|
require 'spec_helper'
|
|
|
|
describe 'foreman_proxy::config' do
|
|
on_supported_os.each do |os, facts|
|
|
context "on #{os}" do
|
|
let(:facts) { facts }
|
|
|
|
case facts[:osfamily]
|
|
when 'FreeBSD', 'DragonFly'
|
|
etc_dir = '/usr/local/etc'
|
|
home_dir = '/usr/local/share/foreman-proxy'
|
|
proxy_user_name = 'foreman_proxy'
|
|
shell = '/usr/bin/false'
|
|
usr_dir = '/usr/local'
|
|
var_dir = '/var/puppet'
|
|
else
|
|
etc_dir = '/etc'
|
|
home_dir = '/usr/share/foreman-proxy'
|
|
proxy_user_name = 'foreman-proxy'
|
|
shell = '/bin/false'
|
|
usr_dir = '/usr'
|
|
var_dir = '/var/lib/puppet'
|
|
end
|
|
|
|
if (facts[:puppetversion].to_i >2)
|
|
puppetca_command = "#{usr_dir}/bin/puppet cert *"
|
|
puppetrun_command = "#{usr_dir}/bin/puppet kick *"
|
|
else
|
|
puppetca_command = '/usr/sbin/puppetca *'
|
|
puppetrun_command = '/usr/sbin/puppetrun *'
|
|
end
|
|
|
|
context 'without parameters' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":}'
|
|
end
|
|
|
|
it { should compile.with_all_deps }
|
|
|
|
it 'should include puppetca' do
|
|
should contain_class('foreman_proxy::puppetca')
|
|
end
|
|
|
|
it 'should include tftp' do
|
|
should contain_class('foreman_proxy::tftp')
|
|
end
|
|
|
|
it 'should not include dns' do
|
|
should_not contain_class('foreman_proxy::proxydns')
|
|
end
|
|
|
|
it 'should not include dhcp' do
|
|
should_not contain_class('foreman_proxy::proxydhcp')
|
|
end
|
|
|
|
it 'should install wget' do
|
|
should contain_package('wget').with_ensure('present')
|
|
end
|
|
|
|
it "should create the #{proxy_user_name} user" do
|
|
should contain_user("#{proxy_user_name}").with({
|
|
:ensure => 'present',
|
|
:shell => "#{shell}",
|
|
:comment => 'Foreman Proxy account',
|
|
:groups => ['puppet'],
|
|
:home => "#{home_dir}",
|
|
:require => 'Class[Foreman_proxy::Install]',
|
|
:notify => 'Class[Foreman_proxy::Service]',
|
|
})
|
|
end
|
|
|
|
it 'should create configuration files' do
|
|
[ "#{etc_dir}/foreman-proxy/settings.yml", "#{etc_dir}/foreman-proxy/settings.d/tftp.yml", "#{etc_dir}/foreman-proxy/settings.d/dns.yml",
|
|
"#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate.yml", "#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate_gss.yml",
|
|
"#{etc_dir}/foreman-proxy/settings.d/dhcp.yml", "#{etc_dir}/foreman-proxy/settings.d/dhcp_isc.yml",
|
|
"#{etc_dir}/foreman-proxy/settings.d/puppetca.yml", "#{etc_dir}/foreman-proxy/settings.d/puppet.yml",
|
|
"#{etc_dir}/foreman-proxy/settings.d/bmc.yml", "#{etc_dir}/foreman-proxy/settings.d/realm.yml", "#{etc_dir}/foreman-proxy/settings.d/templates.yml"].each do |cfile|
|
|
should contain_file(cfile).
|
|
with({
|
|
:owner => 'root',
|
|
:group => "#{proxy_user_name}",
|
|
:mode => '0640',
|
|
:require => 'Class[Foreman_proxy::Install]',
|
|
:notify => 'Class[Foreman_proxy::Service]',
|
|
})
|
|
end
|
|
end
|
|
|
|
it 'should generate correct settings.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
'---',
|
|
":settings_directory: #{etc_dir}/foreman-proxy/settings.d",
|
|
":ssl_ca_file: #{var_dir}/ssl/certs/ca.pem",
|
|
":ssl_certificate: #{var_dir}/ssl/certs/#{facts[:fqdn]}.pem",
|
|
":ssl_private_key: #{var_dir}/ssl/private_keys/#{facts[:fqdn]}.pem",
|
|
':trusted_hosts:',
|
|
" - #{facts[:fqdn]}",
|
|
":foreman_url: https://#{facts[:fqdn]}",
|
|
':daemon: true',
|
|
':bind_host: \'*\'',
|
|
':https_port: 8443',
|
|
':virsh_network: default',
|
|
':log_file: /var/log/foreman-proxy/proxy.log',
|
|
':log_level: ERROR',
|
|
])
|
|
end
|
|
|
|
it 'should generate correct bmc.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/bmc.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
':bmc_default_provider: ipmitool',
|
|
])
|
|
end
|
|
|
|
it 'should generate correct dhcp.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dhcp.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
':use_provider: dhcp_isc',
|
|
':server: 127.0.0.1',
|
|
])
|
|
end
|
|
|
|
it 'should generate correct dns.yml' do
|
|
dns_key = case facts[:osfamily]
|
|
when 'Debian'
|
|
'/etc/bind/rndc.key'
|
|
when 'FreeBSD', 'DragonFly'
|
|
'/usr/local/etc/namedb/rndc.key'
|
|
else
|
|
'/etc/rndc.key'
|
|
end
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dns.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
':use_provider: dns_nsupdate',
|
|
':dns_ttl: 86400',
|
|
])
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate.yml", [
|
|
'---',
|
|
":dns_key: #{dns_key}",
|
|
':dns_server: 127.0.0.1',
|
|
])
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate_gss.yml", [
|
|
'---',
|
|
':dns_server: 127.0.0.1',
|
|
":dns_tsig_keytab: #{etc_dir}/foreman-proxy/dns.keytab",
|
|
":dns_tsig_principal: foremanproxy/#{facts[:fqdn]}@EXAMPLE.COM",
|
|
])
|
|
end
|
|
|
|
it 'should generate correct puppet.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
'---',
|
|
':enabled: https',
|
|
":puppet_conf: #{etc_dir}/puppet/puppet.conf",
|
|
":customrun_cmd: #{shell}",
|
|
':customrun_args: -ay -f -s',
|
|
':puppetssh_sudo: false',
|
|
":puppetssh_command: #{usr_dir}/bin/puppet agent --onetime --no-usecacheonfailure",
|
|
':puppetssh_wait: false',
|
|
":puppet_url: https://#{facts[:fqdn]}:8140",
|
|
":puppet_ssl_ca: #{var_dir}/ssl/certs/ca.pem",
|
|
":puppet_ssl_cert: #{var_dir}/ssl/certs/#{facts[:fqdn]}.pem",
|
|
":puppet_ssl_key: #{var_dir}/ssl/private_keys/#{facts[:fqdn]}.pem",
|
|
])
|
|
end
|
|
|
|
it 'should generate correct puppetca.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppetca.yml", [
|
|
'---',
|
|
':enabled: https',
|
|
":ssldir: #{var_dir}/ssl",
|
|
":puppetdir: #{etc_dir}/puppet",
|
|
])
|
|
end
|
|
|
|
it 'should generate correct tftp.yml' do
|
|
tftp_root = case facts[:osfamily]
|
|
when 'Debian'
|
|
case facts[:operatingsystem]
|
|
when 'Ubuntu'
|
|
'/var/lib/tftpboot'
|
|
else
|
|
'/srv/tftp'
|
|
end
|
|
when 'FreeBSD', 'DragonFly'
|
|
'/tftpboot'
|
|
else
|
|
'/var/lib/tftpboot'
|
|
end
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/tftp.yml", [
|
|
'---',
|
|
':enabled: https',
|
|
":tftproot: #{tftp_root}",
|
|
])
|
|
end
|
|
|
|
if facts[:osfamily] == 'Debian'
|
|
case facts[:operatingsystemmajrelease]
|
|
when '7'
|
|
it 'should copy the correct default files for Debian 7' do
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/chain.c32')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/menu.c32')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/memdisk')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/pxelinux.0')
|
|
end
|
|
when '8'
|
|
it 'should copy the correct default files for Debian 8' do
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/PXELINUX/pxelinux.0')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/memdisk')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/modules/bios/chain.c32')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/modules/bios/ldlinux.c32')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/modules/bios/libutil.c32')
|
|
should contain_foreman_proxy__tftp__copy_file('/usr/lib/syslinux/modules/bios/menu.c32')
|
|
end
|
|
end
|
|
end
|
|
|
|
it 'should generate correct realm.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/realm.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
':realm_provider: freeipa',
|
|
":realm_keytab: #{etc_dir}/foreman-proxy/freeipa.keytab",
|
|
':realm_principal: realm-proxy@EXAMPLE.COM',
|
|
':freeipa_remove_dns: true',
|
|
])
|
|
end
|
|
|
|
it 'should generate correct templates.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/templates.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
":template_url: http://#{facts[:fqdn]}:8000",
|
|
])
|
|
end
|
|
|
|
it 'should set up sudo rules' do
|
|
should contain_file("#{etc_dir}/sudoers.d").with_ensure('directory')
|
|
|
|
should contain_file("#{etc_dir}/sudoers.d/foreman-proxy").with({
|
|
:ensure => 'file',
|
|
:owner => 'root',
|
|
:group => 0,
|
|
:mode => '0440',
|
|
})
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/sudoers.d/foreman-proxy", [
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetca_command}",
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetrun_command}",
|
|
"Defaults:#{proxy_user_name} !requiretty",
|
|
])
|
|
end
|
|
|
|
it "should not manage #{etc_dir}/sudoers.d" do
|
|
should contain_file("#{etc_dir}/sudoers.d").with_ensure('directory')
|
|
end
|
|
end
|
|
|
|
context 'with custom foreman_ssl params' do
|
|
let(:facts) { facts }
|
|
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
foreman_ssl_ca => "/etc/pki/ca.pem",
|
|
foreman_ssl_cert => "/etc/pki/cert.pem",
|
|
foreman_ssl_key => "/etc/pki/key.pem",
|
|
}'
|
|
end
|
|
|
|
it 'should generate correct settings.yml' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
":foreman_ssl_ca: /etc/pki/ca.pem",
|
|
":foreman_ssl_cert: /etc/pki/cert.pem",
|
|
":foreman_ssl_key: /etc/pki/key.pem"
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with custom tftp parameters' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
tftp_root => "/tftproot",
|
|
tftp_servername => "127.0.1.1",
|
|
}'
|
|
end
|
|
|
|
it 'should generate correct tftp.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/tftp.yml", [
|
|
'---',
|
|
':enabled: https',
|
|
':tftproot: /tftproot',
|
|
':tftp_servername: 127.0.1.1'
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with bmc' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
bmc => true,
|
|
bmc_default_provider => "shell",
|
|
}'
|
|
end
|
|
|
|
it 'should enable bmc with shell' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/bmc.yml", [
|
|
':enabled: https',
|
|
':bmc_default_provider: shell',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with TFTP enabled and tftp_syslinux_filenames set' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
tftp => true,
|
|
tftp_syslinux_filenames => [ "/my/file", "/my/anotherfile" ],
|
|
}'
|
|
end
|
|
|
|
it 'should copy the given files' do
|
|
should contain_foreman_proxy__tftp__copy_file('/my/file')
|
|
should contain_foreman_proxy__tftp__copy_file('/my/anotherfile')
|
|
end
|
|
end
|
|
|
|
context 'with tftp_manage_wget disabled' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
tftp_manage_wget => false,
|
|
}'
|
|
end
|
|
|
|
it 'should not install wget' do
|
|
should_not contain_package('wget')
|
|
end
|
|
end
|
|
|
|
context 'with pupppetrun_provider set to mcollective' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
puppetrun => true,
|
|
puppetrun_provider => "mcollective",
|
|
}'
|
|
end
|
|
|
|
it 'should contain mcollective as puppet_provider and puppet_user as root' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
':puppet_provider: mcollective',
|
|
':puppet_user: root',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'only http enabled' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
ssl => false,
|
|
http => true,
|
|
}'
|
|
end
|
|
|
|
it 'should comment out ssl configuration items' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
'#:ssl_ca_file: ssl/certs/ca.pem',
|
|
'#:ssl_certificate: ssl/certs/fqdn.pem',
|
|
'#:ssl_private_key: ssl/private_keys/fqdn.key',
|
|
'#:https_port: 8443',
|
|
':http_port: 8000',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'both http and ssl enabled' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
ssl => true,
|
|
ssl_port => 867,
|
|
http => true,
|
|
http_port => 5309,
|
|
}'
|
|
end
|
|
|
|
it 'should configure both http and ssl on their respective ports' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
':https_port: 867',
|
|
':http_port: 5309',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with deprecated parameters' do
|
|
context 'with ssl => true' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
ssl => true,
|
|
port => 1234,
|
|
}'
|
|
end
|
|
|
|
it 'should use port for ssl' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
':https_port: 1234',
|
|
'#:http_port: 1234',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with ssl => false' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
ssl => false,
|
|
port => 1234,
|
|
}'
|
|
end
|
|
|
|
it 'should use port for http' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
'#:https_port: 1234',
|
|
':http_port: 1234',
|
|
])
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'when dns_provider => nsupdate_gss' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
dns_provider => "nsupdate_gss",
|
|
}'
|
|
end
|
|
|
|
it 'should contain dns_tsig_* settings' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dns.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
':use_provider: dns_nsupdate_gss',
|
|
':dns_ttl: 86400',
|
|
])
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate_gss.yml", [
|
|
'---',
|
|
':dns_server: 127.0.0.1',
|
|
":dns_tsig_keytab: #{etc_dir}/foreman-proxy/dns.keytab",
|
|
":dns_tsig_principal: foremanproxy/#{facts[:fqdn]}@EXAMPLE.COM",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when dns_split_config_files => false' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
dns_split_config_files => false,
|
|
}'
|
|
end
|
|
|
|
it 'should not split the dns config' do
|
|
dns_key = case facts[:osfamily]
|
|
when 'Debian'
|
|
'/etc/bind/rndc.key'
|
|
when 'FreeBSD', 'Dragonfly'
|
|
'/usr/local/etc/namedb/rndc.key'
|
|
else
|
|
'/etc/rndc.key'
|
|
end
|
|
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dns.yml", [
|
|
'---',
|
|
':enabled: false',
|
|
':dns_provider: nsupdate',
|
|
':dns_server: 127.0.0.1',
|
|
':dns_ttl: 86400',
|
|
":dns_key: #{dns_key}",
|
|
])
|
|
|
|
should_not contain_file("#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate.yml")
|
|
should_not contain_file("#{etc_dir}/foreman-proxy/settings.d/dns_nsupdate_gss.yml")
|
|
end
|
|
end
|
|
|
|
context 'when puppetrun_provider => puppetrun' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
puppetrun_provider => "puppetrun",
|
|
}'
|
|
end
|
|
|
|
it 'should contain puppetrun as puppet_provider and puppet_user as root' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
':puppet_provider: puppetrun',
|
|
':puppet_user: root',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppetrun_provider => puppetssh' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
puppetrun_provider => "puppetssh",
|
|
}'
|
|
end
|
|
|
|
it 'should set puppetssh_user and puppetssh_keyfile' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
':puppetssh_user: root',
|
|
":puppetssh_keyfile: #{etc_dir}/foreman-proxy/id_rsa",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppetrun_provider => salt' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
puppetrun_provider => "salt",
|
|
}'
|
|
end
|
|
|
|
it 'should contain salt as puppet_provider and salt_puppetrun_cmd' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
':puppet_provider: salt',
|
|
':salt_puppetrun_cmd: puppet.run',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppet_use_environment_api set' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
puppet_use_environment_api => false,
|
|
}'
|
|
end
|
|
|
|
it 'should set puppet_use_environment_api' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
':puppet_use_environment_api: false',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when trusted_hosts is empty' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
trusted_hosts => [],
|
|
}'
|
|
end
|
|
|
|
it 'should not set trusted_hosts' do
|
|
should contain_file("#{etc_dir}/foreman-proxy/settings.yml").without_content(/[^#]:trusted_hosts/)
|
|
end
|
|
end
|
|
|
|
context 'with custom foreman_base_url' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
foreman_base_url => "http://dummy",
|
|
}'
|
|
end
|
|
|
|
it 'should generate foreman_url setting' do
|
|
content = catalogue.resource('file', "#{etc_dir}/foreman-proxy/settings.yml").send(:parameters)[:content]
|
|
content.split("\n").select { |c| c =~ /foreman_url/ }.should == [':foreman_url: http://dummy']
|
|
end
|
|
end
|
|
|
|
context 'when puppetca_cmd set' do
|
|
let :pre_condition do
|
|
'class { "foreman_proxy":
|
|
puppetca_cmd => "puppet cert",
|
|
}'
|
|
end
|
|
|
|
it "should set puppetca_cmd" do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/sudoers.d/foreman-proxy", [
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : puppet cert *",
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetrun_command}",
|
|
"Defaults:#{proxy_user_name} !requiretty",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppetrun_cmd set' do
|
|
let :pre_condition do
|
|
'class { "foreman_proxy":
|
|
puppetrun_cmd => "mco puppet runonce",
|
|
}'
|
|
end
|
|
|
|
it "should set puppetrun_cmd" do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/sudoers.d/foreman-proxy", [
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetca_command}",
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : mco puppet runonce *",
|
|
"Defaults:#{proxy_user_name} !requiretty",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppet_user set' do
|
|
let :pre_condition do
|
|
'class { "foreman_proxy":
|
|
puppet_user => "some_puppet_user",
|
|
}'
|
|
end
|
|
|
|
it "should set puppetrun_cmd" do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/sudoers.d/foreman-proxy", [
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetca_command}",
|
|
"#{proxy_user_name} ALL = (some_puppet_user) NOPASSWD : #{puppetrun_command}",
|
|
"Defaults:#{proxy_user_name} !requiretty",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppetca disabled' do
|
|
let :pre_condition do
|
|
'class { "foreman_proxy":
|
|
puppetca => false,
|
|
}'
|
|
end
|
|
|
|
it "should not set puppetca" do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/sudoers.d/foreman-proxy", [
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetrun_command}",
|
|
"Defaults:#{proxy_user_name} !requiretty",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppetrun disabled' do
|
|
let :pre_condition do
|
|
'class { "foreman_proxy":
|
|
puppetrun => false,
|
|
}'
|
|
end
|
|
|
|
it "should not set puppetrun" do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/sudoers.d/foreman-proxy", [
|
|
"#{proxy_user_name} ALL = (root) NOPASSWD : #{puppetca_command}",
|
|
"Defaults:#{proxy_user_name} !requiretty",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when puppetca and puppetrun disabled' do
|
|
let :pre_condition do
|
|
'class { "foreman_proxy":
|
|
puppetca => false,
|
|
puppetrun => false,
|
|
}'
|
|
end
|
|
|
|
it { should_not contain_file("#{etc_dir}/sudoers.d") }
|
|
it { should_not contain_file("#{etc_dir}/sudoers.d/foreman-proxy") }
|
|
end
|
|
|
|
context 'when use_sudoersd => false' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
use_sudoersd => false,
|
|
}'
|
|
end
|
|
|
|
it "should not manage #{etc_dir}/sudoers.d" do
|
|
should_not contain_file("#{etc_dir}/sudoers.d")
|
|
end
|
|
|
|
it "should not manage #{etc_dir}/sudoers.d/foreman-proxy" do
|
|
should_not contain_file("#{etc_dir}/sudoers.d/foreman-proxy")
|
|
end
|
|
|
|
it "should modify #{etc_dir}/sudoers" do
|
|
should contain_augeas('sudo-foreman-proxy').with({
|
|
:context => "/files#{etc_dir}/sudoers",
|
|
})
|
|
|
|
changes = catalogue.resource('augeas', 'sudo-foreman-proxy').send(:parameters)[:changes]
|
|
changes.split("\n").should == [
|
|
"set spec[user = '#{proxy_user_name}'][1]/user #{proxy_user_name}",
|
|
"set spec[user = '#{proxy_user_name}'][1]/host_group/host ALL",
|
|
"set spec[user = '#{proxy_user_name}'][1]/host_group/command '#{puppetca_command}'",
|
|
"set spec[user = '#{proxy_user_name}'][1]/host_group/command/runas_user root",
|
|
"set spec[user = '#{proxy_user_name}'][1]/host_group/command/tag NOPASSWD",
|
|
"set spec[user = '#{proxy_user_name}'][2]/user #{proxy_user_name}",
|
|
"set spec[user = '#{proxy_user_name}'][2]/host_group/host ALL",
|
|
"set spec[user = '#{proxy_user_name}'][2]/host_group/command '#{puppetrun_command}'",
|
|
"set spec[user = '#{proxy_user_name}'][2]/host_group/command/runas_user root",
|
|
"set spec[user = '#{proxy_user_name}'][2]/host_group/command/tag NOPASSWD",
|
|
"rm spec[user = '#{proxy_user_name}'][1]/host_group/command[position() > 1]",
|
|
"set Defaults[type = ':#{proxy_user_name}']/type :#{proxy_user_name}",
|
|
"set Defaults[type = ':#{proxy_user_name}']/requiretty/negate ''",
|
|
]
|
|
end
|
|
|
|
context 'when puppetca => false' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
use_sudoersd => false,
|
|
puppetca => false,
|
|
}'
|
|
end
|
|
|
|
it "should modify #{etc_dir}/sudoers for puppetrun only" do
|
|
changes = catalogue.resource('augeas', 'sudo-foreman-proxy').send(:parameters)[:changes]
|
|
changes.split("\n").should == [
|
|
"set spec[user = '#{proxy_user_name}']/user #{proxy_user_name}",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/host ALL",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/command '#{puppetrun_command}'",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/command/runas_user root",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/command/tag NOPASSWD",
|
|
"rm spec[user = '#{proxy_user_name}'][1]/host_group/command[position() > 1]",
|
|
"set Defaults[type = ':#{proxy_user_name}']/type :#{proxy_user_name}",
|
|
"set Defaults[type = ':#{proxy_user_name}']/requiretty/negate ''",
|
|
]
|
|
end
|
|
end
|
|
|
|
context 'when puppetrun => false' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
use_sudoersd => false,
|
|
puppetrun => false,
|
|
}'
|
|
end
|
|
|
|
it "should modify #{etc_dir}/sudoers for puppetca only" do
|
|
changes = catalogue.resource('augeas', 'sudo-foreman-proxy').send(:parameters)[:changes]
|
|
changes.split("\n").should == [
|
|
"set spec[user = '#{proxy_user_name}']/user #{proxy_user_name}",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/host ALL",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/command '#{puppetca_command}'",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/command/runas_user root",
|
|
"set spec[user = '#{proxy_user_name}']/host_group/command/tag NOPASSWD",
|
|
"rm spec[user = '#{proxy_user_name}'][1]/host_group/command[position() > 1]",
|
|
"set Defaults[type = ':#{proxy_user_name}']/type :#{proxy_user_name}",
|
|
"set Defaults[type = ':#{proxy_user_name}']/requiretty/negate ''",
|
|
]
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'with feature on http' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
templates => true,
|
|
templates_listen_on => "http",
|
|
}'
|
|
end
|
|
|
|
it 'should set enabled to http' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/templates.yml", [
|
|
':enabled: http',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with feature on https' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
templates => true,
|
|
templates_listen_on => "https",
|
|
}'
|
|
end
|
|
|
|
it 'should set enabled to https' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/templates.yml", [
|
|
':enabled: https',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with feature on both' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
templates => true,
|
|
templates_listen_on => "both",
|
|
}'
|
|
end
|
|
|
|
it 'should set enabled to true' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/templates.yml", [
|
|
':enabled: true',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'when log_level => DEBUG' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
log_level => "DEBUG",
|
|
}'
|
|
end
|
|
|
|
it 'should set log_level to DEBUG in setting.yml' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.yml", [
|
|
':log_level: DEBUG',
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with puppet use_cache enabled' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
puppet_use_cache => true,
|
|
}'
|
|
end
|
|
|
|
it 'should create the cache_location' do
|
|
should contain_file('/var/cache/foreman-proxy').with_ensure('directory')
|
|
end
|
|
|
|
it 'should set use_cache and cache_location' do
|
|
verify_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/puppet.yml", [
|
|
':use_cache: true',
|
|
":cache_location: '/var/cache/foreman-proxy'",
|
|
])
|
|
end
|
|
end
|
|
|
|
context 'with dhcp enabled' do
|
|
let :facts do
|
|
facts.merge({
|
|
:concat_basedir => '/doesnotexist',
|
|
})
|
|
end
|
|
|
|
dhcp_interface = case facts[:osfamily]
|
|
when 'FreeBSD', 'DragonFly'
|
|
'lo0'
|
|
else
|
|
'lo'
|
|
end
|
|
|
|
let :pre_condition do
|
|
"class {'foreman_proxy':
|
|
dhcp => true,
|
|
dhcp_interface => '#{dhcp_interface}',
|
|
}"
|
|
end
|
|
|
|
dhcp_leases = case facts[:osfamily]
|
|
when 'Debian'
|
|
'/var/lib/dhcp/dhcpd.leases'
|
|
when 'FreeBSD', 'DragonFly'
|
|
'/var/db/dhcpd/dhcpd.leases'
|
|
else
|
|
'/var/lib/dhcpd/dhcpd.leases'
|
|
end
|
|
|
|
it 'should generate correct dhcp.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dhcp.yml", [
|
|
'---',
|
|
':enabled: https',
|
|
':use_provider: dhcp_isc',
|
|
':server: 127.0.0.1',
|
|
])
|
|
end
|
|
|
|
it 'should generate correct dhcp_isc.yml' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dhcp_isc.yml", [
|
|
'---',
|
|
":config: #{etc_dir}/dhcp/dhcpd.conf",
|
|
":leases: #{dhcp_leases}",
|
|
':omapi_port: 7911',
|
|
])
|
|
end
|
|
|
|
context 'when dhcp_split_config_files => false' do
|
|
let :pre_condition do
|
|
'class {"foreman_proxy":
|
|
dhcp => true,
|
|
dhcp_managed => false,
|
|
dhcp_split_config_files => false,
|
|
}'
|
|
end
|
|
|
|
it 'should not split the dhcp config' do
|
|
verify_exact_contents(catalogue, "#{etc_dir}/foreman-proxy/settings.d/dhcp.yml", [
|
|
'---',
|
|
':enabled: https',
|
|
':dhcp_vendor: isc',
|
|
':dhcp_server: 127.0.0.1',
|
|
":dhcp_config: #{etc_dir}/dhcp/dhcpd.conf",
|
|
":dhcp_leases: #{dhcp_leases}",
|
|
':dhcp_omapi_port: 7911',
|
|
])
|
|
|
|
should_not contain_file("#{etc_dir}/foreman-proxy/settings.d/dhcp_isc.yml")
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
