kitchen.yml

# NOTE: This test-kitchen file contains ERB code to cut-down on boilerplate;
# YAML linters will complain!
# yamllint disable
# spell-checker: disable
<%
require 'open3'
require 'json'

# Parse the outputs of the test harness
tf_output, rc = Open3.capture2('terraform -chdir=test/setup output -json')
if rc != 0
  abort 'Failed to capture Terraform output from test/setup'
end
harness_outputs = JSON.parse(tf_output).map { |k,v| [k, v['value']] }.to_h

def tf_client(version)
  full_version, rc = Open3.capture2("asdf latest terraform #{version}")
  if rc != 0
    abort "Failed to determine latest terraform version matching #{version}"
  end
  client, rc = Open3.capture2("asdf where terraform #{full_version.chomp}")
  if rc != 0
    abort "Failed to locate installed terraform #{full_version.chomp} command"
  end
  "#{client.chomp}/bin/terraform"
end

def hash_to_input_var(params)
  "{#{params.map do |k, v|
        case v
        when nil
          "\\\"#{k}\\\"=null"
        when Hash
          "\\\"#{k}\\\"=#{hash_to_input_var(v)}"
        when Array
          "\\\"#{k}\\\"=[#{v.map do |e|
               case e
               when nil
                "null"
               when Hash
                 hash_to_input_var(e)
               when String
                 "\\\"#{e}\\\""
               else
                 "#{e}"
               end
             end.join(',')}]"
        when String
          "\\\"#{k}\\\"=\\\"#{v}\\\""
        else
          "\\\"#{k}\\\"=#{v}"
        end
      end.join(',')}}"
end

tf_clients = [0.14, 0.15, 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8].map{ |v| ["tf#{v}".sub(/\W/, "-"), tf_client(v)]}.to_h
regional_replication = harness_outputs['replication'].reject{|k,_| k == 'global'}
%>
---
driver:
  name: terraform
  verify_version: true
  variables:
    project_id: <%= harness_outputs['project_id'] %>

transport:
  name: terraform
  command_timeout: 60

provisioner:
  name: terraform

verifier:
  name: terraform
  color: true
  systems:
    - name: secrets
      backend: gcp
      profile_locations:
        - test/profiles/secrets

platforms:
<% tf_clients.each do |k,v| %>
  - name: <%= k %>
    transport:
      client: <%= v %>
    driver:
      variables:
        prefix: <%= "#{harness_outputs['prefix']}-#{k}" %>
<% end %>

suites:
  - name: root-minimal
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-minimal
        secret: terribleS3cr3t
  - name: root-all
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-all
        accessors: '[\"serviceAccount:<%= harness_outputs['service_account_email'] %>\"]'
        annotations: '<%= hash_to_input_var(harness_outputs['annotations']) %>'
        labels: '<%= hash_to_input_var(harness_outputs['labels']) %>'
        auto_replication_kms_key_name: '<%= harness_outputs['replication']['global']['kms_key_name'] %>'
        replication: '<%= hash_to_input_var(regional_replication) %>'
        secret: terribleS3cr3t
        topics: '[\"<%= harness_outputs['topic'] %>\"]'
        ttl_secs: '120'
  - name: root-secret-null
    transport:
      root_module_directory: test/fixtures/root-secret-null
    driver:
      variables:
        test_name: root-secret-null
  - name: root-empty-secret
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-empty-secret
        secret: ''
  - name: root-replication
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-replication
        replication: '<%= hash_to_input_var(regional_replication) %>'
        secret: terribleS3cr3t
  - name: root-replication-values-null
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-replication-values-null
        replication: '<%= hash_to_input_var(regional_replication.map{|k,_| [k, nil]}.to_h) %>'
        secret: terribleS3cr3t
  - name: root-replication-keys-null
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-replication-keys-null
        replication: '<%= hash_to_input_var(regional_replication.map{|k,_| [k, {'kms_key_name' => nil}]}.to_h) %>'
        secret: terribleS3cr3t
  - name: root-replication-keys-empty
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-replication-keys-empty
        replication: '<%= hash_to_input_var(regional_replication.map{|k,_| [k, {'kms_key_name' => ''}]}.to_h) %>'
        secret: terribleS3cr3t
  - name: root-replication-null
    transport:
      root_module_directory: test/fixtures/root-replication-null
    driver:
      variables:
        test_name: root-replication-null
        secret: terribleS3cr3t
  - name: root-auto-replication-key
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-auto-replication-key
        secret: terribleS3cr3t
        auto_replication_kms_key_name: '<%= harness_outputs['replication']['global']['kms_key_name'] %>'
  - name: root-auto-replication-null
    transport:
      root_module_directory: test/fixtures/root-auto-replication-null
    driver:
      variables:
        test_name: root-auto-replication-null
        secret: terribleS3cr3t
  - name: root-topics
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-topics
        secret: terribleS3cr3t
        topics: '[\"<%= harness_outputs['topic'] %>\"]'
  - name: root-topics-null
    transport:
      root_module_directory: test/fixtures/root-topics-null
    driver:
      variables:
        test_name: root-topics-null
        secret: terribleS3cr3t
  - name: root-accessors
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-accessors
        secret: terribleS3cr3t
        accessors: '[\"serviceAccount:<%= harness_outputs['service_account_email'] %>\"]'
  - name: root-accessors-null
    transport:
      root_module_directory: test/fixtures/root-accessors-null
    driver:
      variables:
        test_name: root-accessors-null
        secret: terribleS3cr3t
  - name: root-annotations
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-annotations
        secret: terribleS3cr3t
        annotations: '<%= hash_to_input_var({'test.case' => 'root-accessors', 'long-key' => '01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789'}) %>'
  - name: root-annotations-null
    transport:
      root_module_directory: test/fixtures/root-annotations-null
    driver:
      variables:
        test_name: root-annotations-null
        secret: terribleS3cr3t
  - name: root-labels
    transport:
      root_module_directory: test/fixtures/root
    driver:
      variables:
        test_name: root-labels
        secret: terribleS3cr3t
        labels: '<%= hash_to_input_var({'test_case' => 'root-accessors'}) %>'
  - name: root-labels-null
    transport:
      root_module_directory: test/fixtures/root-labels-null
    driver:
      variables:
        test_name: root-labels-null
        secret: terribleS3cr3t
  - name: example-accessors
    transport:
      root_module_directory: test/fixtures/examples/accessors
    driver:
      variables:
        test_name: example-accessors
        accessors: '[\"serviceAccount:<%= harness_outputs['service_account_email'] %>\"]'
        secret: terribleS3cr3t
  - name: example-all-options
    transport:
      root_module_directory: test/fixtures/examples/all-options
    driver:
      variables:
        test_name: example-all-options
        accessors: '[\"serviceAccount:<%= harness_outputs['service_account_email'] %>\"]'
        annotations: '<%= hash_to_input_var(harness_outputs['annotations']) %>'
        labels: '<%= hash_to_input_var(harness_outputs['labels']) %>'
        replication: '<%= hash_to_input_var(regional_replication) %>'
        secret: terribleS3cr3t
        topics: '[\"<%= harness_outputs['topic'] %>\"]'
        ttl_secs: '120'
  - name: example-simple
    transport:
      root_module_directory: test/fixtures/examples/simple
    driver:
      variables:
        test_name: example-simple
        secret: terribleS3cr3t
  - name: example-with-random-provider
    transport:
      root_module_directory: test/fixtures/examples/with-random-provider
    driver:
      variables:
        test_name: example-with-random-provider
        accessors: '[\"serviceAccount:<%= harness_outputs['service_account_email'] %>\"]'
  - name: example-user-managed-replication
    transport:
      root_module_directory: test/fixtures/examples/user-managed-replication
    driver:
      variables:
        test_name: example-user-managed-replication
        secret: terribleS3cr3t
        replication: '<%= hash_to_input_var(regional_replication.map{|k,_| [k, nil]}.to_h) %>'
  - name: example-user-managed-replication-accessors
    transport:
      root_module_directory: test/fixtures/examples/user-managed-replication-accessors
    driver:
      variables:
        test_name: example-user-managed-replication-accessors
        accessors: '[\"serviceAccount:<%= harness_outputs['service_account_email'] %>\"]'
        secret: terribleS3cr3t
        replication: '<%= hash_to_input_var(regional_replication.map{|k,_| [k, nil]}.to_h) %>'
  - name: example-user-managed-replication-with-keys
    transport:
      root_module_directory: test/fixtures/examples/user-managed-replication-with-keys
    driver:
      variables:
        test_name: example-user-managed-replication-with-keys
        replication: '<%= hash_to_input_var(regional_replication) %>'
        secret: terribleS3cr3t
  - name: example-empty-secret-value
    transport:
      root_module_directory: test/fixtures/examples/empty-secret-value
    driver:
      variables:
        test_name: example-empty-secret-value
  - name: verify-issue-51
    excludes:
      - tf0-14
    transport:
      root_module_directory: test/fixtures/issue-51
    driver:
      variables:
        test_name: issue-51
        secret: terribleS3cr3t
  - name: example-auto-replication-with-key
    transport:
      root_module_directory: test/fixtures/examples/auto-replication-with-key
    driver:
      variables:
        test_name: example-auto-replication-with-key
        auto_replication_kms_key_name: '<%= harness_outputs['replication']['global']['kms_key_name'] %>'
        secret: terribleS3cr3t
  - name: example-pubsub
    transport:
      root_module_directory: test/fixtures/examples/pubsub
    driver:
      variables:
        test_name: example-pubsub
        secret: terribleS3cr3t
        topics: '[\"<%= harness_outputs['topic'] %>\"]'
  - name: example-ttl
    transport:
      root_module_directory: test/fixtures/examples/ttl
    driver:
      variables:
        test_name: example-ttl
        secret: terribleS3cr3t
        ttl_secs: '120'