modules/: Add module certregen.

1 files changed, 81 insertions, 0 deletions

diff --git a/code/environments/production/modules/certregen/spec/classes/client_spec.rb b/code/environments/production/modules/certregen/spec/classes/client_spec.rb
new file mode 100644
index 0000000..843c3b1
--- /dev/null
+++ b/code/environments/production/modules/certregen/spec/classes/client_spec.rb
@@ -0,0 +1,81 @@
+require 'spec_helper'
+
+RSpec.shared_examples "managing the CRL on the client" do |setting|
+  describe "when manage_crl is false" do
+    let(:params) {{'manage_crl' => false}}
+
+    it "doesn't manage the hostcrl on the client" do
+      should_not contain_file(client_hostcrl)
+    end
+  end
+
+  describe "when manage_crl is true" do
+    let(:params) {{'manage_crl' => true}}
+
+    it "manages the hostcrl on the client from the server '#{setting}' setting" do
+      should contain_file(client_hostcrl).with(
+        'ensure'  => 'present',
+        'content' => Puppet.settings.setting(setting).open(&:read),
+        'mode'    => '0644',
+      )
+    end
+  end
+end
+
+RSpec.describe 'certregen::client' do
+  include_context "Initialize CA"
+
+  let(:client_localcacert) { tmpfilename('ca.pem') }
+  let(:client_hostcrl) { tmpfilename('crl.pem') }
+
+  let(:facts) do
+    {
+      'localcacert' => client_localcacert,
+      'hostcrl'     => client_hostcrl,
+      'pe_build'    => '2016.4.0',
+    }
+  end
+
+  before do
+    Puppet.settings.setting(:localcacert).open('w') { |f| f.write("local CA cert") }
+    Puppet.settings.setting(:hostcrl).open('w') { |f| f.write("local CRL") }
+  end
+
+  describe 'when the compile master has CA ssl files' do
+    before do
+      Puppet.settings.setting(:cacert).open('w') { |f| f.write("CA cert") }
+      Puppet.settings.setting(:cacrl).open('w') { |f| f.write("CA CRL") }
+    end
+
+    describe "managing the localcacert on the client" do
+      it do
+        should contain_file(client_localcacert).with(
+          'ensure'  => 'present',
+          'content' => Puppet.settings.setting(:cacert).open(&:read),
+          'mode'    => '0644',
+        )
+      end
+    end
+
+    it_behaves_like "managing the CRL on the client", :cacrl
+  end
+
+  describe "when the compile master only has agent SSL files" do
+    before do
+      FileUtils.rm(Puppet[:cacert])
+      FileUtils.rm(Puppet[:cacrl])
+    end
+
+    describe "managing the localcacert on the client" do
+      it 'manages the client CA cert from the `localcacert` setting' do
+        should contain_file(client_localcacert).with(
+          'ensure'  => 'present',
+          'content' => Puppet.settings.setting(:localcacert).open(&:read),
+          'mode'    => '0644',
+        )
+      end
+    end
+
+    it_behaves_like "managing the CRL on the client", :hostcrl
+  end
+end