2a53c66ed3
openstacklib::policy has never been used in any other modules because it was implemented as a class not reusable for each service. This change re-implements openstacklib::policy as a defined resource type so that we can use this implementation from each puppet modules. The openstacklib::policy resource type provides the purge_config parameter. When this parameter is set to true, a policy file is cleared during configuration process. This allows users to remove any existing rules before applying their own (no) rules. Change-Id: I9bb486c9191c50c11717dcb9c6af00d17c3aa8f5
139 lines
3.9 KiB
Ruby
139 lines
3.9 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'openstacklib::policy::base' do
|
|
shared_examples 'openstacklib::policy::base' do
|
|
context 'with policy.json' do
|
|
let :title do
|
|
'nova-contest_is_admin'
|
|
end
|
|
|
|
let :params do
|
|
{
|
|
:file_path => '/etc/nova/policy.json',
|
|
:key => 'context_is_admin or owner',
|
|
:value => 'foo:bar',
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'json',
|
|
}
|
|
end
|
|
|
|
it { should contain_openstacklib__policy__default('/etc/nova/policy.json').with(
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'json',
|
|
:purge_config => false,
|
|
)}
|
|
|
|
it { should contain_augeas('/etc/nova/policy.json-context_is_admin or owner-foo:bar').with(
|
|
:lens => 'Json.lns',
|
|
:incl => '/etc/nova/policy.json',
|
|
:changes => 'set dict/entry[*][.="context_is_admin or owner"]/string "foo:bar"',
|
|
)}
|
|
|
|
it { should contain_augeas('/etc/nova/policy.json-context_is_admin or owner-foo:bar-add').with(
|
|
:lens => 'Json.lns',
|
|
:incl => '/etc/nova/policy.json',
|
|
:changes => [
|
|
'set dict/entry[last()+1] "context_is_admin or owner"',
|
|
'set dict/entry[last()]/string "foo:bar"'
|
|
],
|
|
:onlyif => 'match dict/entry[*][.="context_is_admin or owner"] size == 0'
|
|
)}
|
|
end
|
|
|
|
context 'with policy.yaml' do
|
|
let :title do
|
|
'nova-contest_is_admin'
|
|
end
|
|
|
|
let :params do
|
|
{
|
|
:file_path => '/etc/nova/policy.yaml',
|
|
:key => 'context_is_admin or owner',
|
|
:value => 'foo:bar',
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'yaml',
|
|
}
|
|
end
|
|
|
|
it { should contain_openstacklib__policy__default('/etc/nova/policy.yaml').with(
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'yaml',
|
|
:purge_config => false,
|
|
)}
|
|
|
|
it { should contain_file_line('/etc/nova/policy.yaml-context_is_admin or owner').with(
|
|
:path => '/etc/nova/policy.yaml',
|
|
:line => '\'context_is_admin or owner\': \'foo:bar\'',
|
|
:match => '^[\'"]?context_is_admin or owner[\'"]?\s*:.+'
|
|
) }
|
|
end
|
|
|
|
context 'with purge_config enabled' do
|
|
let :title do
|
|
'nova-contest_is_admin'
|
|
end
|
|
|
|
let :params do
|
|
{
|
|
:file_path => '/etc/nova/policy.yaml',
|
|
:key => 'context_is_admin or owner',
|
|
:value => 'foo:bar',
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'yaml',
|
|
:purge_config => true,
|
|
}
|
|
end
|
|
|
|
it { should contain_openstacklib__policy__default('/etc/nova/policy.yaml').with(
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'yaml',
|
|
:purge_config => true,
|
|
)}
|
|
end
|
|
|
|
context 'with json file_path and yaml file format' do
|
|
let :title do
|
|
'nova-contest_is_admin'
|
|
end
|
|
|
|
let :params do
|
|
{
|
|
:file_path => '/etc/nova/policy.json',
|
|
:key => 'context_is_admin or owner',
|
|
:value => 'foo:bar',
|
|
:file_mode => '0644',
|
|
:file_user => 'foo',
|
|
:file_group => 'bar',
|
|
:file_format => 'yaml',
|
|
}
|
|
end
|
|
|
|
it { should raise_error(Puppet::Error) }
|
|
end
|
|
end
|
|
|
|
on_supported_os({
|
|
:supported_os => OSDefaults.get_supported_os
|
|
}).each do |os,facts|
|
|
context "on #{os}" do
|
|
let (:facts) do
|
|
facts.merge!(OSDefaults.get_facts())
|
|
end
|
|
|
|
it_behaves_like 'openstacklib::policy::base'
|
|
end
|
|
end
|
|
end
|