cmonson_2ndwatch_awspec 0.85.3

data/lib/awspec/matcher/belong_to_alb.rb

@@ -0,0 +1,8 @@
+RSpec::Matchers.define :belong_to_alb do |alb_arn|
+  match do |type|
+    return true if type.load_balancer_arns.include?(alb_arn)
+    ret = type.find_alb(alb_arn)
+    return false unless ret
+    type.load_balancer_arns.include?(ret.load_balancer_arn)
+  end
+end

data/lib/awspec/matcher/belong_to_cache_subnet_group.rb

@@ -0,0 +1,5 @@
+RSpec::Matchers.define :belong_to_cache_subnet_group do |cache_subnet_group_name|
+  match do |type|
+    return true if type.resource_via_client[:cache_subnet_group_name] == cache_subnet_group_name
+  end
+end

data/lib/awspec/matcher/belong_to_db_subnet_group.rb

@@ -0,0 +1,5 @@
+RSpec::Matchers.define :belong_to_db_subnet_group do |db_subnet_group_name|
+  match do |type|
+    return true if type.resource_via_client[:db_subnet_group][:db_subnet_group_name] == db_subnet_group_name
+  end
+end

data/lib/awspec/matcher/belong_to_domain.rb

@@ -0,0 +1,5 @@
+RSpec::Matchers.define :belong_to_domain do |domain|
+  match do |type|
+    return true if type.resource_via_client.last[:domain] == domain
+  end
+end

data/lib/awspec/matcher/belong_to_iam_group.rb

@@ -0,0 +1,8 @@
+RSpec::Matchers.define :belong_to_iam_group do |group_id|
+  match do |type|
+    groups = type.select_iam_group_by_user_name(type.resource_via_client[:user_name])
+    groups.find do |group|
+      group.group_id == group_id || group.group_name == group_id
+    end
+  end
+end

data/lib/awspec/matcher/belong_to_metric.rb

@@ -0,0 +1,13 @@
+RSpec::Matchers.define :belong_to_metric do |name|
+  match do |type|
+    if @namespace
+      type.namespace == @namespace && type.metric_name == name
+    else
+      type.metric_name == name
+    end
+  end
+
+  chain :namespace do |namespace|
+    @namespace = namespace
+  end
+end

data/lib/awspec/matcher/belong_to_replication_group.rb

@@ -0,0 +1,6 @@
+RSpec::Matchers.define :belong_to_replication_group do |group_id|
+  match do |type|
+    # ElastiCache
+    type.resource_via_client[:replication_group_id] == group_id
+  end
+end

data/lib/awspec/matcher/belong_to_subnet.rb

@@ -0,0 +1,31 @@
+RSpec::Matchers.define :belong_to_subnet do |subnet_id|
+  match do |type|
+    # EC2, NetworkInterface
+    if type.instance_of?(Awspec::Type::Ec2) || type.instance_of?(Awspec::Type::NetworkInterface)
+      return true if type.subnet_id == subnet_id
+      subnet = type.find_subnet(subnet_id)
+      return false unless subnet
+      return subnet[:subnet_id] == type.subnet_id
+    end
+
+    # RDS
+    if type.instance_of?(Awspec::Type::Rds)
+      subnets = type.resource_via_client[:db_subnet_group][:subnets]
+      ret = subnets.find do |s|
+        s[:subnet_identifier] == subnet_id
+      end
+
+      return ret[:subnet_availability_zone][:name] == type.availability_zone if ret
+
+      res = type.ec2_client.describe_subnets({
+                                               filters: [{ name: 'tag:Name', values: [subnet_id] }]
+                                             })
+      return false unless res
+      ret = subnets.find do |s|
+        s[:subnet_identifier] == res[:subnets][0][:subnet_id]
+      end
+
+      return ret[:subnet_availability_zone][:name] == type.availability_zone if ret
+    end
+  end
+end

data/lib/awspec/matcher/belong_to_vpc.rb

@@ -0,0 +1,8 @@
+RSpec::Matchers.define :belong_to_vpc do |vpc_id|
+  match do |type|
+    return true if type.vpc_id == vpc_id
+    ret = type.find_vpc(vpc_id)
+    return false unless ret
+    ret[:vpc_id] == type.vpc_id
+  end
+end

data/lib/awspec/matcher/have_attribute_definition.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_attribute_definition do |attribute_name|
+  match do |attribute|
+    attribute.has_attribute_definition?(attribute_name, @attribute_type)
+  end
+
+  chain :attribute_type do |type|
+    @attribute_type = type
+  end
+end

data/lib/awspec/matcher/have_inline_policy.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_inline_policy do |policy_name|
+  match do |iam_type|
+    iam_type.has_inline_policy?(policy_name, @document)
+  end
+
+  chain :policy_document do |document|
+    @document = document
+  end
+end

data/lib/awspec/matcher/have_key_policy.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_key_policy do |policy_name|
+  match do |key_type|
+    key_type.has_key_policy?(policy_name, @document)
+  end
+
+  chain :policy_document do |document|
+    @document = document
+  end
+end

data/lib/awspec/matcher/have_key_schema.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_key_schema do |attribute_name|
+  match do |attribute|
+    attribute.has_key_schema?(attribute_name, @key_type)
+  end
+
+  chain :key_type do |type|
+    @key_type = type
+  end
+end

data/lib/awspec/matcher/have_network_interface.rb

@@ -0,0 +1,15 @@
+RSpec::Matchers.define :have_network_interface do |network_interface_id|
+  match do |type|
+    type.has_network_interface?(network_interface_id, @device_index)
+  end
+
+  chain :device_index do |device_index|
+    @device_index = device_index
+  end
+
+  (0..10).each do |idx|
+    chain "as_eth#{idx}".to_sym do
+      @device_index = idx
+    end
+  end
+end

data/lib/awspec/matcher/have_origin.rb

@@ -0,0 +1,21 @@
+RSpec::Matchers.define :have_origin do |origin_id|
+  match do |cloudfront_distribution|
+    cloudfront_distribution.has_origin?(origin_id,
+                                        domain_name: @domain_name,
+                                        origin_path: @origin_path,
+                                        origin_access_identity: @origin_access_identity
+                                       )
+  end
+
+  chain :domain_name do |domain_name|
+    @domain_name = domain_name
+  end
+
+  chain :origin_path do |origin_path|
+    @origin_path = origin_path
+  end
+
+  chain :origin_access_identity do |origin_access_identity|
+    @origin_access_identity = origin_access_identity
+  end
+end

data/lib/awspec/matcher/have_private_ip_address.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_private_ip_address do |ip_address|
+  match do |eni|
+    eni.has_private_ip_address?(ip_address, @primary)
+  end
+
+  chain :primary do
+    @primary = true
+  end
+end

data/lib/awspec/matcher/have_record_set.rb

@@ -0,0 +1,32 @@
+RSpec::Matchers.define :have_record_set do |name|
+  match do |hosted_zone|
+    hosted_zone.has_record_set?(name, @type, @value, @options)
+  end
+
+  %w(soa a txt ns cname mx ptr srv spf aaaa).each do |type|
+    chain type do |value|
+      @type = type
+      @value = value
+      @options = {} if @options.nil?
+    end
+  end
+
+  chain :alias do |dns_name, hosted_zone_id|
+    @type = 'a'
+    @options = {} if @options.nil?
+    @options[:alias_dns_name] = dns_name
+    @options[:alias_hosted_zone_id] = hosted_zone_id
+  end
+
+  chain :aaaa_alias do |dns_name, hosted_zone_id|
+    @type = 'aaaa'
+    @options = {} if @options.nil?
+    @options[:alias_dns_name] = dns_name
+    @options[:alias_hosted_zone_id] = hosted_zone_id
+  end
+
+  chain :ttl do |ttl|
+    @options = {} if @options.nil?
+    @options[:ttl] = ttl
+  end
+end

data/lib/awspec/matcher/have_route.rb

@@ -0,0 +1,36 @@
+require 'ipaddr'
+
+RSpec::Matchers.define :have_route do |destination|
+  match do |route_table|
+    if !is_ipaddr?(destination) && @use_destination # for deprecated usage
+      @gateway_id = destination
+    else
+      @destination = destination
+    end
+    route_table.has_route?(@destination, @gateway_id, @instance_id, @vpc_peering_connection_id, @nat_gateway_id)
+  end
+
+  chain :target do |target|
+    @gateway_id = target[:gateway]
+    @instance_id = target[:instance]
+    @vpc_peering_connection_id = target[:vpc_peering_connection]
+    @nat_gateway_id = target[:nat]
+  end
+
+  chain :destination do |dest|
+    # rubocop:disable Metrics/LineLength
+    puts ''
+    warn Color.on_red(Color.white('!!! route_table destination is deprecated. see https://github.com/k1LoW/awspec/pull/65 !!!'))
+    # rubocop:enable Metrics/LineLength
+    @use_destination = true
+    @destination = dest
+  end
+
+  private
+
+  def is_ipaddr?(str)
+    IPAddr.new(str)
+  rescue
+    false
+  end
+end

data/lib/awspec/matcher/have_rule.rb

@@ -0,0 +1,34 @@
+RSpec::Matchers.define :have_rule do |rule_id|
+  match do |type|
+    return type.has_rule?(rule_id, @priority, @action) if type.instance_of?(Awspec::Type::WafWebAcl)
+    type.has_rule?(rule_id, @priority, @conditions, @actions) if type.instance_of?(Awspec::Type::AlbListener)
+  end
+
+  chain :priority do |priority|
+    @priority = priority
+  end
+
+  chain :order do |priority|
+    @priority = priority
+  end
+
+  chain :action do |action|
+    @action = action
+  end
+
+  chain :conditions do |conditions|
+    @conditions = conditions
+  end
+
+  chain :actions do |actions|
+    @actions = actions
+  end
+
+  chain :if do |conditions|
+    @conditions = conditions
+  end
+
+  chain :then do |actions|
+    @actions = actions
+  end
+end

data/lib/awspec/matcher/have_subscription_filter.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_subscription_filter do |filter_name|
+  match do |log_group_name|
+    log_group_name.has_subscription_filter?(filter_name, @pattern)
+  end
+
+  chain :filter_pattern do |pattern|
+    @pattern = pattern
+  end
+end

data/lib/awspec/matcher/have_tag.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :have_tag do |key|
+  match do |type|
+    type.has_tag?(key, @value)
+  end
+
+  chain :value do |val|
+    @value = val
+  end
+end

data/lib/awspec/resource_reader.rb

@@ -0,0 +1,54 @@
+module Awspec
+  module BlackListForwardable
+    class CalledMethodInBlackList < StandardError
+    end
+
+    def method_missing_via_black_list(name, delegate_to: nil)
+      raise ArguementError, 'delegate_to: must be specified' unless delegate_to
+      if match_black_list?(name) && !match_white_list?(name)
+        raise CalledMethodInBlackList, "Method call #{name.inspect} is black-listed"
+      end
+      attr = delegate_to.send(name)
+      case attr
+      when Aws::Resources::Resource
+        ResourceReader.new(attr)
+      else
+        attr
+      end
+    end
+
+    private
+
+    BLACK_LIST_RE = /
+      clear|
+      create|delete|put|update|add|
+      attach|detach|
+      reboot|start|stop|terminate|
+      modify|reset|replace|
+      authorize|revoke|
+      deregister|enable_|remove
+    /ix
+
+    def match_black_list?(name)
+      BLACK_LIST_RE =~ name
+    end
+
+    WHITE_LIST_RE = /password_reset_required|attached_policies/ix
+
+    def match_white_list?(name)
+      WHITE_LIST_RE =~ name
+    end
+  end
+
+  class ResourceReader
+    include BlackListForwardable
+
+    def initialize(resource)
+      @resource_via_client = resource
+    end
+
+    def method_missing(name)
+      method_missing_via_black_list(name, delegate_to: @resource_via_client)
+    end
+  end
+end

data/lib/awspec/setup.rb

@@ -0,0 +1,84 @@
+require 'fileutils'
+require 'yaml'
+
+module Awspec
+  class Setup
+    def self.run
+      generate_spec_helper
+      generate_rakefile
+      generate_dotgitignore
+      generate_dotrspec
+    end
+
+    def self.generate_spec_helper
+      content = <<-'EOF'
+require 'awspec'
+Awsecrets.load(secrets_path: File.expand_path('./secrets.yml', File.dirname(__FILE__)))
+EOF
+      dir = 'spec'
+      if File.exist? dir
+        unless File.directory? dir
+          $stderr.puts '!! #{dir} already exists and is not a directory'
+        end
+      else
+        FileUtils.mkdir dir
+        puts " + #{dir}/"
+      end
+
+      if File.exist? 'spec/spec_helper.rb'
+        $stderr.puts '!! spec/spec_helper.rb already exists'
+      else
+        File.open('spec/spec_helper.rb', 'w') do |f|
+          f.puts content
+        end
+        puts ' + spec/spec_helper.rb'
+      end
+    end
+
+    def self.generate_rakefile
+      content = <<-'EOF'
+require 'rspec/core/rake_task'
+RSpec::Core::RakeTask.new('spec')
+task :default => :spec
+EOF
+
+      if File.exist? 'Rakefile'
+        $stderr.puts '!! Rakefile already exists'
+      else
+        File.open('Rakefile', 'w') do |f|
+          f.puts content
+        end
+        puts ' + Rakefile'
+      end
+    end
+
+    def self.generate_dotgitignore
+      content = <<-'EOF'
+secrets.yml
+EOF
+      if File.exist? 'spec/.gitignore'
+        $stderr.puts '!! spec/.gitignore already exists'
+      else
+        File.open('spec/.gitignore', 'w') do |f|
+          f.puts content
+        end
+        puts ' + spec/.gitignore'
+      end
+    end
+
+    def self.generate_dotrspec
+      content = <<-'EOF'
+--color
+--format documentation
+EOF
+      if File.exist? '.rspec'
+        $stderr.puts '!! .rspec already exists'
+      else
+        File.open('.rspec', 'w') do |f|
+          f.puts content
+        end
+        puts ' + .rspec'
+      end
+    end
+  end
+end