1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
# Ansible module to manage CheckPoint Firewall (c) 2019
#
# Ansible is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Ansible is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Ansible. If not, see <http://www.gnu.org/licenses/>.
#
from __future__ import absolute_import, division, print_function
__metaclass__ = type
import pytest
from units.modules.utils import set_module_args, exit_json, fail_json, AnsibleExitJson
from ansible.module_utils import basic
from ansible.modules.network.check_point import cp_mgmt_vpn_community_star
OBJECT = {
"name": "New_VPN_Community_Star_1",
"center_gateways": [
"Second_Security_Gateway"
],
"encryption_method": "prefer ikev2 but support ikev1",
"encryption_suite": "custom",
"ike_phase_1": {
"data_integrity": "sha1",
"encryption_algorithm": "aes-128",
"diffie_hellman_group": "group-1"
},
"ike_phase_2": {
"data_integrity": "aes-xcbc",
"encryption_algorithm": "aes-gcm-128"
}
}
CREATE_PAYLOAD = {
"name": "New_VPN_Community_Star_1",
"center_gateways": [
"Second_Security_Gateway"
],
"encryption_method": "prefer ikev2 but support ikev1",
"encryption_suite": "custom",
"ike_phase_1": {
"data_integrity": "sha1",
"encryption_algorithm": "aes-128",
"diffie_hellman_group": "group-1"
},
"ike_phase_2": {
"data_integrity": "aes-xcbc",
"encryption_algorithm": "aes-gcm-128"
}
}
UPDATE_PAYLOAD = {
"name": "New_VPN_Community_Star_1",
"encryption_method": "ikev2 only",
"encryption_suite": "custom",
"ike_phase_1": {
"data_integrity": "sha1",
"encryption_algorithm": "aes-128",
"diffie_hellman_group": "group-1"
},
"ike_phase_2": {
"data_integrity": "aes-xcbc",
"encryption_algorithm": "aes-gcm-128"
}
}
OBJECT_AFTER_UPDATE = UPDATE_PAYLOAD
DELETE_PAYLOAD = {
"name": "New_VPN_Community_Star_1",
"state": "absent"
}
function_path = 'ansible.modules.network.check_point.cp_mgmt_vpn_community_star.api_call'
api_call_object = 'vpn-community-star'
class TestCheckpointVpnCommunityStar(object):
module = cp_mgmt_vpn_community_star
@pytest.fixture(autouse=True)
def module_mock(self, mocker):
return mocker.patch.multiple(basic.AnsibleModule, exit_json=exit_json, fail_json=fail_json)
@pytest.fixture
def connection_mock(self, mocker):
connection_class_mock = mocker.patch('ansible.module_utils.network.checkpoint.checkpoint.Connection')
return connection_class_mock.return_value
def test_create(self, mocker, connection_mock):
mock_function = mocker.patch(function_path)
mock_function.return_value = {'changed': True, api_call_object: OBJECT}
result = self._run_module(CREATE_PAYLOAD)
assert result['changed']
assert OBJECT.items() == result[api_call_object].items()
def test_create_idempotent(self, mocker, connection_mock):
mock_function = mocker.patch(function_path)
mock_function.return_value = {'changed': False, api_call_object: OBJECT}
result = self._run_module(CREATE_PAYLOAD)
assert not result['changed']
def test_update(self, mocker, connection_mock):
mock_function = mocker.patch(function_path)
mock_function.return_value = {'changed': True, api_call_object: OBJECT_AFTER_UPDATE}
result = self._run_module(UPDATE_PAYLOAD)
assert result['changed']
assert OBJECT_AFTER_UPDATE.items() == result[api_call_object].items()
def test_update_idempotent(self, mocker, connection_mock):
mock_function = mocker.patch(function_path)
mock_function.return_value = {'changed': False, api_call_object: OBJECT_AFTER_UPDATE}
result = self._run_module(UPDATE_PAYLOAD)
assert not result['changed']
def test_delete(self, mocker, connection_mock):
mock_function = mocker.patch(function_path)
mock_function.return_value = {'changed': True}
result = self._run_module(DELETE_PAYLOAD)
assert result['changed']
def test_delete_idempotent(self, mocker, connection_mock):
mock_function = mocker.patch(function_path)
mock_function.return_value = {'changed': False}
result = self._run_module(DELETE_PAYLOAD)
assert not result['changed']
def _run_module(self, module_args):
set_module_args(module_args)
with pytest.raises(AnsibleExitJson) as ex:
self.module.main()
return ex.value.args[0]
|
