Add regression test for #153.

ansible-collections · Jul 4, 2024 · 715e099 · 715e099
1 parent d7ea8fb
commit 715e099
Show file tree

Hide file tree

Showing 3 changed files with 53 additions and 1 deletion.
diff --git a/tests/integration/targets/setup_sops/tasks/main.yml b/tests/integration/targets/setup_sops/tasks/main.yml
@@ -26,3 +26,35 @@
       set_fact:
         sops_installed: true
         age_installed: '{{ age_version_command.rc == 0 }}'
+
+- name: Determine SOPS versions
+  block:
+    - name: Determine SOPS version on remote
+      command: sops --version {{ '--disable-version-check' if sops_version_remote is not defined or sops_version_remote is not string else '' }}
+      changed_when: false
+      retries: 1
+      until: sops_version_remote is succeeded
+      register: sops_version_remote
+
+    - name: Determine SOPS version on controller
+      command: sops --version {{ '--disable-version-check' if sops_version_controller is not defined or sops_version_controller is not string else '' }}
+      delegate_to: localhost
+      changed_when: false
+      retries: 1
+      until: sops_version_controller is succeeded
+      register: sops_version_controller
+
+    - name: Set versions
+      set_fact:
+        sops_version_remote: >-
+          {{
+            sops_version_remote.stdout
+            | regex_replace(".*sops ([0-9]+\.[0-9]+\.[0-9]+).*", "\1", multiline=true)
+            | trim
+          }}
+        sops_version_controller: >-
+          {{
+            sops_version_controller.stdout
+            | regex_replace(".*sops ([0-9]+\.[0-9]+\.[0-9]+).*", "\1", multiline=true)
+            | trim
+          }}
diff --git a/tests/integration/targets/sops_encrypt/files/.sops.yaml b/tests/integration/targets/sops_encrypt/files/.sops.yaml
@@ -4,4 +4,7 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 
 creation_rules:
-    - pgp: FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
+  - path_regex: test_json
+    unencrypted_regex: ^key1$
+    pgp: FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
+  - pgp: FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
diff --git a/tests/integration/targets/sops_encrypt/tasks/main.yml b/tests/integration/targets/sops_encrypt/tasks/main.yml
@@ -245,6 +245,23 @@
         value_1_raw: "{{ slurp.content | b64decode | community.sops.decrypt(output_type='json') | b64encode }}"
         value_1: "{{ slurp.content | b64decode | community.sops.decrypt(output_type='json') | from_json }}"
 
+    - name: "SOPS 3.9.0+: check whether path_regex in .sops.yaml works"
+      assert:
+        that:
+          - >-
+            '"key1": "value1"' in slurp.content | b64decode
+          - >-
+            '"unencrypted_regex": "^key1$"' in slurp.content | b64decode
+      when: sops_version_controller is version('3.9.0', '>=')
+    - name: "SOPS before 3.9.0: check whether path_regex in .sops.yaml did not work"
+      assert:
+        that:
+          - >-
+            '"key1": "value1"' not in slurp.content | b64decode
+          - >-
+            '"unencrypted_regex": "^key1$"' not in slurp.content | b64decode
+      when: sops_version_controller is version('3.9.0', '<')
+
     - name: Create JSON file (idempotency, check mode)
       community.sops.sops_encrypt:
         path: "{{ remote_tmp_dir }}/test_json"