def test_permissions_block_noop(self):
''' Test that non-root can't run the important functions. '''
oneoff = PuppetctlExecution(self.test_statefile)
with mock.patch.object(PuppetctlExecution,
'_allowed_to_run_command',
return_value=False):
with self.assertRaises(SystemExit) as fail_nooperate, \
mock.patch('sys.stdout', new=StringIO()):
oneoff.nooperate(False, int(time.time() + 60),
'failure testing')
self.assertEqual(fail_nooperate.exception.code, 2)
class TestExecutionNooperate(unittest.TestCase):
''' Class of tests about executing puppetctl nooperate commands. '''
def setUp(self):
''' Preparing test rig '''
self.test_statefile = '/tmp/exec-nooperate-statefile-mods.test.txt'
self.library = PuppetctlExecution(self.test_statefile)
self.library.logging_tag = 'testingpuppetctl[{}]'.format(
self.library.invoking_user)
def tearDown(self):
''' Cleanup test rig '''
try:
os.remove(self.test_statefile)
except OSError: # pragma: no cover
# we likely never created the file.
pass
def test_permissions_block_noop(self):
''' Test that non-root can't run the important functions. '''
oneoff = PuppetctlExecution(self.test_statefile)
with mock.patch.object(PuppetctlExecution,
'_allowed_to_run_command',
return_value=False):
with self.assertRaises(SystemExit) as fail_nooperate, \
mock.patch('sys.stdout', new=StringIO()):
oneoff.nooperate(False, int(time.time() + 60),
'failure testing')
self.assertEqual(fail_nooperate.exception.code, 2)
def test_noop_nolocks(self):
''' Test that "nooperate" noops when there are no locks. '''
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
with mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_puppet_processes_running',
return_value={}), \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=False,
expiry=int(time.time()) + 60 * 60,
message='')
self.assertIn('Puppet is in nooperate mode', fake_out.getvalue())
def test_noop_nolocks_puppetrun(self):
''' Test that "nooperate" noops when there are no locks but puppet is running '''
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
with mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_puppet_processes_running',
return_value={'2468': 'mock-puppet agent --no-splay'}), \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=False,
expiry=int(time.time()) + 60 * 60,
message='')
self.assertIn('mock-puppet agent --no-splay', fake_out.getvalue())
self.assertIn(
'If you need to stop an active puppet run from finishing',
fake_out.getvalue())
self.assertIn('Puppet is in nooperate mode', fake_out.getvalue())
def test_noop_not_our_locks(self):
''' Test that "nooperate" noops when we have no locks, but others do. '''
now = int(time.time())
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
self.library.statefile_object.add_lock('somebody2', 'disable',
now + 30 * 60,
'I disabled 1h')
self.library.statefile_object.add_lock('somebody3', 'nooperate',
now + 90 * 60,
'I nooped 2h')
with mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=False,
expiry=int(time.time()) + 60 * 60,
message='')
self.assertIn('Puppet is in nooperate mode', fake_out.getvalue())
def test_noop_disable_mylock(self):
''' Test that "nooperate" refuses to noop when I have a disable. '''
now = int(time.time())
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
self.library.statefile_object.add_lock(self.library.invoking_user,
'disable', now + 30 * 60,
'It is my lock')
with self.assertRaises(SystemExit) as catch_noforce, \
mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=False,
expiry=int(time.time()) + 60 * 60,
message='')
self.assertIn('must be enabled to enter nooperate mode',
fake_out.getvalue())
self.assertEqual(catch_noforce.exception.code, 2)
def test_noop_force_mylock(self):
''' Test that "nooperate" noops when I force a lock. '''
now = int(time.time())
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
self.library.statefile_object.add_lock(self.library.invoking_user,
'nooperate', now + 30 * 60,
'old lock')
with mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=True,
expiry=int(time.time()) + 60 * 60,
message='new lock')
self.assertIn('Puppet is in nooperate mode', fake_out.getvalue())
self.assertIn('new lock', fake_out.getvalue())
def test_noop_noop_mylock(self):
''' Test that "nooperate" doesn't act when there's a noop lock. '''
now = int(time.time())
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
self.library.statefile_object.add_lock(self.library.invoking_user,
'nooperate', now + 30 * 60,
'old lock')
with self.assertRaises(SystemExit) as catch_noforce, \
mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=False,
expiry=int(time.time()) + 60 * 60,
message='new lock')
self.assertIn('Puppet is already in nooperate mode',
fake_out.getvalue())
self.assertEqual(catch_noforce.exception.code, 1)
def test_noop_fail_add_lock(self):
''' Test that "nooperate" complains if it can't add a lock '''
with mock.patch.object(PuppetctlStatefile, 'add_lock', return_value=False), \
self.assertRaises(SystemExit) as lockfail, \
mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=False,
expiry=int(time.time()) + 60 * 60,
message='lock')
self.assertEqual(lockfail.exception.code, 2)
self.assertIn('Unable to add lock', fake_out.getvalue())
def test_noop_failremovenoop(self):
''' Test that "nooperate" complains if it can't override noop locks. '''
now = int(time.time())
with mock.patch.object(PuppetctlStatefile,
'_allowed_to_write_statefile',
return_value=True):
self.library.statefile_object.add_lock(self.library.invoking_user,
'nooperate', now + 30 * 60,
'It is my lock')
with mock.patch.object(PuppetctlStatefile, 'remove_lock', return_value=False), \
self.assertRaises(SystemExit) as lockfail, \
mock.patch('sys.stdout', new=StringIO()) as fake_out, \
mock.patch.object(PuppetctlExecution, '_allowed_to_run_command',
return_value=True):
self.library.nooperate(force=True,
expiry=int(time.time()) + 60 * 60,
message='new lock')
self.assertIn('Unable to remove', fake_out.getvalue())
self.assertEqual(lockfail.exception.code, 2)
