def test_bastion(self):
vpc_cfg = deepcopy(vpc_0_0_1_cfg)
vpc_cfg["bastion"] = bastion
vpc_obj_bastion = deepcopy(vpc_object)
vpc_obj_bastion.bastion = deepcopy(bastion_object)
with patch("domino_cdk.config.util.log.warning") as warn:
VPC.from_0_0_1(vpc_cfg)
warn.assert_not_called()
def test_bastion_user_data_no_ami(self):
vpc_cfg = deepcopy(vpc_0_0_1_cfg)
vpc_cfg["bastion"]["enabled"] = True
vpc_cfg["bastion"]["machine_image"] = {
"ami_id": None,
"user_data": "some-user-data"
}
with self.assertRaisesRegex(
ValueError,
"Bastion instance with user_data requires an ami_id!"):
VPC.from_0_0_1(vpc_cfg)
def test_too_few_azs(self):
vpc_cfg = deepcopy(vpc_0_0_1_cfg)
vpc_cfg["max_azs"] = 1
with self.assertRaisesRegex(
ValueError, "Must use at least two availability zones"):
VPC.from_0_0_1(vpc_cfg)
def test_no_create_no_existing_vpc(self):
vpc_cfg = deepcopy(vpc_0_0_1_cfg)
vpc_cfg["create"] = False
with self.assertRaisesRegex(ValueError, "Cannot provision into a VPC"):
VPC.from_0_0_1(vpc_cfg)
def test_oldest_newest_loaders_identical_result(self):
vpc_old = VPC.from_0_0_0(deepcopy(vpc_0_0_0_cfg))
vpc_new = VPC.from_0_0_1(deepcopy(vpc_0_0_1_cfg))
self.assertEqual(vpc_old, vpc_new)
def test_from_0_0_1_wrong_schema(self):
with self.assertRaisesRegex(KeyError, "bastion"):
VPC.from_0_0_1(deepcopy(vpc_0_0_0_cfg))
def test_from_0_0_1(self):
with patch("domino_cdk.config.util.log.warning") as warn:
vpc = VPC.from_0_0_1(deepcopy(vpc_0_0_1_cfg))
warn.assert_not_called()
self.assertEqual(vpc, vpc_object)
"to_port": 22,
"protocol": "TCP",
"ip_cidrs": ["0.0.0.0/0"],
}],
"machine_image": {
"ami_id": "ami-1234abcd",
"user_data": "some-user-data",
},
}
vpc_object = VPC(
create=True,
id=None,
cidr="10.0.0.0/24",
availability_zones=[],
max_azs=3,
bastion=VPC.Bastion(enabled=False,
key_name=None,
instance_type=None,
ingress_ports=None,
machine_image=None),
)
bastion_object = VPC.Bastion(
enabled=True,
key_name=None,
instance_type="t2.micro",
ingress_ports=[IngressRule("ssh", 22, 22, "TCP", ["0.0.0.0/0"])],
machine_image=MachineImage("ami-1234abcd", "some-user-data"),
)
class TestConfigVPC(unittest.TestCase):
default_config = DominoCDKConfig(
name='domino',
aws_region='__FILL__',
aws_account_id='__FILL__',
tags={'domino-infrastructure': 'true'},
install={},
vpc=VPC(
id=None,
create=True,
cidr='10.0.0.0/16',
availability_zones=[],
max_azs=3,
bastion=VPC.Bastion(
enabled=False,
key_name=None,
instance_type='t2.micro',
ingress_ports=[
IngressRule(name='ssh',
from_port=22,
to_port=22,
protocol='TCP',
ip_cidrs=['0.0.0.0/0'])
],
machine_image=None,
),
),
efs=EFS(
backup=EFS.Backup(
enable=True,
schedule='0 12 * * ? *',
move_to_cold_storage_after=35,
delete_after=125,