set expected config file permissions to be non-writable by prometheus

voxpupuli · Jun 7, 2019 · e19b6e0 · e19b6e0
1 parent 40d696d
commit e19b6e0
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/spec/classes/prometheus_spec.rb b/spec/classes/prometheus_spec.rb
@@ -156,7 +156,7 @@
           it {
             is_expected.to contain_file('/etc/prometheus').with(
               'ensure'  => 'directory',
-              'owner'   => 'prometheus',
+              'owner'   => 'root',
               'group'   => 'prometheus',
               'purge'   => true,
               'recurse' => true
@@ -167,9 +167,9 @@
             is_expected.to contain_file('prometheus.yaml').with(
               'ensure'  => 'present',
               'path'    => '/etc/prometheus/prometheus.yaml',
-              'owner'   => 'prometheus',
+              'owner'   => 'root',
               'group'   => 'prometheus',
-              'mode'    => '0660',
+              'mode'    => '0640',
               'content' => File.read(fixtures('files', "prometheus#{prom_major}.yaml"))
             ).that_notifies('Class[prometheus::service_reload]')
           }
@@ -247,7 +247,7 @@
             it {
               is_expected.to contain_file('/etc/prometheus/alert.rules').with(
                 'ensure'  => 'file',
-                'owner'   => 'prometheus',
+                'owner'   => 'root',
                 'group'   => 'prometheus',
                 'content' => File.read(fixtures('files', "prometheus#{prom_major}.alert.rules"))
               ).that_notifies('Class[prometheus::service_reload]')
@@ -278,7 +278,7 @@
               is_expected.to contain_file('prometheus.yaml').with(
                 'ensure'  => 'present',
                 'path'    => '/etc/prometheus/prometheus.yaml',
-                'owner'   => 'prometheus',
+                'owner'   => 'root',
                 'group'   => 'prometheus',
                 'content' => %r{http://domain.tld/path}
               )