def test_confirm(self, mock_client):
mock_client.return_value.describe_connections.return_value = {
"connections": [{
"connectionState": "ordering",
"connectionId": "dxcon-fgq9rgot",
"location": "EqSe2",
"connectionName": "ansible-test-connection",
"bandwidth": "1Gbps",
"ownerAccount": "448830907657",
"region": "us-west-2"
}]
}
mock_client.return_value.confirm_connection.return_value = [{}]
set_module_args({"connection_id": "dxcon-fgq9rgot"})
with self.assertRaises(AnsibleExitJson) as exec_info:
aws_direct_connect_confirm_connection.main()
result = exec_info.exception.args[0]
assert result["changed"] is True
mock_client.return_value.describe_connections.assert_has_calls([
call(connectionId="dxcon-fgq9rgot"),
call(connectionId="dxcon-fgq9rgot"),
call(connectionId="dxcon-fgq9rgot")
])
mock_client.return_value.confirm_connection.assert_called_once_with(
connectionId="dxcon-fgq9rgot")
def test_update_comment_public_zone(self, find_zones_mock, time_mock, client_mock, check_mode, response):
client_mock.return_value.get_hosted_zone.return_value = {
'HostedZone': {
'Id': '/hostedzone/ZONE_ID',
'Name': 'example.com.',
'Config': {'Comment': '', 'PrivateZone': False},
},
}
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({
'secret_key': 'SECRET_KEY',
'access_key': 'ACCESS_KEY',
'region': 'eu-central-1',
'zone': 'example.com',
'comment': 'new',
'state': 'present',
'_ansible_check_mode': check_mode,
})
route53_zone.main()
if check_mode:
client_mock.return_value.update_hosted_zone_comment.assert_not_called()
else:
client_mock.return_value.update_hosted_zone_comment.assert_called_once_with(**{
'Id': '/hostedzone/ZONE_ID',
'Comment': 'new',
})
self.assertEqual(exec_info.exception.args[0]['changed'], True)
self.assertTrue(is_subdict(response, exec_info.exception.args[0]))
def test_delete_private_zone(self, find_zones_mock, time_mock, client_mock, check_mode):
client_mock.return_value.get_hosted_zone.return_value = {
'HostedZone': {
'Id': '/hostedzone/ZONE_ID',
'Name': 'example.com.',
'Config': {'Comment': 'foobar', 'PrivateZone': True},
},
'VPCs': [{'VPCRegion': 'eu-central-1', 'VPCId': 'vpc-1'}],
}
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({
'secret_key': 'SECRET_KEY',
'access_key': 'ACCESS_KEY',
'region': 'eu-central-1',
'zone': 'example.com',
'vpc_id': 'vpc-1',
'vpc_region': 'eu-central-1',
'state': 'absent',
'_ansible_check_mode': check_mode,
})
route53_zone.main()
if check_mode:
client_mock.return_value.delete_hosted_zone.assert_not_called()
else:
client_mock.return_value.delete_hosted_zone.assert_called_once_with(**{
'Id': '/hostedzone/ZONE_ID',
})
self.assertEqual(exec_info.exception.args[0]['changed'], True)
def test_create_lambda_if_not_exist(self, client_mock):
client_mock.return_value.create_function.return_value = base_lambda_config
get_function_after_create = {
'FunctionName': 'lambda_name',
'Version': '1',
'aws_retry': True
}
client_mock.return_value.get_function.side_effect = [
None, get_function_after_create
]
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args(base_module_args)
lda.main()
self.assertEqual(exec_info.exception.args[0]['changed'], True)
client_mock.return_value.get_function.assert_called()
client_mock.return_value.update_function_configuration.assert_not_called(
)
client_mock.return_value.create_function.assert_called()
(create_args,
create_kwargs) = client_mock.return_value.create_function.call_args
client_mock.return_value.create_function.assert_called_once_with(
**create_kwargs)
def test_get_by_name(self, mock_client):
mock_client.return_value.describe_connections.return_value = {
"connections": [
{
"connectionState": "requested",
"connectionId": "dxcon-fgq9rgot",
"location": "EqSe2",
"connectionName": "ansible-test-connection",
"bandwidth": "1Gbps",
"ownerAccount": "448830907657",
"region": "us-west-2"
}
]
}
set_module_args({
"name": "ansible-test-connection"
})
with self.assertRaises(AnsibleExitJson) as exec_info:
aws_direct_connect_confirm_connection.main()
result = exec_info.exception.args[0]
assert result["changed"] is False
assert result["connection_state"] == "requested"
mock_client.return_value.describe_connections.assert_has_calls([
call(),
call(connectionId="dxcon-fgq9rgot")
])
mock_client.return_value.confirm_connection.assert_not_called()
def test_missing_name(self, mock_client):
mock_client.return_value.describe_connections.return_value = {
"connections": [
{
"connectionState": "requested",
"connectionId": "dxcon-fgq9rgot",
"location": "EqSe2",
"connectionName": "ansible-test-connection",
"bandwidth": "1Gbps",
"ownerAccount": "448830907657",
"region": "us-west-2"
}
]
}
set_module_args({
"name": "foobar"
})
with self.assertRaises(AnsibleFailJson) as exec_info:
aws_direct_connect_confirm_connection.main()
result = exec_info.exception.args[0]
assert result["failed"] is True
mock_client.return_value.describe_connections.assert_has_calls([
call()
])
def test_upload_api(monkeypatch):
class FakeConnection:
def put_rest_api(self, *args, **kwargs):
assert kwargs["body"] == "the-swagger-text-is-fake"
return {"msg": "success!"}
def return_fake_connection(*args, **kwargs):
return FakeConnection()
# Because it's imported into the aws_modules namespace we need to override
# it there, even though the function itself lives in module_utils.botocore
monkeypatch.setattr(aws_modules, "boto3_conn", return_fake_connection)
monkeypatch.setattr(aws_modules.AnsibleAWSModule, "exit_json",
fake_exit_json)
set_module_args({
"api_id": "fred",
"state": "present",
"swagger_text": "the-swagger-text-is-fake",
"region": 'mars-north-1',
"_ansible_tmpdir": "/tmp/ansibl-abcdef",
})
with pytest.raises(SystemExit):
agw.main()
assert exit_return_dict["changed"]
def test_missing_required_parameters(self, *args):
set_module_args({})
with self.assertRaises(AnsibleFailJson) as exec_info:
aws_direct_connect_confirm_connection.main()
result = exec_info.exception.args[0]
assert result["failed"] is True
assert "name" in result["msg"]
assert "connection_id" in result["msg"]
def test_warn_if_region_not_specified():
set_module_args({
"name": "aws_api_gateway",
"state": "present",
"runtime": 'python2.7',
"role": 'arn:aws:iam::987654321012:role/lambda_basic_execution',
"handler": 'lambda_python.my_handler'})
with pytest.raises(SystemExit):
print(agw.main())
def setup_module(self):
set_module_args({
'region': 'us-east-2',
'lambda_function_arn': 'test-lambda-arn',
'bucket_name': 'test-bucket',
'event_name': 'test-id',
'events': ['s3:ObjectCreated:*', 's3:ObjectRemoved:*'],
'state': 'present',
'prefix': '/images',
'suffix': '.jpg'
})
self.module = s3_bucket_notification.setup_module_object()
def test_delete_absent_zone(self, find_zones_mock, time_mock, client_mock):
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({
'secret_key': 'SECRET_KEY',
'access_key': 'ACCESS_KEY',
'region': 'eu-central-1',
'zone': 'example.com',
'state': 'absent',
})
route53_zone.main()
client_mock.return_value.delete_hosted_zone.assert_not_called()
self.assertEqual(exec_info.exception.args[0]['changed'], False)
def test_missing_connection_id(self, mock_client):
mock_client.return_value.describe_connections.side_effect = ClientError(
{'Error': {
'Code': 'ResourceNotFoundException'
}}, 'DescribeConnection')
set_module_args({"connection_id": "dxcon-aaaabbbb"})
with self.assertRaises(AnsibleFailJson) as exec_info:
aws_direct_connect_confirm_connection.main()
result = exec_info.exception.args[0]
assert result["failed"] is True
mock_client.return_value.describe_connections.assert_has_calls(
[call(connectionId="dxcon-aaaabbbb")])
def test_warn_if_state_not_specified():
set_module_args({
"min_pw_length": "8",
"require_symbols": "false",
"require_numbers": "true",
"require_uppercase": "true",
"require_lowercase": "true",
"allow_pw_change": "true",
"pw_max_age": "60",
"pw_reuse_prevent": "5",
"pw_expire": "false"
})
with pytest.raises(SystemExit):
print(iam_password_policy.main())
def test_dont_update_lambda_if_nothing_changed(self, client_mock):
client_mock.return_value.get_function.side_effect = [{
'Configuration':
base_lambda_config
}, base_lambda_config]
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args(base_module_args)
lda.main()
self.assertEqual(exec_info.exception.args[0]['changed'], False)
client_mock.return_value.get_function.assert_called()
client_mock.return_value.update_function_configuration.assert_not_called(
)
client_mock.return_value.create_function.assert_not_called()
def test_decryption(self, mock_connect):
path = fixture_prefix + '/ec2_win_password.pem'
with open(path, 'r') as f:
pem = to_text(f.read())
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({'instance_id': 'i-12345', 'key_data': pem})
module = setup_module_object()
mock_connect().get_password_data.return_value = 'L2k1iFiu/TRrjGr6Rwco/T3C7xkWxUw4+YPYpGGOmP3KDdy3hT1' \
'8RvdDJ2i0e+y7wUcH43DwbRYSlkSyALY/nzjSV9R5NChUyVs3W5' \
'5oiVuyTKsk0lor8dFJ9z9unq14tScZHvyQ3Nx1ggOtS18S9Pk55q' \
'IaCXfx26ucH76VRho='
ec2_win_password(module)
self.assertEqual(
exec_info.exception.args[0]['win_password'],
to_bytes('Ansible_AWS_EC2_Win_Password'),
)
def test_mutually_exclusive(self, *args):
with self.assertRaises(AnsibleFailJson) as exec_info:
set_module_args({
'secret_key': 'SECRET_KEY',
'access_key': 'ACCESS_KEY',
'region': 'eu-central-1',
'zone': 'example.com',
'vpc_id': 'vpc-94ccc2ff',
'vpc_region': 'eu-central-1',
'comment': 'foobar',
'delegation_set_id': 'A1BCDEF2GHIJKL',
'state': 'present',
})
route53_zone.main()
self.assertEqual(
exec_info.exception.args[0]['msg'],
'parameters are mutually exclusive: delegation_set_id|vpc_id, delegation_set_id|vpc_region',
)
def test_update_lambda_if_only_one_config_item_changed(self, client_mock):
client_mock.return_value.get_function.side_effect = [{
'Configuration':
base_lambda_config
}, one_change_lambda_config]
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args(one_change_module_args)
lda.main()
self.assertEqual(exec_info.exception.args[0]['changed'], True)
client_mock.return_value.get_function.assert_called()
client_mock.return_value.update_function_configuration.assert_called()
client_mock.return_value.create_function.assert_not_called()
(update_args, update_kwargs
) = client_mock.return_value.update_function_configuration.call_args
client_mock.return_value.update_function_configuration.assert_called_once_with(
**update_kwargs)
def test_delete_by_zone_id(self, find_zones_mock, time_mock, client_mock, hosted_zone_id, call_params, check_mode):
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({
'secret_key': 'SECRET_KEY',
'access_key': 'ACCESS_KEY',
'region': 'eu-central-1',
'zone': 'example.com',
'hosted_zone_id': hosted_zone_id,
'state': 'absent',
'_ansible_check_mode': check_mode,
})
route53_zone.main()
if check_mode:
client_mock.return_value.delete_hosted_zone.assert_not_called()
else:
client_mock.return_value.delete_hosted_zone.assert_has_calls(call_params)
self.assertEqual(exec_info.exception.args[0]['changed'], True)
def test_add_s3_bucket_notification(self, aws_client):
aws_client.return_value.get_bucket_notification_configuration.return_value = {
'LambdaFunctionConfigurations': []
}
set_module_args({
'region': 'us-east-2',
'lambda_function_arn': 'test-lambda-arn',
'bucket_name': 'test-lambda',
'event_name': 'test-id',
'events': ['s3:ObjectCreated:*', 's3:ObjectRemoved:*'],
'state': 'present',
'prefix': '/images',
'suffix': '.jpg'
})
with pytest.raises(AnsibleExitJson) as context:
s3_bucket_notification.main()
result = context.value.args[0]
assert result['changed'] is True
assert aws_client.return_value.get_bucket_notification_configuration.call_count == 1
aws_client.return_value.put_bucket_notification_configuration.assert_called_with(
Bucket='test-lambda',
NotificationConfiguration={
'LambdaFunctionConfigurations': [{
'Id':
'test-id',
'LambdaFunctionArn':
'test-lambda-arn',
'Events': ['s3:ObjectCreated:*', 's3:ObjectRemoved:*'],
'Filter': {
'Key': {
'FilterRules': [{
'Name': 'Prefix',
'Value': '/images'
}, {
'Name': 'Suffix',
'Value': '.jpg'
}]
}
}
}]
})
def test_delete_lambda_that_exists(self, client_mock):
client_mock.return_value.create_function.return_value = base_lambda_config
client_mock.return_value.get_function.side_effect = [
base_lambda_config, None
]
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args(delete_module_args)
lda.main()
self.assertEqual(exec_info.exception.args[0]['changed'], True)
client_mock.return_value.get_function.assert_called()
client_mock.return_value.delete_function.assert_called()
client_mock.return_value.update_function_configuration.assert_not_called(
)
client_mock.return_value.create_function.assert_not_called()
(delete_args,
delete_kwargs) = client_mock.return_value.delete_function.call_args
client_mock.return_value.delete_function.assert_called_once_with(
**delete_kwargs)
def test_update_lambda_if_added_environment_variable(self, client_mock):
client_mock.return_value.get_function.side_effect = [{
'Configuration':
base_lambda_config
}, base_lambda_config]
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args(module_args_with_environment)
lda.main()
self.assertEqual(exec_info.exception.args[0]['changed'], True)
client_mock.return_value.get_function.assert_called()
client_mock.return_value.update_function_configuration.assert_called()
client_mock.return_value.create_function.assert_not_called()
(update_args, update_kwargs
) = client_mock.return_value.update_function_configuration.call_args
client_mock.return_value.update_function_configuration.assert_called_once_with(
**update_kwargs)
self.assertEqual(update_kwargs['Environment']['Variables'],
module_args_with_environment['environment_variables'])
def test_decryption(self, mock_client):
path = self.PEM_PATH
with open(path, 'r') as f:
pem = to_text(f.read())
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({
'instance_id': self.INSTANCE_ID,
'key_data': pem,
})
module = setup_module_object()
mock_client().get_password_data.return_value = {
'InstanceId': self.INSTANCE_ID,
'PasswordData': self.ENCRYPTED_DATA,
'Timestamp': datetime.datetime.now(),
}
ec2_win_password(module)
self.assertEqual(
exec_info.exception.args[0]['win_password'],
to_bytes(self.UNENCRYPTED_DATA),
)
def test_upload_api(monkeypatch):
class FakeConnection:
def put_rest_api(self, *args, **kwargs):
assert kwargs["body"] == "the-swagger-text-is-fake"
return {"msg": "success!"}
def return_fake_connection(*args, **kwargs):
return FakeConnection()
monkeypatch.setattr(core, "boto3_conn", return_fake_connection)
monkeypatch.setattr(core.AnsibleAWSModule, "exit_json", fake_exit_json)
set_module_args({
"api_id": "fred",
"state": "present",
"swagger_text": "the-swagger-text-is-fake",
"region": 'mars-north-1',
"_ansible_tmpdir": "/tmp/ansibl-abcdef",
})
with pytest.raises(SystemExit):
agw.main()
assert exit_return_dict["changed"]
def test_update_private_zone_no_changes(self, find_zones_mock, time_mock, client_mock):
client_mock.return_value.get_hosted_zone.return_value = {
'HostedZone': {
'Id': '/hostedzone/ZONE_ID',
'Name': 'example.com.',
'Config': {'Comment': 'foobar', 'PrivateZone': True},
},
'VPCs': [{'VPCRegion': 'eu-central-1', 'VPCId': 'vpc-1'}],
}
with self.assertRaises(AnsibleExitJson) as exec_info:
set_module_args({
'secret_key': 'SECRET_KEY',
'access_key': 'ACCESS_KEY',
'region': 'eu-central-1',
'zone': 'example.com',
'comment': 'foobar',
'vpc_id': 'vpc-1',
'vpc_region': 'eu-central-1',
'state': 'present',
})
route53_zone.main()
client_mock.return_value.update_hosted_zone_comment.assert_not_called()
self.assertEqual(exec_info.exception.args[0]['changed'], False)
response = {
'private_zone': True,
'vpc_id': 'vpc-1',
'vpc_region': 'eu-central-1',
'comment': 'foobar',
'name': 'example.com.',
'delegation_set_id': None,
'zone_id': 'ZONE_ID',
}
self.assertTrue(is_subdict(response, exec_info.exception.args[0]))
def test_module_fail_when_required_args_missing(self):
with pytest.raises(AnsibleFailJson):
set_module_args({})
s3_bucket_notification.main()
def test_module_is_created_sensibly():
set_module_args(base_module_args)
module = setup_module_object()
assert module.params['function_name'] == 'this_is_a_test_function'
