chef-dk 3.9.0 → 3.10.1

data/spec/unit/policyfile/uploader_spec.rb

@@ -1,410 +1,410 @@
-#
-# Copyright:: Copyright (c) 2014-2018 Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require "spec_helper"
-require "chef-dk/policyfile/uploader"
-
-# We load this here to ensure we get the "verifying doubles" behavior from
-# RSpec. It's not used by Policyfile::Uploader, but it's a collaborator.
-require "chef/server_api"
-
-describe ChefDK::Policyfile::Uploader do
-
-  let(:policyfile_lock_data) do
-    {
-      "name" => "example",
-      "run_list" => [ "recipe[omnibus::default]" ],
-      "revision_id" => "f4b29d87c36de67cbfd9aa3147df77cebf9f719e8c884036b3cf34ba94773ca5",
-      "cookbook_locks" => {
-        "omnibus" => {
-          "version" => "2.2.0",
-          "identifier" => "64b3e64306cff223206348e46af545b19032b170",
-          "dotted_decimal_identifier" => "28345299219435506.9887234981653237.76628930769264",
-          "cache_key" => "omnibus-2cf98f9797cacce9c8688fc4e74858b858e2bc14",
-          "origin" => "git@github.com:opscode-cookbooks/omnibus.git",
-          "source_options" => {
-            "git" => "git@github.com:opscode-cookbooks/omnibus.git",
-            "revision" => "2cf98f9797cacce9c8688fc4e74858b858e2bc14",
-            "branch" => "master",
-          },
-        },
-      },
-    }
-  end
-
-  let(:policyfile_lock) do
-    instance_double("ChefDK::PolicyfileLock", name: "example",
-                                              to_lock: policyfile_lock_data) end
-
-  let(:policy_group) { "unit-test" }
-
-  let(:http_client) { instance_double("Chef::ServerAPI") }
-
-  let(:policy_document_native_api) { false }
-
-  let(:uploader) do
-    described_class.new(policyfile_lock,
-                        policy_group,
-                        http_client: http_client,
-                        policy_document_native_api: policy_document_native_api)
-  end
-
-  let(:policyfile_as_data_bag_item) do
-
-    policyfile_as_data_bag_item = {
-      "id" => "example-unit-test",
-      "name" => "data_bag_item_policyfiles_example-unit-test",
-      "data_bag" => "policyfiles",
-    }
-    policyfile_as_data_bag_item["raw_data"] = policyfile_lock_data.dup
-    policyfile_as_data_bag_item["raw_data"]["id"] = "example-unit-test"
-    policyfile_as_data_bag_item["json_class"] = "Chef::DataBagItem"
-    policyfile_as_data_bag_item
-  end
-
-  it "has a lockfile" do
-    expect(uploader.policyfile_lock).to eq(policyfile_lock)
-  end
-
-  it "has a policy group" do
-    expect(uploader.policy_group).to eq(policy_group)
-  end
-
-  it "has an HTTP client" do
-    expect(uploader.http_client).to eq(http_client)
-  end
-
-  describe "uploading policies and cookbooks" do
-
-    let(:cookbook_locks) { {} }
-    let(:cookbook_versions) { {} }
-
-    before do
-      allow(policyfile_lock).to receive(:cookbook_locks).and_return(cookbook_locks)
-    end
-
-    def lock_double(name, identifier, dotted_decimal_id)
-      cache_path = "/home/user/cache_path/#{name}"
-
-      lock = instance_double("ChefDK::Policyfile::CookbookLock",
-                             name: name,
-                             version: "1.0.0",
-                             identifier: identifier,
-                             dotted_decimal_identifier: dotted_decimal_id,
-                             cookbook_path: cache_path)
-
-      cookbook_version = instance_double("Chef::CookbookVersion",
-                                         name: name,
-                                         identifier: lock.identifier,
-                                         version: dotted_decimal_id)
-
-      allow(cookbook_version).to receive(:identifier=).with(lock.identifier)
-
-      allow(ChefDK::Policyfile::ReadCookbookForCompatModeUpload)
-        .to receive(:load)
-        .with(name, dotted_decimal_id, cache_path)
-        .and_return(cookbook_version)
-
-      allow(ChefDK::Policyfile::CookbookLoaderWithChefignore)
-        .to receive(:load)
-        .with(name, cache_path)
-        .and_return(cookbook_version)
-
-      cookbook_versions[name] = cookbook_version
-      cookbook_locks[name] = lock
-
-      lock
-    end
-
-    shared_examples_for "uploading cookbooks" do
-
-      describe "uploading cookbooks" do
-
-        it "enumerates the cookbooks already on the server" do
-          expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-          expect(uploader.existing_cookbook_on_remote).to eq(existing_cookbook_on_remote)
-        end
-
-        context "with an empty policyfile lock" do
-
-          it "has an empty list of cookbooks for possible upload" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-
-            expect(uploader.cookbook_versions_for_policy).to eq([])
-          end
-
-          it "has an empty list of cookbooks that need to be uploaded" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-
-            expect(uploader.cookbook_versions_to_upload).to eq([])
-          end
-
-        end
-
-        context "with a set of cookbooks that don't exist on the server" do
-
-          before do
-            lock_double("my_apache2", "1111111111111111111111111111111111111111", "123.456.789")
-            lock_double("my_jenkins", "2222222222222222222222222222222222222222", "321.654.987")
-          end
-
-          it "lists the cookbooks in the lock as possibly needing to be uploaded" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-
-            expected_versions_for_policy = cookbook_versions.keys.map do |cb_name|
-              cb = cookbook_versions[cb_name]
-              lock = cookbook_locks[cb_name]
-              ChefDK::Policyfile::Uploader::LockedCookbookForUpload.new(cb, lock)
-            end
-
-            expect(uploader.cookbook_versions_for_policy).to eq(expected_versions_for_policy)
-          end
-
-          it "lists all cookbooks in the lock as needing to be uploaded" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-
-            expect(uploader.cookbook_versions_to_upload).to eq(cookbook_versions.values)
-          end
-
-          it "uploads the cookbooks and then the policy" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-
-            cookbook_uploader = instance_double("Chef::CookbookUploader")
-            expect(Chef::CookbookUploader).to receive(:new)
-              .with(cookbook_versions.values, rest: http_client, policy_mode: policy_document_native_api)
-              .and_return(cookbook_uploader)
-            expect(cookbook_uploader).to receive(:upload_cookbooks)
-
-            expect_policyfile_upload
-
-            uploader.upload
-          end
-
-        end
-
-        context "with a set of cookbooks where some already exist on the server" do
-
-          before do
-            # These are new:
-            lock_double("my_apache2", "1111111111111111111111111111111111111111", "123.456.789")
-            lock_double("my_jenkins", "2222222222222222222222222222222222222222", "321.654.987")
-
-            # Have this one:
-            lock_double("build-essential", "571d8ebd02b296fe90b2e4d68754af7e8e185f28", "67369247788170534.26353953100055918.55660493423796")
-          end
-
-          let(:expected_cookbooks_for_upload) do
-            [
-              cookbook_versions["my_apache2"],
-              cookbook_versions["my_jenkins"],
-            ]
-          end
-
-          it "lists only cookbooks not on the server as needing to be uploaded" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-
-            expect(uploader.cookbook_versions_to_upload).to eq(expected_cookbooks_for_upload)
-          end
-
-          it "uploads the cookbooks and then the policy" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-
-            cookbook_uploader = instance_double("Chef::CookbookUploader")
-            expect(Chef::CookbookUploader).to receive(:new)
-              .with(expected_cookbooks_for_upload, rest: http_client, policy_mode: policy_document_native_api)
-              .and_return(cookbook_uploader)
-            expect(cookbook_uploader).to receive(:upload_cookbooks)
-
-            expect_policyfile_upload
-
-            uploader.upload
-          end
-
-        end
-
-        context "with a set of cookbooks that all exist on the server" do
-
-          before do
-            # Have this one:
-            lock_double("build-essential", "571d8ebd02b296fe90b2e4d68754af7e8e185f28", "67369247788170534.26353953100055918.55660493423796")
-          end
-
-          let(:expected_cookbooks_for_upload) do
-            []
-          end
-
-          it "lists no cookbooks as needing to be uploaded" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-
-            expect(uploader.cookbook_versions_to_upload).to eq(expected_cookbooks_for_upload)
-          end
-
-          it "skips cookbooks uploads, then uploads the policy" do
-            expect(policyfile_lock).to receive(:validate_cookbooks!)
-            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
-
-            expect(uploader.uploader).to_not receive(:upload_cookbooks)
-
-            expect_policyfile_upload
-
-            uploader.upload
-          end
-        end
-      end
-    end # uploading cookbooks shared examples
-
-    context "when configured for policy document compat mode" do
-
-      let(:policyfiles_data_bag) { { "name" => "policyfiles" } }
-
-      let(:list_cookbooks_url) { "cookbooks?num_versions=all" }
-
-      let(:existing_cookbook_on_remote) do
-        { "apt" =>
-          { "url" => "http://localhost:8889/cookbooks/apt",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbooks/apt/46097674477573307.43471642740453733.243606720748315",
-               "version" => "46097674477573307.43471642740453733.243606720748315" }] },
-          "build-essential" =>
-          { "url" => "http://localhost:8889/cookbooks/build-essential",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbooks/build-essential/67369247788170534.26353953100055918.55660493423796",
-               "version" => "67369247788170534.26353953100055918.55660493423796" }] },
-          "java" =>
-          { "url" => "http://localhost:8889/cookbooks/java",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbooks/java/5664982062912610.52588194571203830.6215746262253",
-               "version" => "5664982062912610.52588194571203830.6215746262253" }] },
-          "jenkins" =>
-          { "url" => "http://localhost:8889/cookbooks/jenkins",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbooks/jenkins/69194928762630300.30177357398946006.269829039948647",
-               "version" => "69194928762630300.30177357398946006.269829039948647" }] },
-        }
-      end
-
-      def expect_policyfile_upload
-        expect(uploader).to receive(:data_bag_create)
-        expect(uploader).to receive(:data_bag_item_create)
-      end
-
-      it "ensures a data bag named 'policyfiles' exists" do
-        expect(http_client).to receive(:post).with("data", policyfiles_data_bag)
-        uploader.data_bag_create
-      end
-
-      it "does not error when the 'policyfiles' data bag exists" do
-        response = double("Net::HTTP response", code: "409")
-        error = Net::HTTPServerException.new("conflict", response)
-        expect(http_client).to receive(:post).with("data", { "name" => "policyfiles" }).and_raise(error)
-        expect { uploader.data_bag_create }.to_not raise_error
-      end
-
-      it "uploads the policyfile as a data bag item" do
-        response = double("Net::HTTP response", code: "404")
-        error = Net::HTTPServerException.new("Not Found", response)
-        expect(http_client).to receive(:put)
-          .with("data/policyfiles/example-unit-test", policyfile_as_data_bag_item)
-          .and_raise(error)
-        expect(http_client).to receive(:post)
-          .with("data/policyfiles", policyfile_as_data_bag_item)
-
-        uploader.data_bag_item_create
-      end
-
-      it "replaces an existing policyfile on the server if it exists" do
-        expect(http_client).to receive(:put)
-          .with("data/policyfiles/example-unit-test", policyfile_as_data_bag_item)
-        uploader.data_bag_item_create
-      end
-
-      it "creates the data bag and item to upload the policy" do
-        expect(http_client).to receive(:post).with("data", policyfiles_data_bag)
-        expect(http_client).to receive(:put)
-          .with("data/policyfiles/example-unit-test", policyfile_as_data_bag_item)
-        uploader.upload_policy
-      end
-
-      include_examples "uploading cookbooks"
-
-    end
-
-    context "when configured for policy document native mode" do
-
-      let(:policy_document_native_api) { true }
-
-      let(:list_cookbooks_url) { "cookbook_artifacts?num_versions=all" }
-
-      let(:existing_cookbook_on_remote) do
-        { "apt" =>
-          { "url" => "http://localhost:8889/cookbook_artifacts/apt",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbook_artifacts/apt/5f7045a8aeaf6ccda3b3594258df9ee982b3a023",
-               "identifier" => "5f7045a8aeaf6ccda3b3594258df9ee982b3a023" }] },
-          "build-essential" =>
-          { "url" => "http://localhost:8889/cookbook_artifacts/build-essential",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbook_artifacts/build-essential/571d8ebd02b296fe90b2e4d68754af7e8e185f28",
-               "identifier" => "571d8ebd02b296fe90b2e4d68754af7e8e185f28" }] },
-          "java" =>
-          { "url" => "http://localhost:8889/cookbook_artifacts/java",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbook_artifacts/java/9178a38ad3e3baa55b49c1b8d9f4bf6a43dbc358",
-               "identifier" => "9178a38ad3e3baa55b49c1b8d9f4bf6a43dbc358" }] },
-          "jenkins" =>
-          { "url" => "http://localhost:8889/cookbook_artifacts/jenkins",
-            "versions" =>
-            [{ "url" =>
-               "http://localhost:8889/cookbook_artifacts/jenkins/0be380429add00d189b4431059ac967a60052323",
-               "identifier" => "0be380429add00d189b4431059ac967a60052323" }] },
-        }
-      end
-      def expect_policyfile_upload
-        expect(http_client).to receive(:put)
-          .with("/policy_groups/unit-test/policies/example", policyfile_lock_data)
-      end
-
-      it "enables native document mode for policyfiles" do
-        expect(uploader.using_policy_document_native_api?).to be(true)
-      end
-
-      it "uploads the policyfile to the native API" do
-        expect(http_client).to receive(:put)
-          .with("/policy_groups/unit-test/policies/example", policyfile_lock_data)
-
-        uploader.upload_policy
-      end
-
-      include_examples "uploading cookbooks"
-
-    end
-
-  end
-
-end
+#
+# Copyright:: Copyright (c) 2014-2018 Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "spec_helper"
+require "chef-dk/policyfile/uploader"
+
+# We load this here to ensure we get the "verifying doubles" behavior from
+# RSpec. It's not used by Policyfile::Uploader, but it's a collaborator.
+require "chef/server_api"
+
+describe ChefDK::Policyfile::Uploader do
+
+  let(:policyfile_lock_data) do
+    {
+      "name" => "example",
+      "run_list" => [ "recipe[omnibus::default]" ],
+      "revision_id" => "f4b29d87c36de67cbfd9aa3147df77cebf9f719e8c884036b3cf34ba94773ca5",
+      "cookbook_locks" => {
+        "omnibus" => {
+          "version" => "2.2.0",
+          "identifier" => "64b3e64306cff223206348e46af545b19032b170",
+          "dotted_decimal_identifier" => "28345299219435506.9887234981653237.76628930769264",
+          "cache_key" => "omnibus-2cf98f9797cacce9c8688fc4e74858b858e2bc14",
+          "origin" => "git@github.com:opscode-cookbooks/omnibus.git",
+          "source_options" => {
+            "git" => "git@github.com:opscode-cookbooks/omnibus.git",
+            "revision" => "2cf98f9797cacce9c8688fc4e74858b858e2bc14",
+            "branch" => "master",
+          },
+        },
+      },
+    }
+  end
+
+  let(:policyfile_lock) do
+    instance_double("ChefDK::PolicyfileLock", name: "example",
+                                              to_lock: policyfile_lock_data) end
+
+  let(:policy_group) { "unit-test" }
+
+  let(:http_client) { instance_double("Chef::ServerAPI") }
+
+  let(:policy_document_native_api) { false }
+
+  let(:uploader) do
+    described_class.new(policyfile_lock,
+                        policy_group,
+                        http_client: http_client,
+                        policy_document_native_api: policy_document_native_api)
+  end
+
+  let(:policyfile_as_data_bag_item) do
+
+    policyfile_as_data_bag_item = {
+      "id" => "example-unit-test",
+      "name" => "data_bag_item_policyfiles_example-unit-test",
+      "data_bag" => "policyfiles",
+    }
+    policyfile_as_data_bag_item["raw_data"] = policyfile_lock_data.dup
+    policyfile_as_data_bag_item["raw_data"]["id"] = "example-unit-test"
+    policyfile_as_data_bag_item["json_class"] = "Chef::DataBagItem"
+    policyfile_as_data_bag_item
+  end
+
+  it "has a lockfile" do
+    expect(uploader.policyfile_lock).to eq(policyfile_lock)
+  end
+
+  it "has a policy group" do
+    expect(uploader.policy_group).to eq(policy_group)
+  end
+
+  it "has an HTTP client" do
+    expect(uploader.http_client).to eq(http_client)
+  end
+
+  describe "uploading policies and cookbooks" do
+
+    let(:cookbook_locks) { {} }
+    let(:cookbook_versions) { {} }
+
+    before do
+      allow(policyfile_lock).to receive(:cookbook_locks).and_return(cookbook_locks)
+    end
+
+    def lock_double(name, identifier, dotted_decimal_id)
+      cache_path = "/home/user/cache_path/#{name}"
+
+      lock = instance_double("ChefDK::Policyfile::CookbookLock",
+                             name: name,
+                             version: "1.0.0",
+                             identifier: identifier,
+                             dotted_decimal_identifier: dotted_decimal_id,
+                             cookbook_path: cache_path)
+
+      cookbook_version = instance_double("Chef::CookbookVersion",
+                                         name: name,
+                                         identifier: lock.identifier,
+                                         version: dotted_decimal_id)
+
+      allow(cookbook_version).to receive(:identifier=).with(lock.identifier)
+
+      allow(ChefDK::Policyfile::ReadCookbookForCompatModeUpload)
+        .to receive(:load)
+        .with(name, dotted_decimal_id, cache_path)
+        .and_return(cookbook_version)
+
+      allow(ChefDK::Policyfile::CookbookLoaderWithChefignore)
+        .to receive(:load)
+        .with(name, cache_path)
+        .and_return(cookbook_version)
+
+      cookbook_versions[name] = cookbook_version
+      cookbook_locks[name] = lock
+
+      lock
+    end
+
+    shared_examples_for "uploading cookbooks" do
+
+      describe "uploading cookbooks" do
+
+        it "enumerates the cookbooks already on the server" do
+          expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+          expect(uploader.existing_cookbook_on_remote).to eq(existing_cookbook_on_remote)
+        end
+
+        context "with an empty policyfile lock" do
+
+          it "has an empty list of cookbooks for possible upload" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+
+            expect(uploader.cookbook_versions_for_policy).to eq([])
+          end
+
+          it "has an empty list of cookbooks that need to be uploaded" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+
+            expect(uploader.cookbook_versions_to_upload).to eq([])
+          end
+
+        end
+
+        context "with a set of cookbooks that don't exist on the server" do
+
+          before do
+            lock_double("my_apache2", "1111111111111111111111111111111111111111", "123.456.789")
+            lock_double("my_jenkins", "2222222222222222222222222222222222222222", "321.654.987")
+          end
+
+          it "lists the cookbooks in the lock as possibly needing to be uploaded" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+
+            expected_versions_for_policy = cookbook_versions.keys.map do |cb_name|
+              cb = cookbook_versions[cb_name]
+              lock = cookbook_locks[cb_name]
+              ChefDK::Policyfile::Uploader::LockedCookbookForUpload.new(cb, lock)
+            end
+
+            expect(uploader.cookbook_versions_for_policy).to eq(expected_versions_for_policy)
+          end
+
+          it "lists all cookbooks in the lock as needing to be uploaded" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+
+            expect(uploader.cookbook_versions_to_upload).to eq(cookbook_versions.values)
+          end
+
+          it "uploads the cookbooks and then the policy" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+
+            cookbook_uploader = instance_double("Chef::CookbookUploader")
+            expect(Chef::CookbookUploader).to receive(:new)
+              .with(cookbook_versions.values, rest: http_client, policy_mode: policy_document_native_api)
+              .and_return(cookbook_uploader)
+            expect(cookbook_uploader).to receive(:upload_cookbooks)
+
+            expect_policyfile_upload
+
+            uploader.upload
+          end
+
+        end
+
+        context "with a set of cookbooks where some already exist on the server" do
+
+          before do
+            # These are new:
+            lock_double("my_apache2", "1111111111111111111111111111111111111111", "123.456.789")
+            lock_double("my_jenkins", "2222222222222222222222222222222222222222", "321.654.987")
+
+            # Have this one:
+            lock_double("build-essential", "571d8ebd02b296fe90b2e4d68754af7e8e185f28", "67369247788170534.26353953100055918.55660493423796")
+          end
+
+          let(:expected_cookbooks_for_upload) do
+            [
+              cookbook_versions["my_apache2"],
+              cookbook_versions["my_jenkins"],
+            ]
+          end
+
+          it "lists only cookbooks not on the server as needing to be uploaded" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+
+            expect(uploader.cookbook_versions_to_upload).to eq(expected_cookbooks_for_upload)
+          end
+
+          it "uploads the cookbooks and then the policy" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+
+            cookbook_uploader = instance_double("Chef::CookbookUploader")
+            expect(Chef::CookbookUploader).to receive(:new)
+              .with(expected_cookbooks_for_upload, rest: http_client, policy_mode: policy_document_native_api)
+              .and_return(cookbook_uploader)
+            expect(cookbook_uploader).to receive(:upload_cookbooks)
+
+            expect_policyfile_upload
+
+            uploader.upload
+          end
+
+        end
+
+        context "with a set of cookbooks that all exist on the server" do
+
+          before do
+            # Have this one:
+            lock_double("build-essential", "571d8ebd02b296fe90b2e4d68754af7e8e185f28", "67369247788170534.26353953100055918.55660493423796")
+          end
+
+          let(:expected_cookbooks_for_upload) do
+            []
+          end
+
+          it "lists no cookbooks as needing to be uploaded" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+
+            expect(uploader.cookbook_versions_to_upload).to eq(expected_cookbooks_for_upload)
+          end
+
+          it "skips cookbooks uploads, then uploads the policy" do
+            expect(policyfile_lock).to receive(:validate_cookbooks!)
+            expect(http_client).to receive(:get).with(list_cookbooks_url).and_return(existing_cookbook_on_remote)
+
+            expect(uploader.uploader).to_not receive(:upload_cookbooks)
+
+            expect_policyfile_upload
+
+            uploader.upload
+          end
+        end
+      end
+    end # uploading cookbooks shared examples
+
+    context "when configured for policy document compat mode" do
+
+      let(:policyfiles_data_bag) { { "name" => "policyfiles" } }
+
+      let(:list_cookbooks_url) { "cookbooks?num_versions=all" }
+
+      let(:existing_cookbook_on_remote) do
+        { "apt" =>
+          { "url" => "http://localhost:8889/cookbooks/apt",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbooks/apt/46097674477573307.43471642740453733.243606720748315",
+               "version" => "46097674477573307.43471642740453733.243606720748315" }] },
+          "build-essential" =>
+          { "url" => "http://localhost:8889/cookbooks/build-essential",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbooks/build-essential/67369247788170534.26353953100055918.55660493423796",
+               "version" => "67369247788170534.26353953100055918.55660493423796" }] },
+          "java" =>
+          { "url" => "http://localhost:8889/cookbooks/java",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbooks/java/5664982062912610.52588194571203830.6215746262253",
+               "version" => "5664982062912610.52588194571203830.6215746262253" }] },
+          "jenkins" =>
+          { "url" => "http://localhost:8889/cookbooks/jenkins",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbooks/jenkins/69194928762630300.30177357398946006.269829039948647",
+               "version" => "69194928762630300.30177357398946006.269829039948647" }] },
+        }
+      end
+
+      def expect_policyfile_upload
+        expect(uploader).to receive(:data_bag_create)
+        expect(uploader).to receive(:data_bag_item_create)
+      end
+
+      it "ensures a data bag named 'policyfiles' exists" do
+        expect(http_client).to receive(:post).with("data", policyfiles_data_bag)
+        uploader.data_bag_create
+      end
+
+      it "does not error when the 'policyfiles' data bag exists" do
+        response = double("Net::HTTP response", code: "409")
+        error = Net::HTTPServerException.new("conflict", response)
+        expect(http_client).to receive(:post).with("data", { "name" => "policyfiles" }).and_raise(error)
+        expect { uploader.data_bag_create }.to_not raise_error
+      end
+
+      it "uploads the policyfile as a data bag item" do
+        response = double("Net::HTTP response", code: "404")
+        error = Net::HTTPServerException.new("Not Found", response)
+        expect(http_client).to receive(:put)
+          .with("data/policyfiles/example-unit-test", policyfile_as_data_bag_item)
+          .and_raise(error)
+        expect(http_client).to receive(:post)
+          .with("data/policyfiles", policyfile_as_data_bag_item)
+
+        uploader.data_bag_item_create
+      end
+
+      it "replaces an existing policyfile on the server if it exists" do
+        expect(http_client).to receive(:put)
+          .with("data/policyfiles/example-unit-test", policyfile_as_data_bag_item)
+        uploader.data_bag_item_create
+      end
+
+      it "creates the data bag and item to upload the policy" do
+        expect(http_client).to receive(:post).with("data", policyfiles_data_bag)
+        expect(http_client).to receive(:put)
+          .with("data/policyfiles/example-unit-test", policyfile_as_data_bag_item)
+        uploader.upload_policy
+      end
+
+      include_examples "uploading cookbooks"
+
+    end
+
+    context "when configured for policy document native mode" do
+
+      let(:policy_document_native_api) { true }
+
+      let(:list_cookbooks_url) { "cookbook_artifacts?num_versions=all" }
+
+      let(:existing_cookbook_on_remote) do
+        { "apt" =>
+          { "url" => "http://localhost:8889/cookbook_artifacts/apt",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbook_artifacts/apt/5f7045a8aeaf6ccda3b3594258df9ee982b3a023",
+               "identifier" => "5f7045a8aeaf6ccda3b3594258df9ee982b3a023" }] },
+          "build-essential" =>
+          { "url" => "http://localhost:8889/cookbook_artifacts/build-essential",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbook_artifacts/build-essential/571d8ebd02b296fe90b2e4d68754af7e8e185f28",
+               "identifier" => "571d8ebd02b296fe90b2e4d68754af7e8e185f28" }] },
+          "java" =>
+          { "url" => "http://localhost:8889/cookbook_artifacts/java",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbook_artifacts/java/9178a38ad3e3baa55b49c1b8d9f4bf6a43dbc358",
+               "identifier" => "9178a38ad3e3baa55b49c1b8d9f4bf6a43dbc358" }] },
+          "jenkins" =>
+          { "url" => "http://localhost:8889/cookbook_artifacts/jenkins",
+            "versions" =>
+            [{ "url" =>
+               "http://localhost:8889/cookbook_artifacts/jenkins/0be380429add00d189b4431059ac967a60052323",
+               "identifier" => "0be380429add00d189b4431059ac967a60052323" }] },
+        }
+      end
+      def expect_policyfile_upload
+        expect(http_client).to receive(:put)
+          .with("/policy_groups/unit-test/policies/example", policyfile_lock_data)
+      end
+
+      it "enables native document mode for policyfiles" do
+        expect(uploader.using_policy_document_native_api?).to be(true)
+      end
+
+      it "uploads the policyfile to the native API" do
+        expect(http_client).to receive(:put)
+          .with("/policy_groups/unit-test/policies/example", policyfile_lock_data)
+
+        uploader.upload_policy
+      end
+
+      include_examples "uploading cookbooks"
+
+    end
+
+  end
+
+end