2 describe 'keystone::roles::admin' do
4 describe 'with only the required params set' do
9 :password => 'ChangeMe',
10 :service_tenant => 'services'
14 it { is_expected.to contain_keystone_tenant('services').with(
17 :description => 'Tenant for the openstack services'
19 it { is_expected.to contain_keystone_tenant('openstack').with(
22 :description => 'admin tenant'
24 it { is_expected.to contain_keystone_user('admin').with(
27 :tenant => 'openstack',
29 :password => 'ChangeMe',
30 :ignore_default_tenant => 'false'
32 it { is_expected.to contain_keystone_role('admin').with_ensure('present') }
33 it { is_expected.to contain_keystone_user_role('admin@openstack').with(
40 describe 'when overriding optional params' do
47 :admin_tenant => 'admin',
48 :admin_roles => ['admin', 'heat_stack_owner'],
49 :service_tenant => 'foobar',
50 :ignore_default_tenant => 'true',
51 :admin_tenant_desc => 'admin something else',
52 :service_tenant_desc => 'foobar description',
56 it { is_expected.to contain_keystone_tenant('foobar').with(
59 :description => 'foobar description'
61 it { is_expected.to contain_keystone_tenant('admin').with(
64 :description => 'admin something else'
66 it { is_expected.to contain_keystone_user('admin').with(
72 :ignore_default_tenant => 'true'
74 it { is_expected.to contain_keystone_user_role('admin@admin').with(
75 :roles => ['admin', 'heat_stack_owner'],
81 describe 'when disabling user configuration' do
85 :configure_user => false
89 it { is_expected.to_not contain_keystone_user('keystone') }
90 it { is_expected.to contain_keystone_user_role('keystone@openstack') }
94 describe 'when disabling user and role configuration' do
98 :configure_user => false,
99 :configure_user_role => false
103 it { is_expected.to_not contain_keystone_user('keystone') }
104 it { is_expected.to_not contain_keystone_user_role('keystone@openstack') }
108 describe 'when specifying admin_user_domain and admin_project_domain' do
112 :password => 'ChangeMe',
113 :admin_tenant => 'admin_tenant',
114 :admin_user_domain => 'admin_user_domain',
115 :admin_project_domain => 'admin_project_domain',
118 it { is_expected.to contain_keystone_user('admin').with(
119 :domain => 'admin_user_domain',
120 :tenant => 'admin_tenant'
122 it { is_expected.to contain_keystone_tenant('admin_tenant').with(:domain => 'admin_project_domain') }
123 it { is_expected.to contain_keystone_domain('admin_user_domain') }
124 it { is_expected.to contain_keystone_domain('admin_project_domain') }
128 describe 'when specifying admin_user_domain and admin_project_domain' do
132 :password => 'ChangeMe',
133 :admin_tenant => 'admin_tenant::admin_project_domain',
134 :admin_user_domain => 'admin_user_domain',
135 :admin_project_domain => 'admin_project_domain',
138 it { is_expected.to contain_keystone_user('admin').with(
139 :domain => 'admin_user_domain',
140 :tenant => 'admin_tenant::admin_project_domain'
142 it { is_expected.to contain_keystone_tenant('admin_tenant::admin_project_domain').with(:domain => 'admin_project_domain') }
143 it { is_expected.to contain_keystone_domain('admin_user_domain') }
144 it { is_expected.to contain_keystone_domain('admin_project_domain') }
148 describe 'when specifying a service domain' do
152 :password => 'ChangeMe',
153 :service_tenant => 'service_project',
154 :service_project_domain => 'service_domain'
157 it { is_expected.to contain_keystone_tenant('service_project').with(:domain => 'service_domain') }
158 it { is_expected.to contain_keystone_domain('service_domain') }
162 describe 'when specifying a service domain and service tenant domain' do
166 :password => 'ChangeMe',
167 :service_tenant => 'service_project::service_domain',
168 :service_project_domain => 'service_domain'
171 it { is_expected.to contain_keystone_tenant('service_project::service_domain').with(:domain => 'service_domain') }
172 it { is_expected.to contain_keystone_domain('service_domain') }