3fb02701f3
The reseller admin role has the ability to create and delete accounts. Set the default as undef, so that new config is not added until a user wants to add it. Also clean up leftover concat items from proxy spec tests. Change-Id: I5936fe30b1cb7197bf37748f204a054b1e49e430
86 lines
3.0 KiB
Ruby
86 lines
3.0 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'swift::proxy::tempauth' do
|
|
let :default_params do {
|
|
'account_user_list' => [
|
|
{
|
|
'user' => 'admin',
|
|
'account' => 'admin',
|
|
'key' => 'admin',
|
|
'groups' => [ 'admin', 'reseller_admin' ],
|
|
},
|
|
]
|
|
}
|
|
end
|
|
|
|
let :params do default_params end
|
|
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/use').with_value('egg:swift#tempauth') }
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/user_admin_admin').with_value('admin .admin .reseller_admin') }
|
|
|
|
it { is_expected.to_not contain_swift_proxy_config('filter:tempauth/reseller_prefix').with_value('') }
|
|
it { is_expected.to_not contain_swift_proxy_config('filter:tempauth/token_life').with_value('') }
|
|
it { is_expected.to_not contain_swift_proxy_config('filter:tempauth/auth_prefix').with_value('') }
|
|
it { is_expected.to_not contain_swift_proxy_config('filter:tempauth/storage_url_scheme').with_value('') }
|
|
|
|
context 'declaring two users' do
|
|
let :params do {
|
|
'account_user_list' => [
|
|
{
|
|
'user' => 'admin',
|
|
'account' => 'admin',
|
|
'key' => 'admin',
|
|
'groups' => [ 'admin', 'reseller_admin' ],
|
|
},
|
|
{
|
|
'user' => 'foo',
|
|
'account' => 'bar',
|
|
'key' => 'pass',
|
|
'groups' => [ 'reseller_admin' ],
|
|
},
|
|
]
|
|
} end
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/user_admin_admin').with_value('admin .admin .reseller_admin') }
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/user_bar_foo').with_value('pass .reseller_admin') }
|
|
end
|
|
|
|
context 'when group is empty' do
|
|
let :params do {
|
|
'account_user_list' => [
|
|
{
|
|
'user' => 'admin',
|
|
'account' => 'admin',
|
|
'key' => 'admin',
|
|
'groups' => [],
|
|
},
|
|
]
|
|
} end
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/user_admin_admin').with_value('admin') }
|
|
end
|
|
|
|
|
|
context 'when undef params are set' do
|
|
let :params do {
|
|
'reseller_prefix' => 'auth',
|
|
'token_life' => 81600,
|
|
'auth_prefix' => '/auth/',
|
|
'storage_url_scheme' => 'http',
|
|
}.merge(default_params)
|
|
end
|
|
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/reseller_prefix').with_value('AUTH') }
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/token_life').with_value('81600') }
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/auth_prefix').with_value('/auth/') }
|
|
it { is_expected.to contain_swift_proxy_config('filter:tempauth/storage_url_scheme').with_value('http') }
|
|
|
|
describe "invalid params" do
|
|
['account_user_list', 'token_life', 'auth_prefix', 'storage_url_scheme'].each do |param|
|
|
let :params do { param => 'foobar' }.merge(default_params) end
|
|
it "invalid #{param} should fail" do
|
|
expect { catalogue }.to raise_error(Puppet::Error)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|