5102e5130a
This patch enables Firewalling in this Puppet modules in a flexible way. * Enable firewalling optionnaly (disabled by default). * Enable 'pre' firewalling with defaults rules. * Enable 'post' firewalling with DROP rule, with a debug option to disable it. * Enable default rules for all services (OpenStack, etc). * Ability to add custom firewall rules with Hiera * Update puppetlabs-firewall refs * Refactorize unit-tests
120 lines
3.5 KiB
Ruby
120 lines
3.5 KiB
Ruby
#
|
|
# Copyright (C) 2014 eNovance SAS <licensing@enovance.com>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# Unit tests for cloud::messaging class
|
|
#
|
|
|
|
require 'spec_helper'
|
|
|
|
describe 'cloud::messaging' do
|
|
|
|
shared_examples_for 'openstack messaging' do
|
|
|
|
let :params do
|
|
{
|
|
:cluster_node_type => 'disc',
|
|
:rabbit_names => ['foo','boo','zoo'],
|
|
:rabbit_password => 'secrete',
|
|
:rabbitmq_ip => '10.0.0.1',
|
|
}
|
|
end
|
|
|
|
it 'configure rabbitmq-server with default values' do
|
|
is_expected.to contain_class('rabbitmq').with(
|
|
:delete_guest_user => true,
|
|
:config_cluster => true,
|
|
:cluster_nodes => params[:rabbit_names],
|
|
:wipe_db_on_cookie_change => true,
|
|
:cluster_node_type => params[:cluster_node_type],
|
|
:node_ip_address => params[:rabbitmq_ip],
|
|
:port => '5672',
|
|
)
|
|
end
|
|
|
|
context 'with RAM mode' do
|
|
before :each do
|
|
params.merge!( :cluster_node_type => 'ram')
|
|
end
|
|
|
|
it 'configure rabbitmq-server in RAM mode' do
|
|
is_expected.to contain_class('rabbitmq').with( :cluster_node_type => 'ram' )
|
|
end
|
|
end
|
|
|
|
context 'with default firewall enabled' do
|
|
let :pre_condition do
|
|
"class { 'cloud': manage_firewall => true }"
|
|
end
|
|
it 'configure rabbitmq firewall rules' do
|
|
is_expected.to contain_firewall('100 allow rabbitmq access').with(
|
|
:port => '5672',
|
|
:proto => 'tcp',
|
|
:action => 'accept',
|
|
)
|
|
is_expected.to contain_firewall('100 allow rabbitmq management access').with(
|
|
:port => '55672',
|
|
:proto => 'tcp',
|
|
:action => 'accept',
|
|
)
|
|
end
|
|
end
|
|
|
|
context 'with custom firewall enabled' do
|
|
let :pre_condition do
|
|
"class { 'cloud': manage_firewall => true }"
|
|
end
|
|
before :each do
|
|
params.merge!(:firewall_settings => { 'limit' => '50/sec' } )
|
|
end
|
|
it 'configure rabbitmq firewall rules with custom parameter' do
|
|
is_expected.to contain_firewall('100 allow rabbitmq management access').with(
|
|
:port => '55672',
|
|
:proto => 'tcp',
|
|
:action => 'accept',
|
|
:limit => '50/sec',
|
|
)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'on Debian platforms' do
|
|
let :facts do
|
|
{ :osfamily => 'Debian' }
|
|
end
|
|
|
|
it_configures 'openstack messaging'
|
|
end
|
|
|
|
context 'on RedHat platforms' do
|
|
let :facts do
|
|
{ :osfamily => 'RedHat' }
|
|
end
|
|
|
|
it_configures 'openstack messaging'
|
|
|
|
it 'should create rabbitmq binaries symbolic links' do
|
|
is_expected.to contain_file('/usr/sbin/rabbitmq-plugins').with(
|
|
:ensure => 'link',
|
|
:target => '/usr/lib/rabbitmq/bin/rabbitmq-plugins'
|
|
)
|
|
is_expected.to contain_file('/usr/sbin/rabbitmq-env').with(
|
|
:ensure => 'link',
|
|
:target => '/usr/lib/rabbitmq/bin/rabbitmq-env'
|
|
)
|
|
end
|
|
end
|
|
|
|
end
|