Added puppetlabs-firewall (required by puppetlabs-postgresql), updated the other modules.

modules/firewall/spec/unit/classes/firewall_linux_archlinux_spec.rb

@@ -0,0 +1,32 @@
+require 'spec_helper'
+
+describe 'firewall::linux::archlinux', :type => :class do
+  it { should contain_service('iptables').with(
+    :ensure   => 'running',
+    :enable   => 'true'
+  )}
+  it { should contain_service('ip6tables').with(
+    :ensure   => 'running',
+    :enable   => 'true'
+  )}
+
+  context 'ensure => stopped' do
+    let(:params) {{ :ensure => 'stopped' }}
+    it { should contain_service('iptables').with(
+      :ensure   => 'stopped'
+    )}
+    it { should contain_service('ip6tables').with(
+      :ensure   => 'stopped'
+    )}
+  end
+
+  context 'enable => false' do
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('iptables').with(
+      :enable   => 'false'
+    )}
+    it { should contain_service('ip6tables').with(
+      :enable   => 'false'
+    )}
+  end
+end

modules/firewall/spec/unit/classes/firewall_linux_debian_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+describe 'firewall::linux::debian', :type => :class do
+  it { should contain_package('iptables-persistent').with(
+    :ensure => 'present'
+  )}
+  it { should contain_service('iptables-persistent').with(
+    :ensure   => nil,
+    :enable   => 'true',
+    :require  => 'Package[iptables-persistent]'
+  )}
+
+  context 'enable => false' do
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('iptables-persistent').with(
+      :enable   => 'false'
+    )}
+  end
+end

modules/firewall/spec/unit/classes/firewall_linux_redhat_spec.rb

@@ -0,0 +1,22 @@
+require 'spec_helper'
+
+describe 'firewall::linux::redhat', :type => :class do
+  it { should contain_service('iptables').with(
+    :ensure => 'running',
+    :enable => 'true'
+  )}
+
+  context 'ensure => stopped' do
+    let(:params) {{ :ensure => 'stopped' }}
+    it { should contain_service('iptables').with(
+      :ensure => 'stopped'
+    )}
+  end
+
+  context 'enable => false' do
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('iptables').with(
+      :enable => 'false'
+    )}
+  end
+end

modules/firewall/spec/unit/classes/firewall_linux_spec.rb

@@ -0,0 +1,30 @@
+require 'spec_helper'
+
+describe 'firewall::linux', :type => :class do
+  let(:facts_default) {{ :kernel => 'Linux' }}
+  it { should contain_package('iptables').with_ensure('present') }
+
+  context 'RedHat like' do
+    %w{RedHat CentOS Fedora}.each do |os|
+      context "operatingsystem => #{os}" do
+        releases = (os == 'Fedora' ? [14,15,'Rawhide'] : [6,7])
+        releases.each do |osrel|
+          context "operatingsystemrelease => #{osrel}" do
+            let(:facts) { facts_default.merge({ :operatingsystem => os,
+                                                :operatingsystemrelease => osrel}) }
+            it { should contain_class('firewall::linux::redhat').with_require('Package[iptables]') }
+          end
+        end
+      end
+    end
+  end
+
+  context 'Debian like' do
+    %w{Debian Ubuntu}.each do |os|
+      context "operatingsystem => #{os}" do
+        let(:facts) { facts_default.merge({ :operatingsystem => os }) }
+        it { should contain_class('firewall::linux::debian').with_require('Package[iptables]') }
+      end
+    end
+  end
+end

modules/firewall/spec/unit/classes/firewall_spec.rb

@@ -0,0 +1,25 @@
+require 'spec_helper'
+
+describe 'firewall', :type => :class do
+  context 'kernel => Linux' do
+    let(:facts) {{ :kernel => 'Linux' }}
+    it { should contain_class('firewall::linux').with_ensure('running') }
+  end
+
+  context 'kernel => Windows' do
+    let(:facts) {{ :kernel => 'Windows' }}
+    it { expect { should contain_class('firewall::linux') }.to raise_error(Puppet::Error) }
+  end
+
+  context 'ensure => stopped' do
+    let(:facts) {{ :kernel => 'Linux' }}
+    let(:params) {{ :ensure => 'stopped' }}
+    it { should contain_class('firewall::linux').with_ensure('stopped') }
+  end
+
+  context 'ensure => test' do
+    let(:facts) {{ :kernel => 'Linux' }}
+    let(:params) {{ :ensure => 'test' }}
+    it { expect { should contain_class('firewall::linux') }.to raise_error(Puppet::Error) }
+  end
+end