def test_insert_rule(mock_Table, mock_Chain):
iptables.insert_rule("PAASTA.service", EMPTY_RULE._replace(target="DROP"))
call, = mock_Chain("filter", "PAASTA.service").insert_rule.call_args_list
args, kwargs = call
rule, = args
assert iptables.Rule.from_iptc(rule) == EMPTY_RULE._replace(target="DROP")
def prepare_new_container(soa_dir, synapse_service_dir, service, instance, mac):
"""Update iptables to include rules for a new (not yet running) MAC address
"""
ensure_shared_chains() # probably already set, but just to be safe
service_group = ServiceGroup(service, instance)
service_group.update_rules(soa_dir, synapse_service_dir)
iptables.insert_rule("PAASTA", dispatch_rule(service_group.chain_name, mac))
def test_insert_rule(mock_Table, mock_Chain):
iptables.insert_rule(
'PAASTA.service', EMPTY_RULE._replace(target='DROP'),
)
call, = mock_Chain('filter', 'PAASTA.service').insert_rule.call_args_list
args, kwargs = call
rule, = args
assert iptables.Rule.from_iptc(rule) == EMPTY_RULE._replace(target='DROP')