aws-must-templates 0.1.6 → 0.2.1

data/spec/aws-must-templates/AwsCommandLineInterfaceInstalled/AwsCommandLineInterfaceInstalled_spec.rb

@@ -1,6 +1,22 @@
+=begin
+
++++start+++
+
+## <a id="AwsCommandLineInterfaceInstalled"></a>AwsCommandLineInterfaceInstalled<a class='navigator' href='#top'>[top]</a>
+
+Validate that command `aws` is installed.
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
 require  'spec_helper'
 
-describe "AwsCommandLineInterfaceInstalled" do 
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
 
   describe command('type aws') do
       its( :exit_status ) { should eq 0 }
@@ -8,3 +24,5 @@ describe "AwsCommandLineInterfaceInstalled" do
 
 
 end
+
+# +++fold-off+++

data/spec/aws-must-templates/AwsMustTestRunnerProperties/AwsMustTestRunnerProperties_spec.rb

@@ -1,12 +1,25 @@
 require 'spec_helper'
 
+=begin
+
++++start+++
+
+## <a id="AwsMustTestRunnerProperties"></a>AwsMustTestRunnerProperties<a class='navigator' href='#top'>[top]</a>
+
+Validata that Test Runner works correctly and set properties
+
++++close+++
+
+=end
+
+# +++fold-on+++
 
 
 # ------------------------------------------------------------------
 # Configuration
 # 
 
-current_test = "AwsMustTestRunnerProperties"
+current_test = File.basename File.dirname  __FILE__ 
 
 # every suite should define these paramentes
 system_properties = [
@@ -37,3 +50,5 @@ describe current_test do
 
 end
 
+# +++fold-off+++
+

data/spec/aws-must-templates/CloudFormationHelperScriptsInstalled/CloudFormationHelperScriptsInstalled_spec.rb

@@ -1,3 +1,17 @@
+=begin
+
++++start+++
+
+## <a id="CloudFormationHelperScriptsInstalled"></a>CloudFormationHelperScriptsInstalled<a class='navigator' href='#top'>[top]</a>
+
+Validate that CloudFormation Helper script is installed.
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
 require 'spec_helper'
 
 describe "CloudFormationHelperScriptsInstalled" do 
@@ -19,3 +33,6 @@ describe "CloudFormationHelperScriptsInstalled" do
   end
 
 end
+
+
+# +++fold-off+++

data/spec/aws-must-templates/Ec2InstanceType/Ec2InstanceType_spec.rb

@@ -0,0 +1,47 @@
+=begin
+
++++start+++
+
+## <a id="Ec2InstanceType"></a>Ec2InstanceType<a class='navigator' href='#top'>[top]</a>
+
+Validates `InstanceType`  of EC2 `InstanceId` as returned by  `describe_instance_attribute` 
+
+* `:instance_type` == `InstanceType`
+
+**Parameters**
+
+- `test_parameter( current_test, "InstanceType" )` 
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  instance = suite_value( :instance_name )   # set in spec_helper
+  instanceType = test_parameter( current_test, "InstanceType" )
+
+  # ------------------------------------------------------------------
+  # tests
+  describe "instance '#{instance.value}'" do
+
+
+    describe ec2_named_resource( instance ) do
+      its( :instance_type  ) { should eq instanceType.value }
+    end
+
+  end
+
+
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/Ec2PrivateIp/Ec2PrivateIp_spec.rb

@@ -0,0 +1,49 @@
+=begin
+
++++start+++
+
+## <a id="Ec2PrivateIp"></a>Ec2PrivateIp<a class='navigator' href='#top'>[top]</a>
+
+Validates EC2 `InstanceId` public ip 'private_ip_address' is with
+`CidrBlock`
+
+**Parameters**
+
+* `instance = suite_value( :instance_name )` : name of instance being tested
+* `test_parameter( current_test, "CidrBlock" )` : mandatory, should be valid Cidr
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  instance = suite_value( :instance_name )  # set in spec_helper
+  cidr_block = test_parameter( current_test, "CidrBlock" )
+
+  # ------------------------------------------------------------------
+  # tests
+  describe "instance '#{instance.value}'" do
+
+    describe ec2_named_resource_attribute( instance, "private_ip_address" ) do
+
+      it "#valid cidr #{cidr_block.value}" do
+        expect( subject.private_ip_address_valid_cidr?( cidr_block.value ) ).to eql( true )
+      end
+    end
+
+  end # instance
+
+
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/Ec2PublicIp/Ec2PublicIp_spec.rb

@@ -0,0 +1,68 @@
+=begin
+
++++start+++
+
+## <a id="Ec2PublicIp"></a>Ec2PublicIp<a class='navigator' href='#top'>[top]</a>
+
+Validates that EC2 `InstanceId` `:public_ip_address` (none/defined/CidrBlock)
+
+**Parameters**
+
+* `instance = suite_value( :instance_name )` : name of instance being tested
+* `test_parameter( current_test, "PublicIp" )` valid values
+   * `nil` OR `none`  : should not be defined
+   * V4 address public_ip_address belong to CidrBlock
+   * `defined`: should not be nill
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  instance = suite_value( :instance_name )  # set in spec_help
+  public_ip = test_parameter( current_test, "PublicIp" )
+
+
+  # ------------------------------------------------------------------
+  # tests
+  describe "instance '#{instance.value}'" do
+
+
+    describe "Public IP" do
+    
+      case public_ip.value
+
+      when /\A(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})\Z/ 
+        describe ec2_named_resource_attribute( instance, "public_ip_address" ) do
+          its( :public_ip_address  ) { should eql public_ip.value }
+        end
+      when "none", "nil"
+        describe ec2_named_resource( instance ) do
+          its( :public_ip_address  ) { should eql nil }
+        end
+      when "defined"
+        describe ec2_named_resource( instance ) do
+          its( :public_ip_address  ) { should_not  eql nil }
+        end
+      else
+        raise "Invalid value '#{public_ip.value}' in parameter '#{public_ip}'"
+      end # case
+    end # public ip
+
+
+  end # instance
+
+
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/Ec2Routes/Ec2Routes_spec.rb

@@ -0,0 +1,69 @@
+=begin
+
++++start+++
+
+## <a id="Ec2Routes"></a>Ec2Routes<a class='navigator' href='#top'>[top]</a>
+
+Validates that routes in EC2 `InstanceId`
+
+**Parameters**
+
+* `instance = suite_value( :instance_name )` : name of instance being tested
+* `test_parameter( current_test, "Routes" )` : and array of route definitions
+
+For example: Validata that 'Instance1' in output section defines two
+routes. Fist route forwards VPC traffic to 'local' gateway, and
+default route forwards to internet gateway (matched using regexp).
+
+
+     - Ec2Routes:
+          Routes:   
+              - :destination_cidr_block: 10.0.0.0/16
+                :gateway_id: local
+                :state: active
+              - :destination_cidr_block: "0.0.0.0/0"
+                :gateway_id: !ruby/regexp '/^ig.*/'
+                :state: active
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  instance = suite_value( :instance_name )
+  routes = test_parameter( current_test, "Routes" )
+
+  # ------------------------------------------------------------------
+  # tests
+
+  describe route_resource_for_ec2( instance ) do
+
+    let( :implemented_routes ) {  subject.subnet_routes() }
+
+    # iterate 'expacted routes'
+    routes.value.each_with_index do |expected_route,i|
+
+      # use to validate corresponding implemented route
+      it "implement route #{expected_route}" do
+        expect( implemented_routes[i] ).to include( expected_route )
+      end
+
+    end # iterate expections
+
+    
+  end # instance
+
+
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/Ec2SecurityGroups/Ec2SecurityGroups_spec.rb

@@ -0,0 +1,151 @@
+=begin
+
++++start+++
+
+## <a id="Ec2SecurityGroups"></a>Ec2SecurityGroups<a class='navigator' href='#top'>[top]</a>
+
+Validates EC2 security group ingress/egress rules. A 
+
+**Parameters**
+
+* `instance = suite_value( :instance_name )` : name of instance being tested
+* `ingress = test_parameter( current_test, "Ingress" )` : ingress on
+  the EC2 instance to validate
+* `egress = test_parameter( current_test, "Egress" )`: egress rules on
+  the EC2 instance to validate
+* `strictIngress = test_parameter( current_test, "StrictIngress",
+  false )`: validate exactly |Ingress| rules
+* `strictEgress = test_parameter( current_test, "StrictEgress", false )`: 
+   validate exactly |Egress| rules
+   
+
+             - Ec2SecurityGroups:
+                 StrictIngress: false
+                 StrictEgress: false
+                 Ingress:
+				      # ping response only in local subnet
+                    - :ip_protocol: icmp
+                      :from_port: -1
+                      :to_port: -1
+                      :ip_ranges:
+                         - :cidr_ip: *SubNetPrivate
+                 Egress:
+                      # allow ping Internet
+                    - :ip_protocol: icmp
+                      :from_port: -1
+                      :to_port: -1
+                      :ip_ranges:
+                         - :cidr_ip: "0.0.0.0/0"
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+# ------------------------------------------------------------------
+# Use custom matcher to loop array of rules and validate that expected
+# rule is "included" to one of these rules.
+
+RSpec::Matchers.define :define_rule do |expected|
+
+  match do |actual_rules|
+    
+    result = false
+
+    actual_rules.each do |rule|
+      # puts "rule=#{rule} vs. #{expected}"
+      begin 
+        result |= expect( rule ).to include( expected )
+        break if result
+      rescue Exception => e
+        # puts "Rescued #{e}"
+      end
+    end
+    return result
+    # actual % expected == 0
+  end
+
+  failure_message do |actual_rules|
+    "rule #{expected} was not included in actual rules #{actual_rules}  "
+  end
+end
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  instance = suite_value( :instance_name ) 
+  ingress = test_parameter( current_test, "Ingress" )
+  egress = test_parameter( current_test, "Egress" )
+  strictIngress = test_parameter( current_test, "StrictIngress", false )
+  strictEgress = test_parameter( current_test, "StrictEgress", false )
+  
+
+
+  # ------------------------------------------------------------------
+  # tests
+  describe security_group_resource_for_ec2( instance ) do
+
+    let( :implemented_ingress_rules ) {  subject.instance_ingress_rules() }
+    let( :implemented_egress_rules ) {  subject.instance_egress_rules() }
+
+    # ------------------------------------------------------------------
+    # ingresss rules
+    context "ingress rules" do
+
+      if strictIngress.value then
+        it "validate all ingress rules in test suite" do
+          expect( implemented_ingress_rules.length ).to eql( ingress.value.length  )
+        end
+      else
+        it "WARNING does not validate all ingress rules in test suite" do
+          expect( ingress.value.length ).to eql( ingress.value.length )
+        end
+      end 
+
+      # iterate 'expacted ingress' rules
+      ingress && ingress.value && ingress.value.each do |expected_rule|
+        # use to validate corresponding implemented route
+        it "implement ingress rule: #{expected_rule}" do
+          expect( implemented_ingress_rules ).to define_rule( expected_rule )
+        end
+      end
+
+    end
+
+    # ------------------------------------------------------------------
+    # egress
+
+    context "egress rules" do
+
+      if strictEgress.value then
+        it "validates all egress rules in test suite" do
+          expect( implemented_egress_rules.length  ).to eql( egress.value.length )
+        end
+      else
+        it "WARNING does not validate all egress rules in test suite" do
+          expect( egress.value.length ).to eql( egress.value.length )
+        end
+      end
+      
+
+      # iterate 'expacted egress' rules
+      egress && egress.value && egress.value.each do |expected_rule|
+        # use to validate corresponding implemented route
+        it "implement egress rule:  #{expected_rule}" do
+          expect( implemented_egress_rules ).to define_rule( expected_rule )
+        end
+      end
+
+    end
+
+  end # instance
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/Ec2StatusNormal/Ec2StatusNormal_spec.rb

@@ -0,0 +1,55 @@
+=begin
+
++++start+++
+
+## <a id="Ec2StatusNormal"></a>Ec2StatusNormal<a class='navigator' href='#top'>[top]</a>
+
+Validates that status of `InstanceId` EC2  status for `describe_instance_status` normal:
+
+* defefines `:availability_zone`
+* `:system_status_ok?`
+* `:instance_state_running?`
+
+**Parameters**
+
+* `instance = suite_value( :instance_name )` : name of instance being tested
+
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  instanceName = suite_value( :instance_name )
+
+  expected = [
+              { :prop => :system_status_not_impaired?, :expect => true },
+              { :prop => :instance_state_running?, :expect => true  } 
+             ]
+
+  # ------------------------------------------------------------------
+  # tests
+
+  describe "instanceName '#{instanceName.value}'" do
+
+    expected.each do |prop|
+      describe ec2_named_resource( instanceName ) do
+        its( prop[:prop] ) { should eq prop[:expect] }
+      end
+    end
+
+  end # describe instanceId
+
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/NetworkCanPing/NetworkCanPing_spec.rb

@@ -0,0 +1,36 @@
+=begin
+
++++start+++
+
+## <a id="NetworkCanPing"></a>NetworkCanPing<a class='navigator' href='#top'>[top]</a>
+
+Can ping to `test_parameter( current_test, "Destination" )`
+
++++close+++
+
+=end
+
+# +++fold-on+++
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # defined in test-suites.yaml
+  timeout = 20 # seconds
+  testcount = 3 # times
+
+  destination = test_parameter( current_test, "Destination" )
+
+
+  describe "ping  #{testcount} times to '#{destination.value}', wait response within #{timeout} seconds" do
+    cmd = "ping #{destination.value} -W #{timeout} -c #{testcount}"
+    describe command( cmd ) do
+      its(:exit_status) { should eq 0 }
+    end
+  end
+end
+
+
+# +++fold-off+++

data/spec/aws-must-templates/ParameterTest/ParameterTest_spec.rb

@@ -1,7 +1,21 @@
+=begin
+
++++start+++
+
+## <a id="ParameterTest"></a>ParameterTest<a class='navigator' href='#top'>[top]</a>
+
+Demonstrate a test accessing `test_parameters`
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
 require 'spec_helper'
 
 
-current_test = "ParameterTest"
+current_test = File.basename File.dirname  __FILE__ 
 
 describe  current_test do |ex|
 
@@ -33,3 +47,5 @@ describe  current_test do |ex|
   end #  describe "Test parameters" do
 
 end
+
+# +++fold-off+++

data/spec/aws-must-templates/RespondsToPing/RespondsToPing_spec.rb

@@ -0,0 +1,46 @@
+=begin
+
++++start+++
+
+## <a id="RespondsToPing"></a>RespondsToPing<a class='navigator' href='#top'>[top]</a>
+
+Validate that host  `test_parameter( current_test, "Hostname" )`  answers to ping
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
+require 'spec_helper'
+
+current_test = File.basename File.dirname  __FILE__ 
+
+describe current_test do
+
+  # ------------------------------------------------------------------
+  # test parameters
+
+  hostname = test_parameter( current_test, "Hostname" )
+  timeout = 20 # seconds
+  testcount = 3 # times
+
+  # ------------------------------------------------------------------
+  # tests
+
+  describe "ping '#{hostname.value}'" do
+
+    it "#reponds within #{timeout} seconds with #{testcount} test counts" do 
+      # -W:  Time to wait for a response, in seconds
+      # -c:  Stop after sending count ECHO_REQUEST packets. With deadline
+      # -option, ping waits for count ECHO_REPLY packets, until the
+      # -timeout expires
+
+      cmd = "ping #{hostname.value} -W 20 -c 3"
+      # puts cmd `#{cmd}` 
+      raise "Error in '#{cmd}' " unless $? == 0 end
+  end
+
+end
+
+# +++fold-off+++

data/spec/aws-must-templates/S3NoAccess/S3NoAccess_spec.rb

@@ -1,9 +1,23 @@
+=begin
+
++++start+++
+
+## <a id="S3NoAccess"></a>S3NoAccess<a class='navigator' href='#top'>[top]</a>
+
+Validate no access to S3 bucket `test_parameter( current_test, "Bucket" )`
+
++++close+++
+
+=end
+
+# +++fold-on+++
+
 require 'spec_helper'
 
 # ------------------------------------------------------------------
 # config
 
-current_test = "S3NoAccess"
+current_test = File.basename File.dirname  __FILE__ 
 
 # ------------------------------------------------------------------
 # Tests
@@ -66,7 +80,7 @@ describe current_test  do
 
   end
 
+end
 
 
-
-end
+# +++fold-off+++