group test: Enable ansible_facts, fix service hostname

The service hostname needs to be gathered from ansibe_facts as it might
not be "ipaserver". ansible_facts['fqdn'] is now used as the service
hostname, therefore gather_facts had to be turned on.
This commit is contained in:
Thomas Woerner
2022-01-27 11:30:08 +01:00
parent 680cd4c6ee
commit 0c36194038

View File

@@ -2,23 +2,17 @@
- name: Test group - name: Test group
hosts: "{{ ipa_test_host | default('ipaserver') }}" hosts: "{{ ipa_test_host | default('ipaserver') }}"
become: true become: true
gather_facts: false gather_facts: true
tasks: tasks:
# setup # setup
- include_tasks: ../env_freeipa_facts.yml - include_tasks: ../env_freeipa_facts.yml
# GET DOMAIN AND REALM # GET FQDN_AT_DOMAIN
- name: Get Domain from server name - name: Get fqdn_at_domain
set_fact: set_fact:
ipaserver_domain: "{{ ansible_facts['fqdn'].split('.')[1:] | join ('.') }}" fqdn_at_domain: "{{ ansible_facts['fqdn'] + '@' + ipaserver_realm }}"
when: ipaserver_domain is not defined
- name: Get Realm from server name
set_fact:
ipaserver_realm: "{{ ansible_facts['fqdn'].split('.')[1:] | join ('.') | upper }}"
when: ipaserver_realm is not defined
# CLEANUP TEST ITEMS # CLEANUP TEST ITEMS
@@ -144,93 +138,93 @@
- block: - block:
- name: Ensure service "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is present in group group1 - name: Ensure service "{{ 'HTTP/' + fqdn_at_domain }}" is present in group group1
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
action: member action: member
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure service "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is present in group group1, again - name: Ensure service "{{ 'HTTP/' + fqdn_at_domain }}" is present in group group1, again
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
action: member action: member
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure service "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is present in group group1 - name: Ensure service "{{ 'ldap/' + fqdn_at_domain }}" is present in group group1
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure service "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is present in group group1, again - name: Ensure service "{{ 'ldap/' + fqdn_at_domain }}" is present in group group1, again
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure service "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is absent in group group1 - name: Ensure service "{{ 'HTTP/' + fqdn_at_domain }}" is absent in group group1
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
action: member action: member
state: absent state: absent
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure service "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is absent in group group1, again - name: Ensure service "{{ 'HTTP/' + fqdn_at_domain }}" is absent in group group1, again
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
action: member action: member
state: absent state: absent
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure service "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is absent in group group1 - name: Ensure service "{{ 'ldap/' + fqdn_at_domain }}" is absent in group group1
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
state: absent state: absent
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure service "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" is absent in group group1, again - name: Ensure service "{{ 'ldap/' + fqdn_at_domain }}" is absent in group group1, again
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
state: absent state: absent
register: result register: result
@@ -242,8 +236,8 @@
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
@@ -254,8 +248,8 @@
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'http/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'http/' + fqdn_at_domain }}"
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
@@ -266,8 +260,8 @@
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
- "{{ 'LDAP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'LDAP/' + fqdn_at_domain }}"
action: member action: member
state: absent state: absent
register: result register: result
@@ -279,8 +273,8 @@
ipaapi_context: "{{ ipa_context | default(omit) }}" ipaapi_context: "{{ ipa_context | default(omit) }}"
name: group1 name: group1
service: service:
- "{{ 'HTTP/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'HTTP/' + fqdn_at_domain }}"
- "{{ 'ldap/ipaserver.' + ipaserver_domain + '@' + ipaserver_realm }}" - "{{ 'ldap/' + fqdn_at_domain }}"
action: member action: member
state: absent state: absent
register: result register: result