/* * This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ /* * Copyright (c) 2016, Joyent, Inc. */ /* * Integration tests for `triton fwrules ...` */ var h = require('./helpers'); var f = require('util').format; var os = require('os'); var test = require('tape'); // --- Globals var DESC = 'This rule was created by node-triton tests'; var RULE = 'FROM any TO vm $id ALLOW tcp PORT 80'; var RULE2 = 'FROM any TO vm $id BLOCK tcp port 25'; var INST; var ID; var INST_ALIAS = f('nodetritontest-fwrules-%s', os.hostname()); var OPTS = { skip: !h.CONFIG.allowWriteActions }; // --- Tests if (OPTS.skip) { console.error('** skipping %s tests', __filename); console.error('** set "allowWriteActions" in test config to enable'); } test('triton fwrule', OPTS, function (tt) { h.printConfig(tt); tt.test(' cleanup existing inst with alias ' + INST_ALIAS, function (t) { h.deleteTestInst(t, INST_ALIAS, function (err) { t.ifErr(err); t.end(); }); }); tt.test(' setup: triton create', function (t) { h.createTestInst(t, INST_ALIAS, function onInst(err2, instId) { if (h.ifErr(t, err2, 'triton instance create')) return t.end(); INST = instId; RULE = RULE.replace('$id', INST); RULE2 = RULE2.replace('$id', INST); t.end(); }); }); tt.test(' triton fwrule create', function (t) { var cmd = f('fwrule create -d "%s" "%s"', DESC, RULE); h.triton(cmd, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule create')) return t.end(); var match = stdout.match('Created firewall rule (.+)'); t.ok(match, 'fwrule made'); var id = match[1]; t.ok(id); ID = id.match(/^(.+?)-/)[1]; // convert to short ID t.end(); }); }); tt.test(' triton fwrule get', function (t) { var cmd = 'fwrule get ' + ID; h.triton(cmd, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule get')) return t.end(); var obj = JSON.parse(stdout); t.equal(obj.rule, RULE, 'fwrule rule is correct'); t.equal(obj.description, DESC, 'fwrule was properly created'); t.equal(obj.enabled, false, 'fwrule enabled defaults to false'); t.end(); }); }); tt.test(' triton fwrule enable', function (t) { var cmd = 'fwrule enable ' + ID; h.triton(cmd, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule enable')) return t.end(); t.ok(stdout.match('Enabled firewall rule ' + ID)); t.end(); }); }); tt.test(' triton fwrule disable', function (t) { var cmd = 'fwrule disable ' + ID; h.triton(cmd, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule disable')) return t.end(); t.ok(stdout.match('Disabled firewall rule ' + ID)); t.end(); }); }); tt.test(' triton fwrule update', function (t) { var cmd = 'fwrule update rule="' + RULE2 + '" ' + ID; h.triton(cmd, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule disable')) return t.end(); t.ok(stdout.match('Updated firewall rule ' + ID + ' \\(fields: rule\\)')); t.end(); }); }); tt.test(' triton fwrule list', function (t) { h.triton('fwrule list -l', function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule list')) return t.end(); var rules = stdout.split('\n'); t.ok(rules[0].match(/ID\s+ENABLED\s+GLOBAL\s+RULE\s+DESCRIPTION/)); rules.shift(); t.ok(rules.length >= 1, 'triton fwrule list expected fwrule num'); var testRules = rules.filter(function (rule) { return rule.match(ID); }); t.equal(testRules.length, 1, 'triton fwrule list test rule found'); t.end(); }); }); tt.test(' triton fwrule instances', function (t) { h.triton('fwrule instances -l ' + ID, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule instances')) return t.end(); var machines = stdout.split('\n').filter(function (machine) { return machine !== ''; }); t.ok(machines[0].match(/ID\s+NAME\s+IMG\s+BRAND/)); machines.shift(); if (!INST) return t.end(); t.equal(machines.length, 1, 'triton fwrule instances expected ' + 'num machines'); var testMachines = machines.filter(function (machine) { return machine.match(INST); }); t.equal(testMachines.length, 1, 'triton fwrule instances test ' + 'machine found'); t.end(); }); }); tt.test(' triton instance fwrules', function (t) { h.triton('instance fwrules -l ' + INST, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule list')) return t.end(); var rules = stdout.split('\n'); t.ok(rules[0].match(/ID\s+ENABLED\s+GLOBAL\s+RULE\s+DESCRIPTION/)); rules.shift(); t.ok(rules.length >= 1, 'triton fwrule list expected fwrule num'); var testRules = rules.filter(function (rule) { return rule.match(ID); }); t.equal(testRules.length, 1, 'triton fwrule list test rule found'); t.end(); }); }); tt.test(' triton fwrule delete', function (t) { var cmd = 'fwrule delete ' + ID + ' --force'; h.triton(cmd, function (err, stdout, stderr) { if (h.ifErr(t, err, 'triton fwrule delete')) return t.end(); t.ok(stdout.match('Deleted rule ' + ID + ''), 'rule deleted'); t.end(); }); }); /* * Use a timeout, because '-w' on delete doesn't have a way to know if the * attempt failed or if it is just taking a really long time. */ tt.test(' cleanup: triton rm INST', {timeout: 10 * 60 * 1000}, function (t) { h.deleteTestInst(t, INST_ALIAS, function () { t.end(); }); }); });