Merge ~rmescandon/snappy-hwe-snaps/+git/engineering-tests:serial-vault-ones into ~snappy-hwe-team/snappy-hwe-snaps/+git/engineering-tests:master

[Roberto Mier Escandon]

Serial vault plainbox tests

[Konrad Zapałowicz (kzapalowicz)]

lgtm

review: Approve

[System Enablement Bot (system-enablement-ci-bot)]

PASSED: Continuous integration, rev:ec12899b2fa2d9f63d69231746e8522d79fa0785
https://jenkins.canonical.com/system-enablement/job/generic-build-snap/1928/
Executed test runs:
    SUCCESS: https://jenkins.canonical.com/system-enablement/job/generic-build-snap-worker/3280
    None: https://jenkins.canonical.com/system-enablement/job/generic-update-snap-mp/1836/console
    SUCCESS: https://jenkins.canonical.com/system-enablement/job/generic-test-snap/3543
    None: https://jenkins.canonical.com/system-enablement/job/generic-cleanup-snap/2742/console

Click here to trigger a rebuild:
https://jenkins.canonical.com/system-enablement/job/generic-build-snap/1928/rebuild

review: Approve (continuous-integration)

[Alfonso Sanchez-Beato (alfonsosanchezbeato)]

LGTM

review: Approve

[Maciej Kisielewski (kissiel)]

+1

review: Approve

diff --git a/com.canonical.se:engineering-tests/units/serial-vault/serial-vault.pxu b/com.canonical.se:engineering-tests/units/serial-vault/serial-vault.pxu
new file mode 100644
index 0000000..ab1bea1
--- /dev/null
+++ b/com.canonical.se:engineering-tests/units/serial-vault/serial-vault.pxu
@@ -0,0 +1,138 @@
+# Copyright 2017 Canonical Ltd.
+# All rights reserved.
+#
+# Written by:
+#   Roberto Mier Escandon <[e-mail]>
+
+unit: category
+id: serial_vault
+_name: Serial Vault
+
+id: serial_vault/setup/ensure_interface_connection_setup
+category_id: serial_vault
+_description: Ensure that the serial-vault interface is auto-connected
+plugin: manual
+_steps:
+  1. List the interfaces
+  .
+    $ snap interfaces | serial-vault-server
+  .
+_verification:
+  Verify that you see the following:
+  :network                   serial-vault-server
+  :network-bind              serial-vault-server
+
+id: serial_vault/setup/config
+category_id: serial_vault
+_description: Ensure that the serial-vault can access database
+plugin: manual
+depends: serial_vault/setup/ensure_interface_connection_setup
+_steps:
+  1. Create settings.yaml with proper content ot access database
+  .
+    $ cat <<-EOF > settings.yaml
+	title: "Serial Vault"
+	logo: "/static/images/logo-ubuntu-white.svg"
+	mode: signing
+	docRoot: "."
+	driver: "postgres"
+	datasource: "dbname=serialvault sslmode=disable"
+	keystore: "database"
+	keystoreSecret: "secret code to encrypt the auth-key hash"
+	csrfAuthKey: "2E6ZYnVYUfDLRLV/ne8M6v1jyB/376BL9ORnN3Kgb04uSFalr2ygReVsOt0PaGEIRuID10TePBje5xdjIOEjQQ=="
+	urlHost: "serial-vault"
+	urlScheme: http
+	enableUserAuth: True
+  	  EOF
+  .
+  2. Apply config
+  .
+    $ cat settings.yaml | sudo serial-vault-server.config
+  .
+  3. Restart service
+  .
+  	$ sudo systemctl restart snap.serial-vault-server.serial-vault.service
+  .
+  4. Check journal
+  .
+  	$ sudo journalctl
+  .
+_verification:
+  Verify that you see in journal last page (Alt+G) that database has been created/updated and service is up and running, like this:
+  Created the 'keypair' table.
+  Created the 'model' table.
+  Created the 'settings' table.
+  Created the 'signinglog' table.
+  Created the 'nonce' table.
+  Created the 'account' table.
+  Updated the 'model' table.
+  Updated the 'keypair' table.
+  Created the 'openid nonce' table.
+  Created the 'userinfo' table.
+  Created the 'account-user link' table.
+  Updated the 'userinfo' table.
+  Starting service on port :8080
+
+id: serial_vault/operation/ensure-commands-can-be-run
+category_id: serial_vault
+_description: Ensure that the serial vault admin commands can be run
+plugin: manual
+depends: serial_vault/setup/config
+_steps:
+  1. Try to run admin
+  .
+    $ serial-vault-server.admin
+  .
+  2. Try to run config
+  .
+    $ serial-vault-server.config
+  .
+_verification:
+  Verify that each step ends showing up the help
+
+id: serial_vault/operation/add_superuser
+category_id: serial_vault
+_description: Ensure admin tool can add a superuser
+plugin: manual
+depends: serial_vault/operation/ensure-commands-can-be-run
+_steps:
+  1. Add a user from console
+  .
+    $ serial-vault-server.admin user add theuser -n TheName -r superuser -e [e-mail]
+  .
+  2. List users
+  .
+    $ serial-vault-server.admin user list
+  .
+_verification:
+  Verify that just created user is in users list with superuser role
+
+id: serial_vault/operation/cache_account
+category_id: serial_vault
+_description: Ensure admin tool can fetch store cached account assertions
+plugin: manual
+depends: serial_vault/operation/ensure-commands-can-be-run
+_steps:
+  1. Fetch cached accounts from the store
+  .
+    $ serial-vault-server.admin account cache
+  .
+  2. List users
+  .
+    $ serial-vault-server.admin user list
+  .
+_verification:
+  Verify that just created user is in users list with superuser role
+
+id: serial_vault/operation/verify_api_is_reachable
+category_id: serial_vault
+_description: Ensure signing service can be reached
+plugin: manual
+depends: serial_vault/operation/ensure-commands-can-be-run
+_steps:
+  1. Request service version
+  .
+    $ wget http://localhost:8080/v1/version
+  .
+_verification:
+  Verify that the response content is {"version":"1.6.0"}
diff --git a/snapcraft.yaml b/snapcraft.yaml
index 7b13d68..a48c2c8 100644
--- a/snapcraft.yaml
+++ b/snapcraft.yaml
@@ -45,6 +45,8 @@ apps:
     command: bin/plainbox-wrapper run -i '2017.com.canonical.se::captive_redirect.*'
   wpa-supplicant:
     command: bin/plainbox-wrapper run -i '2017.com.canonical.se::wpa_supplicant.*'
+  serial-vault:
+    command: bin/plainbox-wrapper run -i '2017.com.canonical.se::serial_vault.*'
 
 parts:
   common: