forjar 1.12.0

Rust-native Infrastructure as Code — bare-metal first, BLAKE3 state, provenance tracing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

//! FJ-2723 (PMAT-199): a selector matching nothing is an error, not a no-op.
//!
//! `forjar apply -r <typo>` printed `0 converged, 0 unchanged` and exited 0.
//! Every signal said success while nothing had been applied. In CI the exit
//! code is often the only thing read, so a typo'd targeted apply looked like a
//! completed deploy.

use std::path::Path;

fn cfg(dir: &Path) -> std::path::PathBuf {
    let p = dir.join("forjar.yaml");
    std::fs::write(
        &p,
        r#"
version: "1.0"
name: sel
machines:
  local:
    hostname: localhost
    addr: localhost
resources:
  real-one:
    type: file
    machine: local
    path: /tmp/forjar-selector-guard.txt
    content: hi
    tags: [live]
    resource_group: alpha
"#,
    )
    .unwrap();
    p
}

fn check(
    file: &Path,
    resource: Option<&str>,
    tag: Option<&str>,
    group: Option<&str>,
) -> Result<(), String> {
    let config = super::helpers::parse_and_validate(file).expect("fixture parses");
    super::apply_selection::reject_empty_selection(&config, resource, tag, group)
}

#[test]
fn unknown_resource_selector_is_an_error() {
    let d = tempfile::tempdir().unwrap();
    let f = cfg(d.path());
    let err = check(&f, Some("no-such-resource"), None, None)
        .expect_err("a typo'd -r must not report success");
    assert!(err.contains("no-such-resource"), "{err}");
    assert!(
        err.contains("real-one"),
        "the error should name what IS available: {err}"
    );
}

#[test]
fn unknown_tag_selector_is_an_error() {
    let d = tempfile::tempdir().unwrap();
    let f = cfg(d.path());
    let err = check(&f, None, Some("no-such-tag"), None).expect_err("typo'd -t must fail");
    assert!(err.contains("no-such-tag"), "{err}");
}

#[test]
fn unknown_group_selector_is_an_error() {
    let d = tempfile::tempdir().unwrap();
    let f = cfg(d.path());
    let err = check(&f, None, None, Some("no-such-group")).expect_err("typo'd -g must fail");
    assert!(err.contains("no-such-group"), "{err}");
}

#[test]
fn selectors_that_match_are_accepted() {
    // The guard must not reject valid invocations — that would be worse than
    // the bug it fixes.
    let d = tempfile::tempdir().unwrap();
    let f = cfg(d.path());
    for (r, t, g) in [
        (Some("real-one"), None, None),
        (None, Some("live"), None),
        (None, None, Some("alpha")),
        (None, None, None),
    ] {
        let out = check(&f, r, t, g);
        assert!(
            out.is_ok(),
            "valid selector ({r:?}, {t:?}, {g:?}) was rejected: {out:?}"
        );
    }
}