Add integration test template

Author: nyanhp

templates/AppLockerProject/build/prerequisites.ps1

@@ -1,19 +1,28 @@
 param
 (
     [string]
-    $DependencyPath = (Resolve-Path "$PSScriptRoot\requiredModules.psd1").Path
+    $DependencyPath = (Resolve-Path "$PSScriptRoot\requiredModules.psd1").Path,
+
+    [switch]
+    $BuildWorker
 )
 
 $psdependConfig = Import-PowerShellDataFile -Path $DependencyPath
 
-$null = Get-PackageProvider -Name NuGet -ForceBootstrap
+if ($BuildWorker.IsPresent)
+{
+    $null = Get-PackageProvider -Name NuGet -ForceBootstrap
 
-Save-Module -Name PackageManagement, PowerShellGet, PSDepend -Repository $psdependConfig.PSDependOptions.Parameters.Repository -Path $psdependConfig.PSDependOptions.Target -Force
+    Install-Module -Force -Name PackageManagement, PowerShellGet -Repository $psdependConfig.PSDependOptions.Parameters.Repository -Scope CurrentUser
 
-Remove-Module -Name PowerShellGet -ErrorAction SilentlyContinue -Force
-Remove-Module -Name PackageManagement -ErrorAction SilentlyContinue -Force
-Import-Module -Force -Name (Join-Path -Path $psdependConfig.PSDependOptions.Target -ChildPath PackageManagement\*\PackageManagement.psd1 -Resolve)
-Import-Module -Force -Name (Join-Path -Path $psdependConfig.PSDependOptions.Target -ChildPath PowerShellGet\*\PowerShellGet.psd1 -Resolve)
-Import-Module -Name (Join-Path -Path $psdependConfig.PSDependOptions.Target -ChildPath PSDepend\*\PSDepend.psd1 -Resolve)
+    Remove-Module -Name PowerShellGet -ErrorAction SilentlyContinue -Force
+    Remove-Module -Name PackageManagement -ErrorAction SilentlyContinue -Force
+    Import-Module -Force -Name PowerShellGet
+    Import-Module -Force -Name PackageManagement
 
+    $null = Install-WindowsFeature -Name GPMC
+}
+
+Save-Module -Name PSDepend -Repository $psdependConfig.PSDependOptions.Parameters.Repository -Path $psdependConfig.PSDependOptions.Target -Force
+Import-Module -Name (Join-Path -Path $psdependConfig.PSDependOptions.Target -ChildPath PSDepend\*\PSDepend.psd1 -Resolve)
 Invoke-PSDepend -Path $DependencyPath -Force

templates/AppLockerProject/build/requiredModules.psd1

@@ -14,5 +14,5 @@
     'Sampler.DscPipeline' = '0.2.0-preview0015' # Unfortunately still in preview
     Datum                 = '0.40.1'
     'Datum.InvokeCommand' = '0.3.0'
-    AppLockerFoundry      = '1.1.0'
+    AppLockerFoundry      = '1.1.5'
 }

templates/AppLockerProject/tests/Integration/GpoExists.tests.ps1

@@ -0,0 +1,29 @@
+BeforeDiscovery {
+    if (Get-DatumRsopCache)
+    {
+        Clear-DatumRsopCache
+    }
+
+    $policies = foreach ($file in (Get-ChildItem -Path (Resolve-Path "$global:testroot\..\configurationdata\Policies").Path -Recurse -Filter *.y*ml -File))
+    {
+        @{
+            Name   = $file.BaseName
+            Domain = $file.Directory.Name
+        }
+    }
+}
+
+Describe "Policy exists" {
+    It "<Name> Policy exists in <Domain>" -TestCases $policies {
+        $gpo = Get-GPO -Name $Name -Domain $Domain
+        $ctx = [System.DirectoryServices.ActiveDirectory.DirectoryContext]::new('Domain', $Domain)
+        $domain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain($ctx)
+        $domainDn = $domain.GetDirectoryEntry().DistinguishedName
+        $appLockerGpo = try
+        {
+            Get-AppLockerPolicy -Domain -Ldap "LDAP://CN={$($gpo.Id)},CN=Policies,CN=System,$domainDn" -ErrorAction Stop
+        }
+        catch {} # Suppress exception from misbehaving cmdlet that does not like SilentlyContinue
+        $appLockerGpo.RuleCollections | Should -Not -BeNullOrEmpty
+    }
+}