Mercurial > repos > other > Puppet

comparison modules/common/spec/defines/mkuser_spec.rb @ 388:750d36241580

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add missing dependency modules Probably required by SSH, but not obviously listed
author IBBoard <dev@ibboard.co.uk>
date Mon, 03 Jan 2022 17:15:14 +0000
parents
children
comparison
equal deleted inserted replaced
387:66c075c5f54a 388:750d36241580
1 require 'spec_helper'
2
3 clientversion = `facter puppetversion`
4
5 describe 'common::mkuser' do
6 let(:title) { 'alice' }
7 let(:facts) do
8 { :osfamily => 'RedHat',
9 :puppetversion => clientversion,
10 }
11 end
12
13 context 'user alice with default values' do
14 let(:params) { { :uid => 1000 } }
15
16 it do
17 should contain_user('alice').with({
18 'uid' => '1000',
19 'gid' => '1000',
20 'shell' => '/bin/bash',
21 'home' => '/home/alice',
22 'ensure' => 'present',
23 'groups' => 'alice',
24 'password' => '!!',
25 'managehome' => 'true',
26 'comment' => 'created via puppet',
27 })
28 end
29
30 it do
31 should contain_file('/home/alice').with({
32 'owner' => 'alice',
33 'group' => 'alice',
34 'mode' => '0700',
35 'require' => 'Common::Mkdir_p[/home/alice]',
36 })
37 end
38
39 it do
40 should contain_file('/home/alice/.ssh').with({
41 'ensure' => 'directory',
42 'mode' => '0700',
43 'owner' => 'alice',
44 'group' => 'alice',
45 'require' => 'User[alice]',
46 })
47 end
48
49 it { should contain_common__mkdir_p('/home/alice') }
50
51 it do
52 should contain_group('alice').with({
53 'ensure' => 'present',
54 'gid' => 1000,
55 'name' => 'alice',
56 })
57 end
58
59 it { should_not contain_ssh_authorized_key('alice') }
60 end
61
62 context 'user alice with custom values' do
63 let(:params) do
64 {
65 'uid' => 2000,
66 'group' => 'superusers',
67 'gid' => 2000,
68 'shell' => '/bin/zsh',
69 'home' => '/home/superu',
70 'groups' => %w(superusers development admins),
71 'password' => 'puppet',
72 'mode' => '0701',
73 'comment' => 'a puppet master',
74 }
75 end
76
77 it do
78 should contain_user('alice').with({
79 'uid' => '2000',
80 'gid' => '2000',
81 'shell' => '/bin/zsh',
82 'home' => '/home/superu',
83 'groups' => %w(superusers development admins),
84 'password' => 'puppet',
85 'comment' => 'a puppet master',
86 })
87 end
88
89 it do
90 should contain_file('/home/superu').with({
91 'owner' => 'alice',
92 'group' => 'superusers',
93 'mode' => '0701',
94 'require' => 'Common::Mkdir_p[/home/superu]',
95 })
96 end
97
98 it do
99 should contain_file('/home/superu/.ssh').with({
100 'ensure' => 'directory',
101 'mode' => '0700',
102 'owner' => 'alice',
103 'group' => 'alice',
104 'require' => 'User[alice]',
105 })
106 end
107
108 it { should contain_common__mkdir_p('/home/superu') }
109
110 it { should_not contain_ssh_authorized_key('myuser') }
111 end
112
113 context 'do not manage home' do
114 let(:params) do
115 {
116 'uid' => 1000,
117 'managehome' => false
118 }
119 end
120
121 it { should_not contain_file('/home/alice') }
122
123 it { should_not contain_common__mkdir_p('/home/alice') }
124
125 it { should contain_user('alice').with_managehome(false) }
126 end
127
128 context 'do not manage dotssh' do
129 let(:params) do
130 {
131 'uid' => 1000,
132 'manage_dotssh' => false
133 }
134 end
135
136 it { should_not contain_file('/home/alice/.ssh') }
137
138 it { should_not contain_ssh_authorized_key('alice') }
139 end
140
141 describe 'with ssh_auth_key parameter specified' do
142 context 'with defaults for ssh_auth_key_type parameter' do
143 let(:params) do
144 {
145 'uid' => 1000,
146 'ssh_auth_key' => 'AAAB3NzaC1yc2EAAAABIwAAAQEArGElx46pD6NNnlxVaTbp0ZJMgBKCmbTCT3RaeCk0ZUJtQ8wkcwTtqIXmmiuFsynUT0DFSd8UIodnBOPqitimmooAVAiAi30TtJVzADfPScMiUnBJKZajIBkEMkwUcqsfh630jyBvLPE/kyQcxbEeGtbu1DG3monkeymanOBW1AKc5o+cJLXcInLnbowMG7NXzujT3BRYn/9s5vtT1V9cuZJs4XLRXQ50NluxJI7sVfRPVvQI9EMbTS4AFBXUej3yfgaLSV+nPZC/lmJ2gR4t/tKvMFF9m16f8IcZKK7o0rK7v81G/tREbOT5YhcKLK+0wBfR6RsmHzwy4EddZloyLQ==',
147 }
148 end
149
150 it do
151 should contain_ssh_authorized_key('alice').with({
152 'ensure' => 'present',
153 'user' => 'alice',
154 'key' => 'AAAB3NzaC1yc2EAAAABIwAAAQEArGElx46pD6NNnlxVaTbp0ZJMgBKCmbTCT3RaeCk0ZUJtQ8wkcwTtqIXmmiuFsynUT0DFSd8UIodnBOPqitimmooAVAiAi30TtJVzADfPScMiUnBJKZajIBkEMkwUcqsfh630jyBvLPE/kyQcxbEeGtbu1DG3monkeymanOBW1AKc5o+cJLXcInLnbowMG7NXzujT3BRYn/9s5vtT1V9cuZJs4XLRXQ50NluxJI7sVfRPVvQI9EMbTS4AFBXUej3yfgaLSV+nPZC/lmJ2gR4t/tKvMFF9m16f8IcZKK7o0rK7v81G/tREbOT5YhcKLK+0wBfR6RsmHzwy4EddZloyLQ==',
155 'type' => 'ssh-dss',
156 'require' => 'File[/home/alice/.ssh]',
157 })
158 end
159 end
160
161 context 'with ssh_auth_key_type parameter specified' do
162 let(:params) do
163 {
164 'uid' => 1000,
165 'ssh_auth_key' => 'AAAB3NzaC1yc2EAAAABIwAAAQEArGElx46pD6NNnlxVaTbp0ZJMgBKCmbTCT3RaeCk0ZUJtQ8wkcwTtqIXmmiuFsynUT0DFSd8UIodnBOPqitimmooAVAiAi30TtJVzADfPScMiUnBJKZajIBkEMkwUcqsfh630jyBvLPE/kyQcxbEeGtbu1DG3monkeymanOBW1AKc5o+cJLXcInLnbowMG7NXzujT3BRYn/9s5vtT1V9cuZJs4XLRXQ50NluxJI7sVfRPVvQI9EMbTS4AFBXUej3yfgaLSV+nPZC/lmJ2gR4t/tKvMFF9m16f8IcZKK7o0rK7v81G/tREbOT5YhcKLK+0wBfR6RsmHzwy4EddZloyLQ==',
166 'ssh_auth_key_type' => 'ssh-rsa',
167 }
168 end
169
170 it do
171 should contain_ssh_authorized_key('alice').with({
172 'ensure' => 'present',
173 'user' => 'alice',
174 'key' => 'AAAB3NzaC1yc2EAAAABIwAAAQEArGElx46pD6NNnlxVaTbp0ZJMgBKCmbTCT3RaeCk0ZUJtQ8wkcwTtqIXmmiuFsynUT0DFSd8UIodnBOPqitimmooAVAiAi30TtJVzADfPScMiUnBJKZajIBkEMkwUcqsfh630jyBvLPE/kyQcxbEeGtbu1DG3monkeymanOBW1AKc5o+cJLXcInLnbowMG7NXzujT3BRYn/9s5vtT1V9cuZJs4XLRXQ50NluxJI7sVfRPVvQI9EMbTS4AFBXUej3yfgaLSV+nPZC/lmJ2gR4t/tKvMFF9m16f8IcZKK7o0rK7v81G/tREbOT5YhcKLK+0wBfR6RsmHzwy4EddZloyLQ==',
175 'type' => 'ssh-rsa',
176 'require' => 'File[/home/alice/.ssh]',
177 })
178 end
179 end
180 end
181
182 # purge_ssh_keys was introduced with Puppet 3.6.0
183 # we need to know which version of Puppet is running this test
184 # to decide which results we need to expect
185 # dirty trick to get the running version of Puppet:
186 clientversion = `facter puppetversion`
187 # test environments contains no facts, we need to set it as fact
188
189 describe "with purge_ssh_keys running on Puppet version #{clientversion}" do
190 let(:facts) do
191 {
192 :osfamily => 'RedHat',
193 :puppetversion => clientversion,
194 }
195 end
196
197 context 'set to undef/nil' do
198 let(:params) { { :uid => 1000 } }
199
200 if clientversion.to_f >= 3.6
201 it { should contain_user('alice').with_purge_ssh_keys(false) }
202 else
203 it { should contain_user('alice').without_purge_ssh_keys }
204 end
205 end
206
207 context 'set to true' do
208 let(:params) do
209 {
210 'uid' => 1000,
211 'purge_ssh_keys' => true,
212 }
213 end
214
215 if clientversion.to_f >= 3.6
216 it { should contain_user('alice').with_purge_ssh_keys(true) }
217 else
218 it { should contain_user('alice').without_purge_ssh_keys }
219 end
220 end
221
222 context 'set to false' do
223 let(:params) do
224 {
225 'uid' => 1000,
226 'purge_ssh_keys' => false,
227 }
228 end
229
230 if clientversion.to_f >= 3.6
231 it { should contain_user('alice').with_purge_ssh_keys(false) }
232 else
233 it { should contain_user('alice').without_purge_ssh_keys }
234 end
235 end
236 end
237
238 describe 'variable type and content validations' do
239 # set needed custom facts and variables
240 let(:facts) do
241 {
242 :osfamily => 'RedHat',
243 :puppetversion => clientversion,
244 }
245 end
246 let(:validation_params) do
247 {
248 :uid => 1000,
249 }
250 end
251
252 validations = {
253 'bool_stringified' => {
254 :name => %w(managehome manage_dotssh purge_ssh_keys),
255 :valid => [true, false, 'true', 'false'],
256 :invalid => ['invalid', %w(array), { 'ha' => 'sh' }, 3, 2.42, nil],
257 :message => '(str2bool|must be boolean or string)',
258 },
259 }
260
261 validations.sort.each do |type, var|
262 var[:name].each do |var_name|
263 var[:valid].each do |valid|
264 context "with #{var_name} (#{type}) set to valid #{valid} (as #{valid.class})" do
265 let(:params) { validation_params.merge({ :"#{var_name}" => valid, }) }
266 it { should compile }
267 end
268 end
269
270 var[:invalid].each do |invalid|
271 context "with #{var_name} (#{type}) set to invalid #{invalid} (as #{invalid.class})" do
272 let(:params) { validation_params.merge({ :"#{var_name}" => invalid, }) }
273 it 'should fail' do
274 expect do
275 should contain_class(subject)
276 end.to raise_error(Puppet::Error, /#{var[:message]}/)
277 end
278 end
279 end
280 end # var[:name].each
281 end # validations.sort.each
282 end # describe 'variable type and content validations'
283 end