safcm: forbid syncing groups which depend on "detected" groups

[safcm/safcm.git] / cmd / safcm / config / groups_test.go

diff --git a/cmd/safcm/config/groups_test.go b/cmd/safcm/config/groups_test.go
index 9c0acda892585577510a26d3eab5640694fecfb3..57176079bc0782ebfc0a76fb2f59bc84d0a27391 100644 (file)
--- a/cmd/safcm/config/groups_test.go
+++ b/cmd/safcm/config/groups_test.go
@@ -77,6 +77,12 @@ func TestLoadGroups(t *testing.T) {
                                "group2:remove": {
                                        "remove",
                                },
+                               "group3": {
+                                       "host1.example.org",
+                               },
+                               "group3:remove": {
+                                       "host2",
+                               },
                                "all_except_some": {
                                        "all",
                                },
@@ -233,6 +239,7 @@ func TestResolveHostGroups(t *testing.T) {
                        []string{
                                "all",
                                "group",
+                               "group3",
                                "host1.example.org",
                                "remove",
                        },
@@ -282,6 +289,7 @@ func TestResolveHostGroups(t *testing.T) {
                        []string{
                                "all",
                                "detected_mips",
+                               "group3",
                                "host1.example.org",
                                "remove",
                        },
@@ -312,3 +320,146 @@ func TestResolveHostGroups(t *testing.T) {
                })
        }
 }
+
+func TestTransitivelyDetectedGroups(t *testing.T) {
+       tests := []struct {
+               name   string
+               groups map[string][]string
+               exp    []string
+       }{
+
+               {
+                       "no detected",
+                       map[string][]string{
+                               "group-a": {
+                                       "a",
+                                       "b",
+                                       "group-b",
+                               },
+                               "group-a:remove": {
+                                       "d",
+                               },
+                               "group-b": {
+                                       "c",
+                                       "d",
+                               },
+                       },
+                       nil,
+               },
+
+               {
+                       "detected as direct member",
+                       map[string][]string{
+                               "group-a": {
+                                       "a",
+                                       "b",
+                                       "detected_foo",
+                               },
+                               "group-b": {
+                                       "c",
+                                       "d",
+                               },
+                       },
+                       []string{
+                               "group-a",
+                       },
+               },
+
+               {
+                       "detected as direct :remove member",
+                       map[string][]string{
+                               "group-a": {
+                                       "a",
+                                       "b",
+                                       "group-b",
+                               },
+                               "group-a:remove": {
+                                       "d",
+                                       "detected_foo",
+                               },
+                               "group-b": {
+                                       "c",
+                                       "d",
+                               },
+                       },
+                       []string{
+                               "group-a",
+                       },
+               },
+
+               {
+                       "detected as transitive member",
+                       map[string][]string{
+                               "group-a": {
+                                       "group-b",
+                               },
+                               "group-b": {
+                                       "group-c",
+                               },
+                               "group-c": {
+                                       "group-d",
+                                       "detected_bar",
+                               },
+                               "group-d": {
+                                       "group-e",
+                               },
+                               "group-e": {
+                                       "detected_foo",
+                               },
+                               "group-f": {
+                                       "a",
+                                       "b",
+                               },
+                       },
+                       []string{
+                               "group-a",
+                               "group-b",
+                               "group-c",
+                               "group-d",
+                               "group-e",
+                       },
+               },
+
+               {
+                       "detected as transitive :remove member",
+                       map[string][]string{
+                               "group-a": {
+                                       "group-b",
+                               },
+                               "group-b": {
+                                       "group-c",
+                               },
+                               "group-c": {
+                                       "group-d",
+                               },
+                               "group-d": {
+                                       "group-e",
+                               },
+                               "group-e": {
+                                       "all",
+                               },
+                               "group-e:remove": {
+                                       "detected_foo",
+                               },
+                               "group-f": {
+                                       "a",
+                                       "b",
+                               },
+                       },
+                       []string{
+                               "group-a",
+                               "group-b",
+                               "group-c",
+                               "group-d",
+                               "group-e",
+                       },
+               },
+       }
+
+       for _, tc := range tests {
+               t.Run(tc.name, func(t *testing.T) {
+                       res := TransitivelyDetectedGroups(tc.groups)
+                       testutil.AssertEqual(t, "res", res, tc.exp)
+               })
+       }
+}