62ba90a475
Tempauth middleware template included only example entries This commit provides most options to configure tempauth middleware, especialy an array of accounts/users hash which defines the authenticated list available by tempauth It's add by default the admin account/user user_admin_admin = admin .admin .reseller_admin Change-Id: Ib67d7deeeb2f98a464d18813ae4569c28a04472a
104 lines
3.2 KiB
Ruby
104 lines
3.2 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'swift::proxy::tempauth' do
|
|
let :default_params do {
|
|
'account_user_list' => [
|
|
{
|
|
'user' => 'admin',
|
|
'account' => 'admin',
|
|
'key' => 'admin',
|
|
'groups' => [ 'admin', 'reseller_admin' ],
|
|
},
|
|
]
|
|
}
|
|
end
|
|
|
|
let :params do default_params end
|
|
|
|
let :pre_condition do
|
|
'class { "concat::setup": }
|
|
concat { "/etc/swift/proxy-server.conf": }'
|
|
end
|
|
|
|
let :fragment_file do
|
|
"/var/lib/puppet/concat/_etc_swift_proxy-server.conf/fragments/01_swift-proxy-swauth"
|
|
end
|
|
|
|
it { is_expected.to contain_file(fragment_file).with_content(/[filter:tempauth]/) }
|
|
it { is_expected.to contain_file(fragment_file).with_content(/use = egg:swift#tempauth/) }
|
|
|
|
it { is_expected.to_not contain_file(fragment_file).with_content(/reseller_prefix/) }
|
|
it { is_expected.to_not contain_file(fragment_file).with_content(/token_life/) }
|
|
it { is_expected.to_not contain_file(fragment_file).with_content(/auth_prefix/) }
|
|
it { is_expected.to_not contain_file(fragment_file).with_content(/storage_url_scheme/) }
|
|
it { is_expected.to contain_file(fragment_file).with_content(
|
|
/user_admin_admin = admin \.admin \.reseller_admin/
|
|
) }
|
|
|
|
context 'declaring two users' do
|
|
let :params do {
|
|
'account_user_list' => [
|
|
{
|
|
'user' => 'admin',
|
|
'account' => 'admin',
|
|
'key' => 'admin',
|
|
'groups' => [ 'admin', 'reseller_admin' ],
|
|
},
|
|
{
|
|
'user' => 'foo',
|
|
'account' => 'bar',
|
|
'key' => 'pass',
|
|
'groups' => [ 'reseller_admin' ],
|
|
},
|
|
]
|
|
} end
|
|
it { is_expected.to contain_file(fragment_file).with_content(
|
|
/user_admin_admin = admin \.admin \.reseller_admin/
|
|
) }
|
|
it { is_expected.to contain_file(fragment_file).with_content(
|
|
/user_bar_foo = pass \.reseller_admin/
|
|
) }
|
|
end
|
|
|
|
context 'when group is empty' do
|
|
let :params do {
|
|
'account_user_list' => [
|
|
{
|
|
'user' => 'admin',
|
|
'account' => 'admin',
|
|
'key' => 'admin',
|
|
'groups' => [],
|
|
},
|
|
]
|
|
} end
|
|
it { is_expected.to contain_file(fragment_file).with_content(
|
|
/user_admin_admin = admin $/
|
|
) }
|
|
end
|
|
|
|
|
|
context 'when undef params are set' do
|
|
let :params do {
|
|
'reseller_prefix' => 'auth',
|
|
'token_life' => 81600,
|
|
'auth_prefix' => '/auth/',
|
|
'storage_url_scheme' => 'http',
|
|
}.merge(default_params)
|
|
end
|
|
|
|
it { is_expected.to contain_file(fragment_file).with_content(/reseller_prefix = AUTH/) }
|
|
it { is_expected.to contain_file(fragment_file).with_content(/token_life = 81600/) }
|
|
it { is_expected.to contain_file(fragment_file).with_content(/auth_prefix = \/auth\//) }
|
|
it { is_expected.to contain_file(fragment_file).with_content(/storage_url_scheme = http/) }
|
|
|
|
describe "invalid params" do
|
|
['account_user_list', 'token_life', 'auth_prefix', 'storage_url_scheme'].each do |param|
|
|
let :params do { param => 'foobar' }.merge(default_params) end
|
|
it "invalid #{param} should fail" do
|
|
expect { catalogue }.to raise_error(Puppet::Error)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|