mirror of
https://github.com/inspec/inspec
synced 2024-09-21 15:02:01 +00:00
40 lines
1.9 KiB
Ruby
40 lines
1.9 KiB
Ruby
# copyright: 2017
|
|
|
|
require "helper"
|
|
require "inspec/resource"
|
|
require "inspec/resources/postgres_hba_conf"
|
|
|
|
describe "Inspec::Resources::PGHbaConf" do
|
|
describe "PGHbaConf Paramaters" do
|
|
resource = load_resource("postgres_hba_conf", "/test/path/to/postgres/pg_hba.conf")
|
|
|
|
it "Verify postgres_hba_conf filtering by `type`" do
|
|
entries = resource.where { type == "local" }
|
|
_(entries.database).must_include "all"
|
|
_(entries.auth_method).must_equal ["peer"]
|
|
end
|
|
it "Verify postgres_hba_conf filtering by `database`" do
|
|
entries = resource.where { database == "acme_test" }
|
|
_(entries.type).must_include "host"
|
|
_(entries.user).must_include "all"
|
|
end
|
|
it "Verify postgres_hba_conf filtering by `auth_method`" do
|
|
entries = resource.where { auth_method == "cert" }
|
|
_(entries.type).must_include "hostssl"
|
|
_(entries.database).must_include "acme_test"
|
|
end
|
|
it "Verify postgres_hba_conf properties" do
|
|
_(resource.auth_method).must_include "cert"
|
|
_(resource.database).must_include "acme_test"
|
|
_(resource.type).must_include "hostssl"
|
|
end
|
|
it "parses the pg_hba.conf file correctly" do
|
|
_(resource.type).must_equal %w{local host host host host hostssl hostssl hostssl hostssl}
|
|
_(resource.database).must_equal %w{all acme_test_db acme_test_db acme_test acme_test acme_test_db acme_test_db acme_test acme_test}
|
|
_(resource.user).must_equal %w{all all all all all all all all all}
|
|
_(resource.address).must_equal ["", "::1/0", "127.0.0.1/0", "::1/0", "127.0.0.1/0", "::/0", "0.0.0.0/0", "::/0", "0.0.0.0/0"]
|
|
_(resource.auth_method).must_equal %w{peer md5 md5 md5 md5 cert cert cert cert}
|
|
_(resource.auth_params).must_equal ["", "", "", "", "", "clientcert=1 map=ssl-test", "clientcert=1 map=ssl-test", "clientcert=1 map=ssl-test", "clientcert=1 map=ssl-test"]
|
|
end
|
|
end
|
|
end
|