From 715eb45b297670deab82d858e88656e33687dbf1 Mon Sep 17 00:00:00 2001
From: Filip <fjanus@redhat.com>
Date: Sun, 13 Oct 2024 10:09:03 +0200
Subject: [PATCH] fix: Add test for postgresql_cert_name

---
 tests/tests_custom_certificate.yml | 54 ++++++++++++++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 tests/tests_custom_certificate.yml

diff --git a/tests/tests_custom_certificate.yml b/tests/tests_custom_certificate.yml
new file mode 100644
index 0000000..7d7c502
--- /dev/null
+++ b/tests/tests_custom_certificate.yml
@@ -0,0 +1,54 @@
+---
+
+- name: Test PostgreSQL server with ssl support using certificate role
+  hosts: all
+  tasks:
+    - name: Test PostgreSQL server user certificate in custom path
+      vars:
+        postgresql_password: redhat
+      block:
+        - name: Generate certificate using certificate role
+          include_role:
+            name: fedora.linux_system_roles.certificate
+          vars:
+            certificate_requests:
+              - name: /tmp/mycert
+                dns: www.example.com
+                ca: self-sign
+            certificate_test_mode: true
+
+        - name: Deploy postgresql
+          include_tasks: tasks/install_and_check.yml
+          vars:
+            __test_clean_instance: false
+            __test_check_unix_socket: false
+            postgresql_cert_name: /tmp/mycert
+            postgresql_ssl_enable: true
+            postgresql_pg_hba_conf:
+              - type: hostssl
+                database: all
+                user: all
+                auth_method: md5
+                address: '127.0.0.1/32'
+
+        - name: Gather output of psql
+          environment:
+            PGPASSWORD: "{{ postgresql_password }}"
+          shell: |
+            set -euo pipefail
+            echo "\conninfo" | psql -U postgres -h 127.0.0.1
+          register: result
+          changed_when: false
+
+        - name: Check output of psql
+          assert:
+            that: >-
+              "SSL connection" in result.stdout
+      always:
+        - name: Stop tracking certificate
+          command: getcert stop-tracking -f /etc/pki/tls/certs/test_crt.crt
+          changed_when: false
+
+        - name: Clean up
+          include_tasks: tasks/clean_instance.yml
+          tags: tests::cleanup