error' do
|
|
expect { should contain_file('/etc/keystone/domains') }
|
|
.to raise_error(Puppet::Error, %r(You must activate domain))
|
|
end
|
|
end
|
|
|
|
context 'when setting domain directory and using domain config' do
|
|
let :params do
|
|
{
|
|
'using_domain_config'=> true,
|
|
'domain_config_directory' => '/this/is/an/absolute/path'
|
|
}
|
|
end
|
|
|
|
it { is_expected.to contain_file('/this/is/an/absolute/path').with(
|
|
'ensure' => "directory",
|
|
) }
|
|
end
|
|
end
|
|
|
|
on_supported_os({
|
|
:supported_os => OSDefaults.get_supported_os
|
|
}).each do |os,facts|
|
|
context "on #{os}" do
|
|
let (:facts) do
|
|
facts.merge!(OSDefaults.get_facts({
|
|
:concat_basedir => '/var/lib/puppet/concat',
|
|
:fqdn => 'some.host.tld',
|
|
}))
|
|
end
|
|
|
|
let(:platform_params) do
|
|
case facts[:osfamily]
|
|
when 'Debian'
|
|
{ :package_name => 'keystone',
|
|
:service_name => 'keystone',
|
|
:httpd_service_name => 'apache2' }
|
|
when 'RedHat'
|
|
{ :package_name => 'opnestack-keystone',
|
|
:service_name => 'openstack-keystone',
|
|
:httpd_service_name => 'httpd' }
|
|
end
|
|
end
|
|
|
|
it_behaves_like 'keystone'
|
|
end
|
|
end
|
|
end
|