mirror of
https://github.com/valitydev/salt.git
synced 2024-11-08 01:18:58 +00:00
80 lines
2.9 KiB
Python
80 lines
2.9 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
# Import Python libs
|
|
from __future__ import absolute_import, print_function, unicode_literals
|
|
import os
|
|
import shutil
|
|
import stat
|
|
|
|
# Import Salt Testing libs
|
|
from tests.support.case import ShellCase
|
|
from tests.support.paths import TMP, INTEGRATION_TEST_DIR
|
|
|
|
# Import 3rd-party libs
|
|
|
|
# Import Salt libs
|
|
import salt.utils.files
|
|
import salt.utils.stringutils
|
|
|
|
# all read, only owner write
|
|
autosign_file_permissions = stat.S_IRUSR | stat.S_IRGRP | stat.S_IROTH | stat.S_IWUSR
|
|
autosign_file_path = os.path.join(TMP, 'rootdir', 'autosign_file')
|
|
|
|
|
|
class AutosignGrainsTest(ShellCase):
|
|
'''
|
|
Test autosigning minions based on grain values.
|
|
'''
|
|
|
|
def setUp(self):
|
|
shutil.copyfile(
|
|
os.path.join(INTEGRATION_TEST_DIR, 'files', 'autosign_grains', 'autosign_file'),
|
|
autosign_file_path
|
|
)
|
|
os.chmod(autosign_file_path, autosign_file_permissions)
|
|
|
|
self.run_key('-d minion -y')
|
|
self.run_call('test.ping -l quiet') # get minon to try to authenticate itself again
|
|
|
|
if 'minion' in self.run_key('-l acc'):
|
|
self.tearDown()
|
|
self.skipTest('Could not deauthorize minion')
|
|
if 'minion' not in self.run_key('-l un'):
|
|
self.tearDown()
|
|
self.skipTest('minion did not try to reauthenticate itself')
|
|
|
|
self.autosign_grains_dir = os.path.join(self.master_opts['autosign_grains_dir'])
|
|
if not os.path.isdir(self.autosign_grains_dir):
|
|
os.makedirs(self.autosign_grains_dir)
|
|
|
|
def tearDown(self):
|
|
shutil.copyfile(
|
|
os.path.join(INTEGRATION_TEST_DIR, 'files', 'autosign_file'),
|
|
autosign_file_path
|
|
)
|
|
os.chmod(autosign_file_path, autosign_file_permissions)
|
|
|
|
self.run_call('test.ping -l quiet') # get minon to authenticate itself again
|
|
|
|
if os.path.isdir(self.autosign_grains_dir):
|
|
shutil.rmtree(self.autosign_grains_dir)
|
|
|
|
def test_autosign_grains_accept(self):
|
|
grain_file_path = os.path.join(self.autosign_grains_dir, 'test_grain')
|
|
with salt.utils.files.fopen(grain_file_path, 'w') as f:
|
|
f.write(salt.utils.stringutils.to_str('#invalid_value\ncheese'))
|
|
os.chmod(grain_file_path, autosign_file_permissions)
|
|
|
|
self.run_call('test.ping -l quiet') # get minon to try to authenticate itself again
|
|
self.assertIn('minion', self.run_key('-l acc'))
|
|
|
|
def test_autosign_grains_fail(self):
|
|
grain_file_path = os.path.join(self.autosign_grains_dir, 'test_grain')
|
|
with salt.utils.files.fopen(grain_file_path, 'w') as f:
|
|
f.write(salt.utils.stringutils.to_str('#cheese\ninvalid_value'))
|
|
os.chmod(grain_file_path, autosign_file_permissions)
|
|
|
|
self.run_call('test.ping -l quiet') # get minon to try to authenticate itself again
|
|
self.assertNotIn('minion', self.run_key('-l acc'))
|
|
self.assertIn('minion', self.run_key('-l un'))
|