Skip to content

P
puppet-freeipa
Commit b2cce13a authored by Fabien Combernous's avatar Fabien Combernous
Browse files
Options

Resolve "use facter to get ip during acceptance"

parent d386a01c
Hide whitespace changes
Inline Side-by-side
Showing with 82 additions and 124 deletions
spec/acceptance/01_freeipa_spec.rb
View file @ b2cce13a
require 'spec_helper_acceptance'
ip_master = fact_on('master', 'networking.interfaces.eth1.ip')
ip_replica = fact_on('replica', 'networking.interfaces.eth1.ip')
describe 'class freeipa' do
context 'with ipa_role master' do
hosts_as('master').each do |master|
......@@ -11,7 +14,7 @@ describe 'class freeipa' do
puppet_admin_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
directory_services_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
install_ipa_server => true,
ip_address => '10.10.10.35',
ip_address => '#{ip_master}',
enable_ip_address => true,
enable_hostname => true,
manage_host_entry => true,
......@@ -45,7 +48,7 @@ describe 'class freeipa' do
directory_services_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
password_usedto_joindomain => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
install_ipa_server => true,
ip_address => '10.10.10.36',
ip_address => '#{ip_replica}',
enable_ip_address => true,
enable_hostname => true,
manage_host_entry => true,
......@@ -67,6 +70,7 @@ describe 'class freeipa' do
context 'with ipa_role client' do
hosts_as('client').each do |client|
ip_client = fact_on('client', 'networking.interfaces.enp0s8.ip')
it 'applies idempotently' do
pp = <<-EOS
class {'freeipa':
......@@ -75,7 +79,7 @@ describe 'class freeipa' do
puppet_admin_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
directory_services_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
password_usedto_joindomain => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
ip_address => '10.10.10.37',
ip_address => '#{ip_client}',
install_epel => true,
ipa_master_fqdn => 'ipa-server-1.example.lan'
}
......@@ -98,7 +102,7 @@ describe 'class freeipa' do
puppet_admin_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
directory_services_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
install_ipa_server => true,
ip_address => '10.10.10.35',
ip_address => '#{ip_master}',
enable_ip_address => true,
enable_hostname => true,
manage_host_entry => true,
......@@ -122,7 +126,7 @@ describe 'class freeipa' do
puppet_admin_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
directory_services_password => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
password_usedto_joindomain => 's^ecr@et.ea;R/O*=?j!.QsAu+$',
ip_address => '10.10.10.35',
ip_address => '#{ip_master}',
install_epel => true,
ipa_master_fqdn => 'ipa-server-1.example.lan'
}
......@@ -132,63 +136,4 @@ describe 'class freeipa' do
end
end
end
context 'Test ssh connnections for jsmith user with pre-defined ssh-key' do
# Install ssh key on root on master
hosts_as('master').each do |master|
it 'doest a kinit with puppet admin user' do
on(master, "echo 's^ecr@et.ea;R/O*=?j!.QsAu+$' | kinit admin")
end
it 'creates user jsmith in freeipa' do
on(master, "echo 's^ecr@et.ea;R/O*=?j!.QsAu+$' | ipa user-add jsmith --first=John --last=Smith --password")
end
it 'creates ssh key' do
on(master, "ssh-keygen -t rsa -N '' -f /root/.ssh/id_rsa")
end
it 'adds the public key in freeipa to jsmith' do
on(master, 'key=`cat /root/.ssh/id_rsa.pub`; ipa user-mod jsmith --sshpubkey="$key"')
end
# Add HBAC Rule to give all ipa users access to ipa-client-centos
it 'creates a HBAC rule for all users' do
on(master, 'ipa hbacrule-add --usercat=all --servicecat=all allGroup')
end
it 'adds centos client to allGroup rule' do
on(master, 'ipa hbacrule-add-host --hosts=ipa-client-centos allGroup')
end
# Remove allow_all HBAC
it 'deletes the allow_all default rule' do
on(master, 'ipa hbacrule-del allow_all')
end
it 'ssh on allowed host' do
pp = <<-EOS
exec { 'test ssh':
path => '/bin/',
command => 'ssh -o "StrictHostKeyChecking no" jsmith@10.10.10.37 id',
returns => "0"
}
EOS
apply_manifest_on(master, pp, catch_failures: true)
end
it 'ssh on not allowed host ' do
pp = <<-EOS
exec { 'test ssh':
path => '/bin/',
command => 'ssh -o "StrictHostKeyChecking no" jsmith@localhost id',
returns => "255"
}
EOS
apply_manifest_on(master, pp, catch_failures: true)
end
end
end
end
spec/acceptance/nodesets/centos8.yml 0 → 100644
View file @ b2cce13a
---
HOSTS:
ipa-server-1:
roles:
- default
- master
- centos
platform: el-8-x86_64
hypervisor: vagrant
box: centos/8
box_check_update: false
vagrant_memsize: 2048
vagrant_cpus: 2
ip: 10.10.10.35
ipa-server-2:
roles:
- replica
- centos
platform: el-8-x86_64
hypervisor: vagrant
box: centos/8
box_check_update: false
vagrant_memsize: 2048
vagrant_cpus: 2
ip: 10.10.10.36
ipa-client-centos:
roles:
- client
- client-centos7
- centos
platform: el-7-x86_64
hypervisor: vagrant
box: centos/7
box_version: 1809.01
box_check_update: false
vagrant_memsize: 1024
ip: 10.10.10.37
ipa-client-ubuntu16:
roles:
- client
- client-ubuntu16
platform: ubuntu-1604-amd64
hypervisor: vagrant
box: ubuntu/xenial64
box_version: 20181114.0.0
box_check_update: false
vagrant_memsize: 1024
ip: 10.10.10.38
CONFIG:
type: foss
loglevel: debug
spec/acceptance/nodesets/default.yml
View file @ b2cce13a
......@@ -12,7 +12,6 @@ HOSTS:
box_check_update: false
vagrant_memsize: 2048
vagrant_cpus: 2
ip: 10.10.10.35
ipa-server-2:
roles:
- replica
......@@ -24,30 +23,15 @@ HOSTS:
box_check_update: false
vagrant_memsize: 2048
vagrant_cpus: 2
ip: 10.10.10.36
ipa-client-centos:
ipa-client-ubuntu18:
roles:
- client
- client-centos7
- centos
platform: el-7-x86_64
hypervisor: vagrant
box: centos/7
box_version: 1809.01
box_check_update: false
vagrant_memsize: 1024
ip: 10.10.10.37
ipa-client-ubuntu16:
roles:
- client
- client-ubuntu16
platform: ubuntu-1604-amd64
platform: ubuntu-1804-amd64
hypervisor: vagrant
box: ubuntu/xenial64
box_version: 20181114.0.0
box: ubuntu/bionic64
box_version: 20191114.0.0
box_check_update: false
vagrant_memsize: 1024
ip: 10.10.10.38
CONFIG:
type: foss
......
spec/spec_helper_acceptance.rb
View file @ b2cce13a
......@@ -10,6 +10,8 @@ run_puppet_install_helper
install_module_on(hosts)
install_module_dependencies_on(hosts)
ip_master = fact_on('master', 'networking.interfaces.eth1.ip')
RSpec.configure do |c|
c.before :suite do
# Configure all nodes in nodeset
......@@ -34,79 +36,54 @@ RSpec.configure do |c|
on host, puppet("resource exec 'git clone #{modname}' command='git clone #{giturl} /etc/puppetlabs/code/environments/production/modules/#{modname}' path=/usr/bin")
end
# Configure /etc/hosts for each node.
# WARNING : function hosts_as() return an array.
# But here we use several roles dedicated, used only once time in nodeset.
# This permit to use one different IP for each role : master, replica, client-centos7 and client-ubuntu16.
# Here master with ip address 10.10.10.35
hosts_as('master').each do |master|
pp = <<-EOS
exec { 'set master /etc/hosts':
path => '/bin/',
command => 'echo -e "127.0.0.1 ipa-server-1.example.lan ipa-server-1\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n 10.10.10.35 ipa-server-1.example.lan ipa-server-1\n" > /etc/hosts',
command => 'echo -e "127.0.0.1 ipa-server-1.example.lan ipa-server-1\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n #{ip_master} ipa-server-1.example.lan ipa-server-1\n" > /etc/hosts',
}
EOS
apply_manifest_on(master, pp, catch_failures: true, debug: true)
end
# Here replica with ip address 10.10.10.36
hosts_as('replica').each do |replica|
ip_replica = fact_on('replica', 'networking.interfaces.eth1.ip')
pp = <<-EOS
exec { 'set replica /etc/hosts':
path => '/bin/',
command => 'echo -e "127.0.0.1 ipa-server-2.example.lan ipa-server-2\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n 10.10.10.36 ipa-server-2.example.lan ipa-server-2\n" > /etc/hosts',
command => 'echo -e "127.0.0.1 ipa-server-2.example.lan ipa-server-2\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n #{ip_replica} ipa-server-2.example.lan ipa-server-2\n" > /etc/hosts',
}
class { 'resolv_conf':
nameservers => ['10.10.10.35'],
nameservers => ['#{ip_master}'],
}
host {'ipa-server-1.example.lan':
ensure => present,
ip => '10.10.10.35',
ip => '#{ip_master}',
}
EOS
apply_manifest_on(replica, pp, catch_failures: true, debug: true)
end
# Here a first client running CentOS7 with ip address 10.10.10.37
hosts_as('client-centos7').each do |clientcentos7|
pp = <<-EOS
exec { 'set client centos /etc/hosts':
path => '/bin/',
command => 'echo -e "127.0.0.1 ipa-client-centos.example.lan ipa-server-2\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n 10.10.10.37 ipa-client-centos.example.lan ipa-client-centos\n" > /etc/hosts',
}
EOS
apply_manifest_on(clientcentos7, pp, catch_failures: true)
end
# Here a second client running Ubuntu1604 with ip address 10.10.10.38
hosts_as('client-ubuntu16').each do |clientubuntu16|
pp = <<-EOS
exec { 'set client ubuntu /etc/hosts':
path => '/bin/',
command => 'echo -e "127.0.0.1 ipa-client-ubuntu16.example.lan ipa-server-2\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n 10.10.10.38 ipa-client-ubuntu16.example.lan ipa-client-ubuntu16\n" > /etc/hosts',
}
EOS
apply_manifest_on(clientubuntu16, pp, catch_failures: true)
end
# WARNING : function hosts_as() return an array. We now use hosts_as() normaly with several nodes returned.
# * all clients have role 'client' in nodeset.
# * all nodes running CentOS have role 'centos' in nodeset.
# WARNING : function hosts_as() return an array.
# We now use hosts_as() normaly with several nodes returned.
# All clients have role 'client' in nodeset.
# Configure all clients nodes.
hosts_as('client').each do |client|
ip_client = fact_on('client', 'networking.interfaces.enp0s8.ip')
pp = <<-EOS
exec { 'set client ubuntu /etc/hosts':
path => '/bin/',
command => 'echo -e "127.0.0.1 #{client}.example.lan #{client}\n ::1 ip6-localhost ip6-loopback\n fe00::0 ip6-localnet\n ff00::0 ip6-mcastprefix\n ff02::1 ip6-allnodes\n ff02::2 ip6-allrouters\n\n #{ip_client} #{client}.example.lan #{client}\n" > /etc/hosts',
}
class { 'resolv_conf':
nameservers => ['10.10.10.35'],
nameservers => ['#{ip_master}'],
}
host {'ipa-server-1.example.lan':
ensure => present,
ip => '10.10.10.35',
ip => '#{ip_master}',
}
EOS
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment