--- /dev/null
+require 'spec_helper_system'
+
+describe 'install:' do
+ after :all do
+ # Cleanup after tests have ran
+ puppet_apply("class { 'postgresql::server': ensure => absent }") do |r|
+ r.exit_code.should_not == 1
+ end
+ end
+
+ it 'test postgresql::server' do
+ pp = <<-EOS
+ class { 'postgresql::server': }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+ end
+
+ describe 'postgresql::db' do
+ it 'should idempotently create a db that we can connect to' do
+ begin
+ pp = <<-EOS
+ $db = 'postgresql_test_db'
+ include postgresql::server
+
+ postgresql::db { $db:
+ user => $db,
+ password => postgresql_password($db, $db),
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 0
+ end
+
+ psql('--command="select datname from pg_database" postgresql_test_db') do |r|
+ r.stdout.should =~ /postgresql_test_db/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ ensure
+ psql('--command="drop database postgresql_test_db" postgres')
+ end
+ end
+
+ it 'should take a locale parameter' do
+ pending('no support for locale parameter with centos 5', :if => (node.facts['osfamily'] == 'RedHat' and node.facts['lsbmajdistrelease'] == '5'))
+ begin
+ pp = <<-EOS
+ class { 'postgresql::server': }
+ if($::operatingsystem == 'Debian') {
+ # Need to make sure the correct locale is installed first
+ file { '/etc/locale.gen':
+ content => "en_US ISO-8859-1\nen_NG UTF-8\n",
+ }~>
+ exec { '/usr/sbin/locale-gen':
+ logoutput => true,
+ refreshonly => true,
+ }
+ }
+ postgresql::db { 'test1':
+ user => 'test1',
+ password => postgresql_password('test1', 'test1'),
+ charset => 'UTF8',
+ locale => 'en_NG',
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 0
+ end
+
+ psql('-c "show lc_ctype" test1') do |r|
+ r.stdout.should =~ /en_NG/
+ end
+
+ psql('-c "show lc_collate" test1') do |r|
+ r.stdout.should =~ /en_NG/
+ end
+ ensure
+ psql('--command="drop database test1" postgres')
+ end
+ end
+
+ it 'should take an istemplate parameter' do
+ begin
+ pp = <<-EOS
+ $db = 'template2'
+ include postgresql::server
+
+ postgresql::db { $db:
+ user => $db,
+ password => postgresql_password($db, $db),
+ istemplate => true,
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 0
+ end
+
+ psql('--command="select datname from pg_database" template2') do |r|
+ r.stdout.should =~ /template2/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ ensure
+ psql('--command="drop database template2" postgres') do |r|
+ r.stdout.should be_empty
+ r.stderr.should =~ /cannot drop a template database/
+ r.exit_code.should_not == 0
+ end
+ end
+ end
+
+ it 'should update istemplate parameter' do
+ begin
+ pp = <<-EOS
+ $db = 'template2'
+ include postgresql::server
+
+ postgresql::db { $db:
+ user => $db,
+ password => postgresql_password($db, $db),
+ istemplate => false,
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 0
+ end
+
+ psql('--command="select datname from pg_database" template2') do |r|
+ r.stdout.should =~ /template2/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ ensure
+ psql('--command="drop database template2" postgres') do |r|
+ r.exit_code.should == 0
+ end
+ end
+ end
+ end
+
+ describe 'postgresql::psql' do
+ it 'should work but emit a deprecation warning' do
+ pp = <<-EOS
+ include postgresql::server
+
+ postgresql::psql { 'foobar':
+ db => 'postgres',
+ user => 'postgres',
+ command => 'select * from pg_database limit 1',
+ unless => 'select 1 where 1=1',
+ require => Class['postgresql::server'],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ r.stdout.should =~ /postgresql::psql is deprecated/
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 2
+ r.stdout.should =~ /postgresql::psql is deprecated/
+ end
+ end
+ end
+
+ describe 'postgresql_psql' do
+ it 'should run some SQL when the unless query returns no rows' do
+ pp = <<-EOS
+ include postgresql::server
+
+ postgresql_psql { 'foobar':
+ db => 'postgres',
+ psql_user => 'postgres',
+ command => 'select 1',
+ unless => 'select 1 where 1=2',
+ require => Class['postgresql::server'],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 2
+ end
+ end
+
+ it 'should not run SQL when the unless query returns rows' do
+ pp = <<-EOS
+ include postgresql::server
+
+ postgresql_psql { 'foobar':
+ db => 'postgres',
+ psql_user => 'postgres',
+ command => 'select * from pg_database limit 1',
+ unless => 'select 1 where 1=1',
+ require => Class['postgresql::server'],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+ end
+ end
+
+ describe 'postgresql::user' do
+ it 'should idempotently create a user who can log in' do
+ pp = <<-EOS
+ $user = "postgresql_test_user"
+ $password = "postgresql_test_password"
+
+ include postgresql::server
+
+ # Since we are not testing pg_hba or any of that, make a local user for ident auth
+ user { $user:
+ ensure => present,
+ }
+
+ postgresql::database_user { $user:
+ password_hash => postgresql_password($user, $password),
+ require => [ Class['postgresql::server'],
+ User[$user] ],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ # Check that the user can log in
+ psql('--command="select datname from pg_database" postgres', 'postgresql_test_user') do |r|
+ r.stdout.should =~ /template1/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ end
+
+ it 'should idempotently alter a user who can log in' do
+ pp = <<-EOS
+ $user = "postgresql_test_user"
+ $password = "postgresql_test_password2"
+
+ include postgresql::server
+
+ # Since we are not testing pg_hba or any of that, make a local user for ident auth
+ user { $user:
+ ensure => present,
+ }
+
+ postgresql::database_user { $user:
+ password_hash => postgresql_password($user, $password),
+ require => [ Class['postgresql::server'],
+ User[$user] ],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ # Check that the user can log in
+ psql('--command="select datname from pg_database" postgres', 'postgresql_test_user') do |r|
+ r.stdout.should =~ /template1/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ end
+ end
+
+ describe 'postgresql::database_grant' do
+ it 'should grant access so a user can create in a database' do
+ begin
+ pp = <<-EOS
+ $db = 'postgres'
+ $user = 'psql_grant_tester'
+ $password = 'psql_grant_pw'
+
+ include postgresql::server
+
+ # Since we are not testing pg_hba or any of that, make a local user for ident auth
+ user { $user:
+ ensure => present,
+ }
+
+ postgresql::database_user { $user:
+ password_hash => postgresql_password($user, $password),
+ require => [
+ Class['postgresql::server'],
+ User[$user],
+ ],
+ }
+
+ postgresql::database { $db:
+ require => Class['postgresql::server'],
+ }
+
+ postgresql::database_grant { 'grant create test':
+ privilege => 'CREATE',
+ db => $db,
+ role => $user,
+ require => [
+ Postgresql::Database[$db],
+ Postgresql::Database_user[$user],
+ ],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ # Check that the user can create a table in the database
+ psql('--command="create table foo (foo int)" postgres', 'psql_grant_tester') do |r|
+ r.stdout.should =~ /CREATE TABLE/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ ensure
+ psql('--command="drop table foo" postgres', 'psql_grant_tester')
+ end
+ end
+ end
+
+ describe 'postgresql::table_grant' do
+ it 'should grant access so a user can insert in a table' do
+ begin
+ pp = <<-EOS
+ $db = 'table_grant'
+ $user = 'psql_table_tester'
+ $password = 'psql_table_pw'
+
+ include postgresql::server
+
+ # Since we are not testing pg_hba or any of that, make a local user for ident auth
+ user { $user:
+ ensure => present,
+ }
+
+ postgresql::database_user { $user:
+ password_hash => postgresql_password($user, $password),
+ require => [
+ Class['postgresql::server'],
+ User[$user],
+ ],
+ }
+
+ postgresql::database { $db:
+ require => Class['postgresql::server'],
+ }
+
+ postgresql_psql { 'Create testing table':
+ command => 'CREATE TABLE "test_table" (field integer NOT NULL)',
+ db => $db,
+ unless => "SELECT * FROM pg_tables WHERE tablename = 'test_table'",
+ require => Postgresql::Database[$db],
+ }
+
+ postgresql::table_grant { 'grant insert test':
+ privilege => 'INSERT',
+ table => 'test_table',
+ db => $db,
+ role => $user,
+ require => [
+ Postgresql::Database[$db],
+ Postgresql::Database_user[$user],
+ Postgresql_psql['Create testing table'],
+ ],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ ## Check that the user can create a table in the database
+ #psql('--command="create table foo (foo int)" postgres', 'psql_grant_tester') do |r|
+ # r.stdout.should =~ /CREATE TABLE/
+ # r.stderr.should be_empty
+ # r.exit_code.should == 0
+ #end
+ ensure
+ #psql('--command="drop table foo" postgres', 'psql_grant_tester')
+ end
+ end
+ end
+
+ describe 'postgresql::validate_db_connections' do
+ it 'should run puppet with no changes declared if database connectivity works' do
+ pp = <<-EOS
+ $db = 'foo'
+ include postgresql::server
+
+ postgresql::db { $db:
+ user => $db,
+ password => postgresql_password($db, $db),
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ pp = <<-EOS
+ postgresql::validate_db_connection { 'foo':
+ database_host => 'localhost',
+ database_name => 'foo',
+ database_username => 'foo',
+ database_password => 'foo',
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+ end
+
+ it 'should fail catalogue if database connectivity fails' do
+ pp = <<-EOS
+ postgresql::validate_db_connection { 'foobarbaz':
+ database_host => 'localhost',
+ database_name => 'foobarbaz',
+ database_username => 'foobarbaz',
+ database_password => 'foobarbaz',
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 4
+ end
+ end
+ end
+
+ describe 'postgresql::tablespace' do
+ it 'should idempotently create tablespaces and databases that are using them' do
+ pp = <<-EOS
+ include postgresql::server
+
+ file { '/tmp/pg_tablespaces':
+ ensure => 'directory',
+ owner => 'postgres',
+ group => 'postgres',
+ mode => '0700',
+ }~>
+ # This works around rubies that lack Selinux support, I'm looking at you RHEL5
+ exec { "chcon -u system_u -r object_r -t postgresql_db_t /tmp/pg_tablespaces":
+ refreshonly => true,
+ path => "/bin:/usr/bin",
+ onlyif => "which chcon",
+ before => File["/tmp/pg_tablespaces/space1", "/tmp/pg_tablespaces/space2"]
+ }
+
+ postgresql::tablespace{ 'tablespace1':
+ location => '/tmp/pg_tablespaces/space1',
+ require => [Class['postgresql::server'], File['/tmp/pg_tablespaces']],
+ }
+ postgresql::database{ 'tablespacedb1':
+ charset => 'utf8',
+ tablespace => 'tablespace1',
+ require => Postgresql::Tablespace['tablespace1'],
+ }
+ postgresql::db{ 'tablespacedb2':
+ user => 'dbuser2',
+ password => postgresql_password('dbuser2', 'dbuser2'),
+ tablespace => 'tablespace1',
+ require => Postgresql::Tablespace['tablespace1'],
+ }
+
+ postgresql::database_user{ 'spcuser':
+ password_hash => postgresql_password('spcuser', 'spcuser'),
+ require => Class['postgresql::server'],
+ }
+ postgresql::tablespace{ 'tablespace2':
+ location => '/tmp/pg_tablespaces/space2',
+ owner => 'spcuser',
+ require => [Postgresql::Database_user['spcuser'], File['/tmp/pg_tablespaces']],
+ }
+ postgresql::database{ 'tablespacedb3':
+ charset => 'utf8',
+ tablespace => 'tablespace2',
+ require => Postgresql::Tablespace['tablespace2'],
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should == 0
+ end
+
+ # Check that databases use correct tablespaces
+ psql('--command="select ts.spcname from pg_database db, pg_tablespace ts where db.dattablespace = ts.oid and db.datname = \'"\'tablespacedb1\'"\'"') do |r|
+ r.stdout.should =~ /tablespace1/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+
+ psql('--command="select ts.spcname from pg_database db, pg_tablespace ts where db.dattablespace = ts.oid and db.datname = \'"\'tablespacedb3\'"\'"') do |r|
+ r.stdout.should =~ /tablespace2/
+ r.stderr.should be_empty
+ r.exit_code.should == 0
+ end
+ end
+ end
+
+ describe 'postgresql::pg_hba_rule' do
+ it 'should create a ruleset in pg_hba.conf' do
+ pp = <<-EOS
+ include postgresql::server
+ postgresql::pg_hba_rule { "allow application network to access app database":
+ type => "host",
+ database => "app",
+ user => "app",
+ address => "200.1.2.0/24",
+ auth_method => md5,
+ }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ shell("grep '200.1.2.0/24' /etc/postgresql/*/*/pg_hba.conf || grep '200.1.2.0/24' /var/lib/pgsql/data/pg_hba.conf") do |r|
+ r.exit_code.should be_zero
+ end
+ end
+
+ it 'should create a ruleset in pg_hba.conf that denies db access to db test1' do
+ pp = <<-EOS
+ include postgresql::server
+ postgresql::db { "test1":
+ user => "test1",
+ password => postgresql_password('test1', 'test1'),
+ grant => "all",
+ }
+ postgresql::pg_hba_rule { "allow anyone to have access to db test1":
+ type => "local",
+ database => "test1",
+ user => "test1",
+ auth_method => reject,
+ order => '001',
+ }
+ user { "test1":
+ shell => "/bin/bash",
+ managehome => true,
+ }
+ EOS
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ shell('su - test1 -c \'psql -U test1 -c "\q" test1\'') do |r|
+ r.exit_code.should == 2
+ end
+ end
+ end
+
+ describe 'postgresql.conf include' do
+ it "should support an 'include' directive at the end of postgresql.conf" do
+ pending('no support for include directive with centos 5/postgresql 8.1', :if => (node.facts['osfamily'] == 'RedHat' and node.facts['lsbmajdistrelease'] == '5'))
+ pp = <<-EOS
+ class pg_test {
+ class { 'postgresql::server': }
+
+ $pg_conf_include_file = "${postgresql::params::confdir}/postgresql_puppet_extras.conf"
+
+ file { $pg_conf_include_file :
+ content => 'max_connections = 123',
+ notify => Service['postgresqld'],
+ }
+ }
+ class { 'pg_test': }
+ EOS
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should_not == 1
+ end
+
+ puppet_apply(pp) do |r|
+ r.exit_code.should be_zero
+ end
+
+ psql('--command="show max_connections" -t') do |r|
+ r.stdout.should =~ /123/
+ r.stderr.should be_empty
+ r.exit_code.should be_zero
+ end
+
+ pp = <<-EOS
+ class cleanup {
+ require postgresql::params
+
+ $pg_conf_include_file = "${postgresql::params::confdir}/postgresql_puppet_extras.conf"
+
+ file { $pg_conf_include_file :
+ ensure => absent
+ }
+ }
+ class { 'cleanup': }
+ EOS
+ puppet_apply(pp)
+ end
+ end
+end
projects / mirror / dsa-puppet.git / blobdiff