mirror of
https://github.com/valitydev/salt.git
synced 2024-11-08 09:23:56 +00:00
75 lines
2.5 KiB
Python
75 lines
2.5 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
# Import Python libs
|
|
from __future__ import absolute_import
|
|
import os
|
|
import shutil
|
|
import stat
|
|
|
|
# Import Salt Testing libs
|
|
from tests.support.case import ShellCase
|
|
from tests.support.paths import TMP, INTEGRATION_TEST_DIR
|
|
|
|
# Import 3rd-party libs
|
|
|
|
# Import Salt libs
|
|
import salt.utils.files
|
|
|
|
|
|
# all read, only owner write
|
|
autosign_file_permissions = stat.S_IRUSR | stat.S_IRGRP | stat.S_IROTH | stat.S_IWUSR
|
|
autosign_file_path = os.path.join(TMP, 'rootdir', 'autosign_file')
|
|
|
|
|
|
class AutosignGrainsTest(ShellCase):
|
|
'''
|
|
Test autosigning minions based on grain values.
|
|
'''
|
|
|
|
def setUp(self):
|
|
shutil.copyfile(
|
|
os.path.join(INTEGRATION_TEST_DIR, 'files', 'autosign_grains', 'autosign_file'),
|
|
autosign_file_path
|
|
)
|
|
os.chmod(autosign_file_path, autosign_file_permissions)
|
|
|
|
self.run_key('-d minion -y')
|
|
self.run_call('test.ping -l quiet') # get minon to try to authenticate itself again
|
|
|
|
if 'minion' in self.run_key('-l acc'):
|
|
self.skipTest('Could not deauthorize minion')
|
|
if 'minion' not in self.run_key('-l un'):
|
|
self.skipTest('minion did not try to reauthenticate itself')
|
|
|
|
self.autosign_grains_dir = os.path.join(self.master_opts['autosign_grains_dir'])
|
|
if not os.path.isdir(self.autosign_grains_dir):
|
|
os.makedirs(self.autosign_grains_dir)
|
|
|
|
def tearDown(self):
|
|
shutil.copyfile(
|
|
os.path.join(INTEGRATION_TEST_DIR, 'files', 'autosign_file'),
|
|
autosign_file_path
|
|
)
|
|
os.chmod(autosign_file_path, autosign_file_permissions)
|
|
|
|
self.run_call('test.ping -l quiet') # get minon to try to authenticate itself again
|
|
self.run_key('-a minion -y')
|
|
|
|
if os.path.isdir(self.autosign_grains_dir):
|
|
shutil.rmtree(self.autosign_grains_dir)
|
|
|
|
def test_autosign_grains_accept(self):
|
|
with salt.utils.files.fopen(os.path.join(self.autosign_grains_dir, 'test_grain'), 'w') as f:
|
|
f.write('#invalid_value\ncheese')
|
|
|
|
self.run_call('test.ping') # get minon to try to authenticate itself again
|
|
self.assertIn('minion', self.run_key('-l acc'))
|
|
|
|
def test_autosign_grains_fail(self):
|
|
with salt.utils.files.fopen(os.path.join(self.autosign_grains_dir, 'test_grain'), 'w') as f:
|
|
f.write('#cheese\ninvalid_value')
|
|
|
|
self.run_call('test.ping') # get minon to try to authenticate itself again
|
|
self.assertNotIn('minion', self.run_key('-l acc'))
|
|
self.assertIn('minion', self.run_key('-l un'))
|