| File | % covered | Lines | Relevant Lines | Lines covered | Lines missed | Avg. Hits / Line |
|---|---|---|---|---|---|---|
| spec/unit/recipes/default_spec.rb | 100.0 % | 74 | 46 | 46 | 0 | 2.4 |
| spec/unit/recipes/import_keystore_spec.rb | 100.0 % | 28 | 14 | 14 | 0 | 1.6 |
-
# frozen_string_literal: true
-
-
1
require 'ostruct'
-
1
require 'spec_helper'
-
-
1
describe 'letsencryptaws::default' do
-
9
let(:chef_run) { ChefSpec::SoloRunner.new }
-
-
1
before do
-
8
allow(Etc).to receive(:getpwnam).and_return(OpenStruct.new(uid: 0))
-
8
allow(Etc).to receive(:getgrnam).and_return(OpenStruct.new(gid: 0))
-
8
stub_data_bag_item('testbag', 'testitem').and_return('p12_password' => 'foo')
-
8
chef_run.node.normal['letsencryptaws']['certs']['test.example.com'] = []
-
8
chef_run.node.normal['letsencryptaws']['data_bag'] = 'testbag'
-
8
chef_run.node.normal['letsencryptaws']['data_bag_item'] = 'testitem'
-
8
chef_run.node.normal['letsencryptaws']['sync_bucket'] = 'foobucket'
-
8
chef_run.converge(described_recipe)
-
end
-
-
1
it 'creates directories' do
-
1
expect(chef_run).to create_directory('/etc/ssl/certs')
-
1
expect(chef_run).to create_directory('/etc/ssl/private')
-
end
-
-
1
it 'ensures ssl group' do
-
1
expect(chef_run).to create_group('ssl-cert')
-
end
-
-
1
it 'downloads default certificates' do
-
1
expect(chef_run).to create_remote_file_s3('/etc/ssl/certs/default.crt')
-
1
expect(chef_run).to create_remote_file_s3('/etc/ssl/private/default.key')
-
1
expect(chef_run).to create_remote_file_s3('/etc/ssl/certs/default.ca')
-
end
-
-
1
it 'does not update ca certificates' do
-
1
expect(chef_run).to nothing_execute('update-ca-certificates')
-
end
-
-
1
it 'downloads requested certificates' do
-
1
expect(chef_run).to create_remote_file_s3('/etc/ssl/certs/test.example.com.crt')
-
1
expect(chef_run).to create_remote_file_s3('/etc/ssl/private/test.example.com.key')
-
1
expect(chef_run).to create_remote_file_s3('/etc/ssl/certs/test.example.com.ca')
-
end
-
-
1
it 'composes requested certificates' do
-
1
expect(chef_run).to create_if_missing_file('/etc/ssl/certs/test.example.com.crt')
-
1
expect(chef_run).to create_if_missing_file('/etc/ssl/private/test.example.com.key')
-
1
expect(chef_run).to create_if_missing_file('/etc/ssl/certs/test.example.com.ca')
-
1
expect(chef_run).to create_file('/etc/ssl/certs/test.example.com.crt-chain')
-
end
-
-
1
it 'generates pkcs12 keyring' do
-
1
expect(chef_run).to nothing_execute('generate pkcs12 store for test.example.com')
-
1
expect(chef_run.execute('generate pkcs12 store for test.example.com')).to \
-
subscribe_to('remote_file_s3[/etc/ssl/certs/test.example.com.crt]').on(:run).delayed
-
1
expect(chef_run).to write_log('pkcs12 store needs generated for test.example.com')
-
1
expect(chef_run.log('pkcs12 store needs generated for test.example.com')).to \
-
notify('execute[generate pkcs12 store for test.example.com]').to(:run).immediately
-
1
expect(chef_run).to create_file('/etc/ssl/private/test.example.com.p12')
-
end
-
-
1
context 'when testing' do
-
1
before do
-
1
chef_run.node.normal['letsencryptaws']['test_certs'] = true
-
1
chef_run.converge(described_recipe)
-
end
-
-
1
it 'updates ca certificates' do
-
1
expect(chef_run).to create_remote_file('/usr/local/share/ca-certificates/fakeroot.crt')
-
1
expect(chef_run.remote_file('/usr/local/share/ca-certificates/fakeroot.crt')).to \
-
notify('execute[update-ca-certificates]').to(:run).immediately
-
end
-
end
-
end
-
# frozen_string_literal: true
-
-
1
require 'spec_helper'
-
-
1
describe 'letsencryptaws::import_keystore' do
-
3
let(:chef_run) { ChefSpec::SoloRunner.new }
-
-
1
before do
-
2
stub_data_bag_item('testbag', 'testitem').and_return(
-
'p12_password' => 'foo',
-
'keystore_passwords' => { 'default' => 'bar' }
-
)
-
2
chef_run.node.normal['letsencryptaws']['certs']['test.example.com'] = []
-
2
chef_run.node.normal['letsencryptaws']['data_bag'] = 'testbag'
-
2
chef_run.node.normal['letsencryptaws']['data_bag_item'] = 'testitem'
-
2
chef_run.node.normal['letsencryptaws']['import_keystore']['/tmp/foo'] = ['test.example.com']
-
2
chef_run.converge(described_recipe)
-
end
-
-
1
it 'installs java' do
-
1
expect(chef_run).to install_package('openjdk-8-jre')
-
end
-
-
# Subscribes can't be tested because the target resource is outside this recipe
-
1
it 'imports pkcs12 keyring into keystore' do
-
1
expect(chef_run).to nothing_execute('import test.example.com into /tmp/foo')
-
end
-
end