[CHEF-4011] move default secret file path to Chef::Config

* Remove references to DEFAULT_SECRET_FILE from
`Chef::EncryptedDataBagItem`.
* Add new `:encrypted_data_bag_secret` value to `Chef::Config`
* Ensure Chef::Config[:encrypted_data_bag_secret] is nil if the secret
  does not exist at the default path.
* Updated test coverage in `config_spec` and
  `encrypted_data_bag_item_spec`.

1 files changed, 27 insertions, 0 deletions

diff --git a/spec/unit/config_spec.rb b/spec/unit/config_spec.rb
index 7b5d383ba3..42809eec91 100644
--- a/spec/unit/config_spec.rb
+++ b/spec/unit/config_spec.rb
@@ -261,6 +261,33 @@ describe Chef::Config do
     end
   end
 
+  describe "Chef::Config[:encrypted_data_bag_secret]" do
+    db_secret_default_path = "/etc/chef/encrypted_data_bag_secret"
+    let(:db_secret_default_path){ db_secret_default_path }
+
+    before do
+      File.stub(:exist?).with(db_secret_default_path).and_return(secret_exists)
+      # ugh...the only way to properly test this since the conditional
+      # is evaluated at file load/require time.
+      $LOADED_FEATURES.delete_if{|f| f =~ /chef\/config\.rb/}
+      require 'chef/config'
+    end
+
+    context "#{db_secret_default_path} exists" do
+      let(:secret_exists) { true }
+      it "sets the value to #{db_secret_default_path}" do
+        Chef::Config[:encrypted_data_bag_secret].should eq db_secret_default_path
+      end
+    end
+
+    context "#{db_secret_default_path} does not exist" do
+      let(:secret_exists) { false }
+      it "sets the value to nil" do
+        Chef::Config[:encrypted_data_bag_secret].should be_nil
+      end
+    end
+  end
+
   after(:each) do
     Chef::Config.configuration = @original_config
   end