88 lines
2.6 KiB
Ruby
88 lines
2.6 KiB
Ruby
require 'spec_helper_acceptance'
|
|
|
|
describe 'postgresql::server::role:', :unless => UNSUPPORTED_PLATFORMS.include?(fact('osfamily')) do
|
|
after :all do
|
|
# Cleanup after tests have ran
|
|
apply_manifest("class { 'postgresql::server': ensure => absent }", :catch_failures => true)
|
|
end
|
|
|
|
it 'should idempotently create a user who can log in' do
|
|
pp = <<-EOS.unindent
|
|
$user = "postgresql_test_user"
|
|
$password = "postgresql_test_password"
|
|
|
|
class { 'postgresql::server': }
|
|
|
|
# Since we are not testing pg_hba or any of that, make a local user for ident auth
|
|
user { $user:
|
|
ensure => present,
|
|
}
|
|
|
|
postgresql::server::role { $user:
|
|
password_hash => postgresql_password($user, $password),
|
|
}
|
|
EOS
|
|
|
|
apply_manifest(pp, :catch_failures => true)
|
|
|
|
# Check that the user can log in
|
|
psql('--command="select datname from pg_database" postgres', 'postgresql_test_user') do |r|
|
|
expect(r.stdout).to match(/template1/)
|
|
expect(r.stderr).to eq('')
|
|
end
|
|
end
|
|
|
|
it 'should idempotently alter a user who can log in' do
|
|
pp = <<-EOS.unindent
|
|
$user = "postgresql_test_user"
|
|
$password = "postgresql_test_password2"
|
|
|
|
class { 'postgresql::server': }
|
|
|
|
# Since we are not testing pg_hba or any of that, make a local user for ident auth
|
|
user { $user:
|
|
ensure => present,
|
|
}
|
|
|
|
postgresql::server::role { $user:
|
|
password_hash => postgresql_password($user, $password),
|
|
}
|
|
EOS
|
|
|
|
apply_manifest(pp, :catch_failures => true)
|
|
apply_manifest(pp, :catch_changes => true)
|
|
|
|
# Check that the user can log in
|
|
psql('--command="select datname from pg_database" postgres', 'postgresql_test_user') do |r|
|
|
expect(r.stdout).to match(/template1/)
|
|
expect(r.stderr).to eq('')
|
|
end
|
|
end
|
|
|
|
it 'should idempotently create a user with a cleartext password' do
|
|
pp = <<-EOS.unindent
|
|
$user = "postgresql_test_user2"
|
|
$password = "postgresql_test_password2"
|
|
|
|
class { 'postgresql::server': }
|
|
|
|
# Since we are not testing pg_hba or any of that, make a local user for ident auth
|
|
user { $user:
|
|
ensure => present,
|
|
}
|
|
|
|
postgresql::server::role { $user:
|
|
password_hash => $password,
|
|
}
|
|
EOS
|
|
|
|
apply_manifest(pp, :catch_failures => true)
|
|
apply_manifest(pp, :catch_changes => true)
|
|
|
|
# Check that the user can log in
|
|
psql('--command="select datname from pg_database" postgres', 'postgresql_test_user2') do |r|
|
|
expect(r.stdout).to match(/template1/)
|
|
expect(r.stderr).to eq('')
|
|
end
|
|
end
|
|
end
|