Some minority fixes in test environment, new test and wrong placement…

… of debug message

dev/docker-compose.yaml

@@ -0,0 +1,11 @@
+version: '3.3'
+
+services:
+  test:
+    image: 'python:3.9'
+    volumes:
+      - ../:/workdir
+      - ./:/develop
+    command:
+    - /develop/run-tests.sh
+    - /workdir

dev/run-tests.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+set -e 
+
+echo "Entering directory $1"
+cd $1/
+
+apt-get update
+apt-get install -y $(cat tests/system-requirements.txt)
+pip install -r requirements.txt
+python setup.py install
+run-parts --exit-on-error --regex '^[0-9]+.*\.sh$' ./tests/

scripts/vault-certificate-deploy

@@ -359,7 +359,7 @@ if __name__ == '__main__':
     for cert_name in cert_list:
         base.pdeb("Retrieving secret " + cert_name, args.debug)
         secret = vault.read(vault_mount_point + "/" + cert_name)
-        base.pdeb("Secret: %s with keys %s" % (str(secret), str(secret.keys())), args.debug)
+
         if secret is not None:
             base.pdeb("Secret: %s with keys %s" % (str(secret), str(secret.keys())), args.debug)
             certificates.append((cert_name, secret))

tests/01-prepare-secrets.sh

@@ -58,6 +58,11 @@ cat > deploy3.conf <<EOF
 invalid-cert
 EOF
 
+echo "Prepair deploy config4"
+cat > deploy4.conf <<EOF
+_cert.that.not-exists
+EOF
+
 echo "Prepair client deploy"
 cat > client_cert.conf << EOF
 test1.test.intra

tests/13-deploy4-noexist.sh

@@ -0,0 +1,33 @@
+#!/bin/bash
+
+cat <<EOF
+=======================================
+Non existent cert DEPLOY (good to fail)
+---------------------------------------
+Check fail states and correct exitcodes
+for certs that non exists
+
+=======================================
+EOF
+
+if [[ -f ./vault.env ]] ; then
+  . ./vault.env
+else
+  echo "Unable to find vault.env file from previous step"
+  exit 1
+fi
+
+# Test fail deploy
+if $script -c ./script.conf --cert-list deploy4.conf ; then
+  echo "ERROR: Deploy success when certificate was bad." >&2
+  exit 1
+else
+  echo "It's OK to fail, looks good :)"
+fi
+
+if [[ $(find $cert_destination -type f -name '*.crt' | wc -l) -gt 0 ]] ; then
+  echo "ERROR: There should be no certificates in this step" >&2
+  exit 1
+else
+  echo "Success, no certificates left in this step"
+fi