02512cccbc
The params class is the legacy approach to define OS/version specific values. This replaces the params class by the module hieradata following the recent standard. Depends-on: https://review.opendev.org/c/openstack/puppet-vswitch/+/886112 Change-Id: I8d01236c04cf2b61f1c1bf39ecf54ca0a67a33a9
280 lines
10 KiB
Ruby
280 lines
10 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'ovn::northd' do
|
|
|
|
shared_examples_for 'systemd env' do
|
|
context 'with default parameters' do
|
|
let :params do
|
|
{}
|
|
end
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] + " '\"" +
|
|
"--db-nb-addr=0.0.0.0 --db-sb-addr=0.0.0.0" +
|
|
" --db-nb-create-insecure-remote=yes --db-sb-create-insecure-remote=yes" +
|
|
"\"'",
|
|
})
|
|
end
|
|
it 'does not configure db connections' do
|
|
is_expected.to_not contain_exec('ovn-nb-set-connection')
|
|
is_expected.to_not contain_exec('ovn-sb-set-connection')
|
|
end
|
|
end
|
|
|
|
context 'with ipv6' do
|
|
let :params do
|
|
{
|
|
:dbs_listen_ip => '::1'
|
|
}
|
|
end
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] +
|
|
" '\"--db-nb-addr=[::1] --db-sb-addr=[::1] --db-nb-create-insecure-remote=yes --db-sb-create-insecure-remote=yes\"'",
|
|
})
|
|
end
|
|
end
|
|
|
|
context 'with parameters' do
|
|
let :params do
|
|
{
|
|
:ovn_northd_nb_db => 'ssl:192.0.2.1:6645,ssl:192.0.2.2:6645,ssl:192.0.2.3:6645',
|
|
:ovn_northd_sb_db => ['ssl:192.0.2.1:6646', 'ssl:192.0.2.2:6646', 'ssl:192.0.2.3:6646'],
|
|
:ovn_northd_ssl_key => '/path/to/key.pem',
|
|
:ovn_northd_ssl_cert => '/path/to/cert.pem',
|
|
:ovn_northd_ssl_ca_cert => '/path/to/cacert.pem',
|
|
}
|
|
end
|
|
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] + " '\"" +
|
|
"--db-nb-addr=0.0.0.0 --db-sb-addr=0.0.0.0" +
|
|
" --db-nb-create-insecure-remote=yes --db-sb-create-insecure-remote=yes" +
|
|
" --ovn-northd-nb-db=ssl:192.0.2.1:6645,ssl:192.0.2.2:6645,ssl:192.0.2.3:6645" +
|
|
" --ovn-northd-sb-db=ssl:192.0.2.1:6646,ssl:192.0.2.2:6646,ssl:192.0.2.3:6646" +
|
|
" --ovn-northd-ssl-key=/path/to/key.pem --ovn-northd-ssl-cert=/path/to/cert.pem --ovn-northd-ssl-ca-cert=/path/to/cacert.pem" +
|
|
"\"'",
|
|
})
|
|
end
|
|
it 'does not configures db connections' do
|
|
is_expected.to_not contain_exec('ovn-nb-set-connection')
|
|
is_expected.to_not contain_exec('ovn-sb-set-connection')
|
|
end
|
|
end
|
|
|
|
context 'with nb db ssl enabled' do
|
|
let :params do
|
|
{
|
|
:ovn_nb_db_ssl_key => '/path/to/dbkey.pem',
|
|
:ovn_nb_db_ssl_cert => '/path/to/dbcert.pem',
|
|
:ovn_nb_db_ssl_ca_cert => '/path/to/dbcacert.pem',
|
|
}
|
|
end
|
|
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] + " '\"" +
|
|
"--db-nb-addr=0.0.0.0 --db-sb-addr=0.0.0.0" +
|
|
" --db-nb-create-insecure-remote=no --db-sb-create-insecure-remote=yes" +
|
|
" --ovn-nb-db-ssl-key=/path/to/dbkey.pem --ovn-nb-db-ssl-cert=/path/to/dbcert.pem --ovn-nb-db-ssl-ca-cert=/path/to/dbcacert.pem" +
|
|
"\"'",
|
|
})
|
|
end
|
|
|
|
it 'configures db connections' do
|
|
is_expected.to contain_exec('ovn-nb-set-connection').with({
|
|
:command => 'ovn-nbctl set-connection pssl:6641:0.0.0.0',
|
|
:path => ['/sbin', '/usr/sbin', '/bin', '/usr/bin'],
|
|
:unless => 'ovn-nbctl get-connection | egrep -e \'^pssl:6641:0.0.0.0$\'',
|
|
:tag => 'ovn-db-set-connections',
|
|
})
|
|
is_expected.to_not contain_exec('ovn-sb-set-connection')
|
|
end
|
|
end
|
|
|
|
context 'with ipv6 and nb db ssl enabled' do
|
|
let :params do
|
|
{
|
|
:dbs_listen_ip => '::1',
|
|
:ovn_nb_db_ssl_key => '/path/to/dbkey.pem',
|
|
:ovn_nb_db_ssl_cert => '/path/to/dbcert.pem',
|
|
:ovn_nb_db_ssl_ca_cert => '/path/to/dbcacert.pem',
|
|
}
|
|
end
|
|
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] + " '\"" +
|
|
"--db-nb-addr=[::1] --db-sb-addr=[::1]" +
|
|
" --db-nb-create-insecure-remote=no --db-sb-create-insecure-remote=yes" +
|
|
" --ovn-nb-db-ssl-key=/path/to/dbkey.pem --ovn-nb-db-ssl-cert=/path/to/dbcert.pem --ovn-nb-db-ssl-ca-cert=/path/to/dbcacert.pem" +
|
|
"\"'",
|
|
})
|
|
end
|
|
|
|
it 'configures db connections' do
|
|
is_expected.to contain_exec('ovn-nb-set-connection').with({
|
|
:command => 'ovn-nbctl set-connection pssl:6641:[::1]',
|
|
:path => ['/sbin', '/usr/sbin', '/bin', '/usr/bin'],
|
|
:unless => 'ovn-nbctl get-connection | egrep -e \'^pssl:6641:\\[::1\\]$\'',
|
|
:tag => 'ovn-db-set-connections',
|
|
})
|
|
is_expected.to_not contain_exec('ovn-sb-set-connection')
|
|
end
|
|
end
|
|
|
|
context 'with sb db ssl enabled' do
|
|
let :params do
|
|
{
|
|
:ovn_sb_db_ssl_key => '/path/to/dbkey.pem',
|
|
:ovn_sb_db_ssl_cert => '/path/to/dbcert.pem',
|
|
:ovn_sb_db_ssl_ca_cert => '/path/to/dbcacert.pem',
|
|
}
|
|
end
|
|
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] + " '\"" +
|
|
"--db-nb-addr=0.0.0.0 --db-sb-addr=0.0.0.0" +
|
|
" --db-nb-create-insecure-remote=yes --db-sb-create-insecure-remote=no" +
|
|
" --ovn-sb-db-ssl-key=/path/to/dbkey.pem --ovn-sb-db-ssl-cert=/path/to/dbcert.pem --ovn-sb-db-ssl-ca-cert=/path/to/dbcacert.pem" +
|
|
"\"'",
|
|
})
|
|
end
|
|
|
|
it 'configures db connections' do
|
|
is_expected.to_not contain_exec('ovn-nb-set-connection')
|
|
is_expected.to contain_exec('ovn-sb-set-connection').with({
|
|
:command => 'ovn-sbctl set-connection pssl:6642:0.0.0.0',
|
|
:path => ['/sbin', '/usr/sbin', '/bin', '/usr/bin'],
|
|
:unless => 'ovn-sbctl get-connection | egrep -e \' pssl:6642:0.0.0.0$\'',
|
|
:tag => 'ovn-db-set-connections',
|
|
})
|
|
end
|
|
end
|
|
|
|
context 'with ipv6 and sb db ssl enabled' do
|
|
let :params do
|
|
{
|
|
:dbs_listen_ip => '::1',
|
|
:ovn_sb_db_ssl_key => '/path/to/dbkey.pem',
|
|
:ovn_sb_db_ssl_cert => '/path/to/dbcert.pem',
|
|
:ovn_sb_db_ssl_ca_cert => '/path/to/dbcacert.pem',
|
|
}
|
|
end
|
|
|
|
it 'creates systemd conf' do
|
|
is_expected.to contain_augeas('config-ovn-northd').with({
|
|
:context => platform_params[:ovn_northd_context],
|
|
:changes => "set " + platform_params[:ovn_northd_option_name] + " '\"" +
|
|
"--db-nb-addr=[::1] --db-sb-addr=[::1]" +
|
|
" --db-nb-create-insecure-remote=yes --db-sb-create-insecure-remote=no" +
|
|
" --ovn-sb-db-ssl-key=/path/to/dbkey.pem --ovn-sb-db-ssl-cert=/path/to/dbcert.pem --ovn-sb-db-ssl-ca-cert=/path/to/dbcacert.pem" +
|
|
"\"'",
|
|
})
|
|
end
|
|
|
|
it 'configures db connections' do
|
|
is_expected.to_not contain_exec('ovn-nb-set-connection')
|
|
is_expected.to contain_exec('ovn-sb-set-connection').with({
|
|
:command => 'ovn-sbctl set-connection pssl:6642:[::1]',
|
|
:path => ['/sbin', '/usr/sbin', '/bin', '/usr/bin'],
|
|
:unless => 'ovn-sbctl get-connection | egrep -e \' pssl:6642:\\[::1\\]$\'',
|
|
:tag => 'ovn-db-set-connections',
|
|
})
|
|
end
|
|
end
|
|
|
|
context 'with bad northd ssl parameters' do
|
|
let :params do
|
|
{
|
|
:ovn_northd_ssl_key => '/path/to/key.pem',
|
|
}
|
|
end
|
|
|
|
it { should raise_error(Puppet::Error, /The ovn_northd_ssl_key, cert and ca_cert are required to use SSL/) }
|
|
end
|
|
|
|
context 'with bad nb db ssl parameters' do
|
|
let :params do
|
|
{
|
|
:ovn_nb_db_ssl_key => '/path/to/key.pem',
|
|
}
|
|
end
|
|
|
|
it { should raise_error(Puppet::Error, /The ovn_nb_db_ssl_key, cert and ca_cert are required to use SSL/) }
|
|
end
|
|
|
|
context 'with bad sb db ssl parameters' do
|
|
let :params do
|
|
{
|
|
:ovn_sb_db_ssl_key => '/path/to/key.pem',
|
|
}
|
|
end
|
|
|
|
it { should raise_error(Puppet::Error, /The ovn_sb_db_ssl_key, cert and ca_cert are required to use SSL/) }
|
|
end
|
|
end
|
|
|
|
shared_examples_for 'ovn northd' do
|
|
it 'starts northd' do
|
|
is_expected.to contain_service('northd').with(
|
|
:ensure => true,
|
|
:name => platform_params[:ovn_northd_service_name],
|
|
:enable => true,
|
|
)
|
|
end
|
|
|
|
it 'installs package' do
|
|
is_expected.to contain_package('ovn-northd').with(
|
|
:ensure => 'present',
|
|
:name => platform_params[:ovn_northd_package_name],
|
|
:notify => 'Service[northd]'
|
|
)
|
|
end
|
|
end
|
|
|
|
on_supported_os({
|
|
:supported_os => OSDefaults.get_supported_os
|
|
}).each do |os,facts|
|
|
context "on #{os}" do
|
|
let (:facts) do
|
|
facts.merge!(OSDefaults.get_facts())
|
|
end
|
|
|
|
case facts[:os]['family']
|
|
when 'Debian'
|
|
let(:platform_params) do
|
|
{
|
|
:ovn_northd_package_name => 'ovn-central',
|
|
:ovn_northd_service_name => 'ovn-central',
|
|
:ovn_northd_context => '/files/etc/default/ovn-central',
|
|
:ovn_northd_option_name => 'OVN_CTL_OPTS'
|
|
}
|
|
end
|
|
it_behaves_like 'ovn northd'
|
|
it_behaves_like 'systemd env'
|
|
when 'RedHat'
|
|
let(:platform_params) do
|
|
{
|
|
:ovn_northd_package_name => 'openvswitch-ovn-central',
|
|
:ovn_northd_service_name => 'ovn-northd',
|
|
:ovn_northd_context => '/files/etc/sysconfig/ovn-northd',
|
|
:ovn_northd_option_name => 'OVN_NORTHD_OPTS'
|
|
}
|
|
end
|
|
it_behaves_like 'ovn northd'
|
|
it_behaves_like 'systemd env'
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|