From d3c6b976ba1da90cbdd6706cf5c9c79323962a1e Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Wed, 26 Feb 2020 12:35:56 +0100 Subject: [PATCH 1/4] tests: Unite admin passwords The tests have been using MyPassword123 and also SomeADMINpassword within the tasks of the tests. SomeADMINpassword should be used everywhere. --- tests/group/test_group.yml | 38 ++--- tests/hbacrule/test_hbacrule.yml | 130 +++++++++--------- tests/hbacsvc/test_hbacsvc.yml | 14 +- tests/hbacsvcgroup/test_hbacsvcgroup.yml | 20 +-- tests/host/test_host.yml | 34 ++--- tests/host/test_host_allow_create_keytab.yml | 44 +++--- .../host/test_host_allow_retrieve_keytab.yml | 44 +++--- tests/host/test_host_bool_params.yml | 24 ++-- tests/host/test_host_ipaddresses.yml | 50 +++---- tests/host/test_host_managedby_host.yml | 24 ++-- tests/host/test_host_principal.yml | 22 +-- tests/host/test_host_random.yml | 10 +- tests/host/test_hosts.yml | 10 +- tests/host/test_hosts_managedby_host.yml | 16 +-- tests/host/test_hosts_principal.yml | 22 +-- tests/hostgroup/test_hostgroup.yml | 36 ++--- tests/pwpolicy/test_pwpolicy.yml | 2 +- tests/sudocmd/test_sudocmd.yml | 26 ++-- tests/sudocmdgroup/test_sudocmdgroup.yml | 32 ++--- tests/sudorule/test_sudorule.yml | 92 ++++++------- tests/user/test_user_random.yml | 10 +- tests/vault/test_vault.yml | 112 +++++++-------- 22 files changed, 406 insertions(+), 406 deletions(-) diff --git a/tests/group/test_group.yml b/tests/group/test_group.yml index 23b4e4ea..28df3a5a 100644 --- a/tests/group/test_group.yml +++ b/tests/group/test_group.yml @@ -7,19 +7,19 @@ tasks: - name: Ensure users user1, user2 and user3 are absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user1,user2,user3 state: absent - name: Ensure group group3, group2 and group1 are absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group3,group2,group1 state: absent - name: Ensure users user1..user3 are present ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 first: user1 @@ -35,49 +35,49 @@ - name: Ensure group1 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 register: result failed_when: not result.changed - name: Ensure group1 is present again ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 register: result failed_when: result.changed - name: Ensure group2 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group2 register: result failed_when: not result.changed - name: Ensure group2 is present again ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group2 register: result failed_when: result.changed - name: Ensure group3 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group3 register: result failed_when: not result.changed - name: Ensure group3 is present again ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group3 register: result failed_when: result.changed - name: Ensure groups group2 and group3 are present in group group1 ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 group: - group2 @@ -88,7 +88,7 @@ - name: Ensure groups group2 and group3 are present in group group1 again ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 group: - group2 @@ -99,7 +99,7 @@ - name: Ensure group3 ia present in group group1 ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 group: - group3 @@ -109,7 +109,7 @@ - name: Ensure users user1, user2 and user3 are present in group group1 ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 user: - user1 @@ -121,7 +121,7 @@ - name: Ensure users user1, user2 and user3 are present in group group1 again ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 user: - user1 @@ -132,7 +132,7 @@ failed_when: result.changed #- ipagroup: - # ipaadmin_password: MyPassword123 + # ipaadmin_password: SomeADMINpassword # name: group1 # user: # - user7 @@ -140,7 +140,7 @@ - name: Ensure user user7 is absent in group group1 ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 user: - user7 @@ -151,7 +151,7 @@ - name: Ensure group group4 is absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group4 state: absent register: result @@ -159,7 +159,7 @@ - name: Ensure group group3, group2 and group1 are absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group3,group2,group1 state: absent register: result @@ -167,7 +167,7 @@ - name: Ensure users user1, user2 and user3 are absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user1,user2,user3 state: absent register: result diff --git a/tests/hbacrule/test_hbacrule.yml b/tests/hbacrule/test_hbacrule.yml index 0372e6ce..4d0c2030 100644 --- a/tests/hbacrule/test_hbacrule.yml +++ b/tests/hbacrule/test_hbacrule.yml @@ -13,7 +13,7 @@ - name: Ensure test hosts are absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ 'testhost01.' + ipaserver_domain }}" - "{{ 'testhost02.' + ipaserver_domain }}" @@ -23,31 +23,31 @@ - name: Ensure test hostgroups are absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhostgroup01,testhostgroup02,testhostgroup03,testhostgroup04 state: absent - name: Ensure test users are absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testuser01,testuser02,testuser03,testuser04 state: absent - name: Ensure test user groups are absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testgroup01,testgroup02,testgroup03,testgroup04 state: absent - name: Ensure test HBAC Services are absent ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvc01,testhbacsvc02,testhbacsvc03,testhbacsvc04 state: absent - name: Ensure test HBAC Service Groups are absent ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvcgroup01,testhbacsvcgroup02,testhbacsvcgroup03,testhbacsvcgroup04 state: absent @@ -55,7 +55,7 @@ - name: Ensure hosts "{{ 'host[1..4].' + ipaserver_domain }}" are present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ 'testhost01.' + ipaserver_domain }}" force: yes @@ -70,35 +70,35 @@ - name: Ensure host-group testhostgroup01 is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhostgroup01 register: result failed_when: not result.changed - name: Ensure host-group testhostgroup02 is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhostgroup02 register: result failed_when: not result.changed - name: Ensure host-group testhostgroup03 is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhostgroup03 register: result failed_when: not result.changed - name: Ensure host-group testhostgroup04 is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhostgroup04 register: result failed_when: not result.changed - name: Ensure testusers are present ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: testuser01 first: test @@ -117,91 +117,91 @@ - name: Ensure user group testgroup01 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testgroup01 register: result failed_when: not result.changed - name: Ensure user group testgroup02 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testgroup02 register: result failed_when: not result.changed - name: Ensure user group testgroup03 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testgroup03 register: result failed_when: not result.changed - name: Ensure user group testgroup04 is present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testgroup04 register: result failed_when: not result.changed - name: Ensure HBAC Service testhbacsvc01 is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvc01 register: result failed_when: not result.changed - name: Ensure HBAC Service testhbacsvc02 is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvc02 register: result failed_when: not result.changed - name: Ensure HBAC Service testhbacsvc03 is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvc03 register: result failed_when: not result.changed - name: Ensure HBAC Service testhbacsvc04 is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvc04 register: result failed_when: not result.changed - name: Ensure HBAC Service Group testhbacsvcgroup01 is present ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvcgroup01 register: result failed_when: not result.changed - name: Ensure HBAC Service Group testhbacsvcgroup02 is present ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvcgroup02 register: result failed_when: not result.changed - name: Ensure HBAC Service Group testhbacsvcgroup03 is present ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvcgroup03 register: result failed_when: not result.changed - name: Ensure HBAC Service Group testhbacsvcgroup04 is present ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvcgroup04 register: result failed_when: not result.changed - name: Ensure test HBAC rule hbacrule01 is absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 state: absent @@ -209,14 +209,14 @@ - name: Ensure HBAC rule hbacrule01 is present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 register: result failed_when: not result.changed - name: Ensure HBAC rule hbacrule01 is present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 register: result failed_when: result.changed @@ -225,7 +225,7 @@ - name: Ensure HBAC rule hbacrule01 is present with hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -240,7 +240,7 @@ - name: Ensure HBAC rule hbacrule01 is present with hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -257,7 +257,7 @@ - name: Ensure test HBAC rule hbacrule01 host members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -269,7 +269,7 @@ - name: Ensure test HBAC rule hbacrule01 host members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -281,7 +281,7 @@ - name: Ensure test HBAC rule hbacrule01 hostgroup members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hostgroup: testhostgroup01,testhostgroup02 state: absent @@ -291,7 +291,7 @@ - name: Ensure test HBAC rule hbacrule01 hostgroup members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hostgroup: testhostgroup01,testhostgroup02 state: absent @@ -301,7 +301,7 @@ - name: Ensure test HBAC rule hbacrule01 user members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 user: testuser01,testuser02 state: absent @@ -311,7 +311,7 @@ - name: Ensure test HBAC rule hbacrule01 user members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 user: testuser01,testuser02 state: absent @@ -321,7 +321,7 @@ - name: Ensure test HBAC rule hbacrule01 user group members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 group: testgroup01,testgroup02 state: absent @@ -331,7 +331,7 @@ - name: Ensure test HBAC rule hbacrule01 user group members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 group: testgroup01,testgroup02 state: absent @@ -341,7 +341,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvc members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvc: testhbacsvc01,testhbacsvc02 state: absent @@ -351,7 +351,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvc members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvc: testhbacsvc01,testhbacsvc02 state: absent @@ -361,7 +361,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 state: absent @@ -371,7 +371,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 state: absent @@ -383,7 +383,7 @@ - name: Ensure test HBAC rule hbacrule01 host members are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -394,7 +394,7 @@ - name: Ensure test HBAC rule hbacrule01 host members are present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -405,7 +405,7 @@ - name: Ensure test HBAC rule hbacrule01 hostgroup members are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hostgroup: testhostgroup01,testhostgroup02 action: member @@ -414,7 +414,7 @@ - name: Ensure test HBAC rule hbacrule01 hostgroup members are present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hostgroup: testhostgroup01,testhostgroup02 action: member @@ -423,7 +423,7 @@ - name: Ensure test HBAC rule hbacrule01 user members are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 user: testuser01,testuser02 action: member @@ -432,7 +432,7 @@ - name: Ensure test HBAC rule hbacrule01 user members are present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 user: testuser01,testuser02 action: member @@ -441,7 +441,7 @@ - name: Ensure test HBAC rule hbacrule01 user group members are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 group: testgroup01,testgroup02 action: member @@ -450,7 +450,7 @@ - name: Ensure test HBAC rule hbacrule01 user group members are present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 group: testgroup01,testgroup02 action: member @@ -459,7 +459,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvc members are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvc: testhbacsvc01,testhbacsvc02 action: member @@ -468,7 +468,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvc members are present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvc: testhbacsvc01,testhbacsvc02 action: member @@ -477,7 +477,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 action: member @@ -486,7 +486,7 @@ - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are present again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 action: member @@ -497,7 +497,7 @@ - name: Ensure HBAC rule hbacrule01 is present with different hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost03.' + ipaserver_domain }}" @@ -512,7 +512,7 @@ - name: Ensure HBAC rule hbacrule01 is present with different hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost03.' + ipaserver_domain }}" @@ -529,7 +529,7 @@ - name: Ensure HBAC rule hbacrule01 members (same) are present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost01.' + ipaserver_domain }}" @@ -548,7 +548,7 @@ - name: Ensure HBAC rule hbacrule01 members are absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost03.' + ipaserver_domain }}" @@ -565,7 +565,7 @@ - name: Ensure HBAC rule hbacrule01 members are absent again ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 host: - "{{ 'testhost03.' + ipaserver_domain }}" @@ -584,13 +584,13 @@ - name: Ensure test HBAC rule hbacrule01 is absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hbacrule01 state: absent - name: Ensure test hosts are absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ 'testhost01.' + ipaserver_domain }}" - "{{ 'testhost02.' + ipaserver_domain }}" @@ -600,30 +600,30 @@ - name: Ensure test hostgroups are absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhostgroup01,testhostgroup02,testhostgroup03,testhostgroup04 state: absent - name: Ensure test users are absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testuser01,testuser02,testuser03,testuser04 state: absent - name: Ensure test user groups are absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testgroup01,testgroup02,testgroup03,testgroup04 state: absent - name: Ensure test HBAC Services are absent ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvc01,testhbacsvc02,testhbacsvc03,testhbacsvc04 state: absent - name: Ensure test HBAC Service Groups are absent ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testhbacsvcgroup01,testhbacsvcgroup02,testhbacsvcgroup03,testhbacsvcgroup04 state: absent diff --git a/tests/hbacsvc/test_hbacsvc.yml b/tests/hbacsvc/test_hbacsvc.yml index f6d8393c..87a6bbd5 100644 --- a/tests/hbacsvc/test_hbacsvc.yml +++ b/tests/hbacsvc/test_hbacsvc.yml @@ -7,27 +7,27 @@ tasks: - name: Ensure HBAC Service for http is absent ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http,tftp state: absent - name: Ensure HBAC Service for http is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http register: result failed_when: not result.changed - name: Ensure HBAC Service for http is present again ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http register: result failed_when: result.changed - name: Ensure HBAC Service for tftp is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: tftp description: TFTP service register: result @@ -35,7 +35,7 @@ - name: Ensure HBAC Service for tftp is present again ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: tftp description: TFTP service register: result @@ -43,7 +43,7 @@ - name: Ensure HBAC Services for http and tftp are absent ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http,tftp state: absent register: result @@ -51,7 +51,7 @@ - name: Ensure HBAC Services for http and tftp are absent again ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http,tftp state: absent register: result diff --git a/tests/hbacsvcgroup/test_hbacsvcgroup.yml b/tests/hbacsvcgroup/test_hbacsvcgroup.yml index 5a9e67d1..853efa29 100644 --- a/tests/hbacsvcgroup/test_hbacsvcgroup.yml +++ b/tests/hbacsvcgroup/test_hbacsvcgroup.yml @@ -7,32 +7,32 @@ tasks: - name: Ensure HBAC Service Group login is absent ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login state: absent - name: Ensure HBAC Service for sshd is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login - name: Ensure HBAC Service Group login is present ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login register: result failed_when: not result.changed - name: Ensure HBAC Service Group login is present again ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login register: result failed_when: result.changed - name: Ensure HBAC Service sshd is present in HBAC Service Group login ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -42,7 +42,7 @@ - name: Ensure HBAC Service sshd is present in HBAC Service Group login again ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -52,7 +52,7 @@ - name: Ensure HBAC Services sshd and foo are absent in HBAC Service Group login ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -64,7 +64,7 @@ - name: Ensure HBAC Services sshd and foo are absent in HBAC Service Group login again ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -76,7 +76,7 @@ - name: Ensure HBAC Service Group login is absent ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login state: absent register: result @@ -84,7 +84,7 @@ - name: Ensure HBAC Service Group login is absent again ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login state: absent register: result diff --git a/tests/host/test_host.yml b/tests/host/test_host.yml index f3ec11df..efb0524a 100644 --- a/tests/host/test_host.yml +++ b/tests/host/test_host.yml @@ -20,7 +20,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -38,7 +38,7 @@ - name: Host "{{ host1_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: "{{ ipv4_prefix + '.201' }}" update_dns: yes @@ -48,7 +48,7 @@ - name: Host "{{ host1_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: "{{ ipv4_prefix + '.201' }}" update_dns: yes @@ -58,7 +58,7 @@ - name: Host "{{ host2_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host2_fqdn }}" ip_address: "{{ ipv4_prefix + '.202' }}" update_dns: yes @@ -68,7 +68,7 @@ - name: Host "{{ host2_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host2_fqdn }}" ip_address: "{{ ipv4_prefix + '.202' }}" update_dns: yes @@ -78,7 +78,7 @@ - name: Host "{{ host3_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host3_fqdn }}" ip_address: "{{ ipv4_prefix + '.203' }}" update_dns: yes @@ -88,7 +88,7 @@ - name: Host "{{ host3_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host3_fqdn }}" ip_address: "{{ ipv4_prefix + '.203' }}" update_dns: yes @@ -98,7 +98,7 @@ - name: Host "{{ host4_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host4_fqdn }}" ip_address: "{{ ipv4_prefix + '.204' }}" update_dns: yes @@ -108,7 +108,7 @@ - name: Host "{{ host4_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host4_fqdn }}" ip_address: "{{ ipv4_prefix + '.204' }}" update_dns: yes @@ -118,7 +118,7 @@ - name: Host "{{ host5_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host5_fqdn }}" ip_address: "{{ ipv4_prefix + '.205' }}" update_dns: yes @@ -128,7 +128,7 @@ - name: Host "{{ host5_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host5_fqdn }}" ip_address: "{{ ipv4_prefix + '.205' }}" update_dns: yes @@ -138,7 +138,7 @@ - name: Host "{{ host6_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host6_fqdn }}" ip_address: "{{ ipv4_prefix + '.206' }}" update_dns: yes @@ -148,7 +148,7 @@ - name: Host "{{ host6_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host6_fqdn }}" ip_address: "{{ ipv4_prefix + '.206' }}" update_dns: yes @@ -160,7 +160,7 @@ # not enabled. #- name: Hosts host1..host6 disabled # ipahost: - # ipaadmin_password: MyPassword123 + # ipaadmin_password: SomeADMINpassword # name: # - "{{ host1_fqdn }}" # - "{{ host2_fqdn }}" @@ -174,7 +174,7 @@ # #- name: Hosts host1..host6 disabled again # ipahost: - # ipaadmin_password: MyPassword123 + # ipaadmin_password: SomeADMINpassword # name: # - "{{ host1_fqdn }}" # - "{{ host2_fqdn }}" @@ -188,7 +188,7 @@ - name: Hosts host1..host6 absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -203,7 +203,7 @@ - name: Hosts host1..host6 absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" diff --git a/tests/host/test_host_allow_create_keytab.yml b/tests/host/test_host_allow_create_keytab.yml index eb7b7764..b9ad0a19 100644 --- a/tests/host/test_host_allow_create_keytab.yml +++ b/tests/host/test_host_allow_create_keytab.yml @@ -22,7 +22,7 @@ - name: Host host1..., host2... and host3... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -31,13 +31,13 @@ - name: Ensure host-groups hostgroup1 and hostgroup2 absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup1,hostgroup2 state: absent - name: Ensure users user1 and user2 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 - name: user2 @@ -45,13 +45,13 @@ - name: Ensure group1 and group2 absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1,group2 state: absent - name: Host host2... and host3... present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host2_fqdn }}" force: yes @@ -62,7 +62,7 @@ - name: Ensure host-group hostgroup1 present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup1 state: present register: result @@ -70,7 +70,7 @@ - name: Ensure host-group hostgroup2 present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup2 state: present register: result @@ -78,7 +78,7 @@ - name: Ensure users user1 and user2 present ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 first: First1 @@ -91,21 +91,21 @@ - name: Ensure group1 present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 register: result failed_when: not result.changed - name: Ensure group2 present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group2 register: result failed_when: not result.changed - name: Host host1... present with allow_create_keytab users,groups,hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_create_keytab_user: - user1 @@ -125,7 +125,7 @@ - name: Host host1... present with allow_create_keytab users,groups,hosts and hostgroups again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_create_keytab_user: - user1 @@ -145,14 +145,14 @@ - name: Host host1... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" state: absent - name: Host host1... present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" force: yes register: result @@ -160,7 +160,7 @@ - name: Host host1... ensure allow_create_keytab users,groups,hosts and hostgroups present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_create_keytab_user: - user1 @@ -180,7 +180,7 @@ - name: Host host1... ensure allow_create_keytab users,groups,hosts and hostgroups present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_create_keytab_user: - user1 @@ -200,7 +200,7 @@ - name: Host host1... ensure allow_create_keytab users,groups,hosts and hostgroups absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_create_keytab_user: - user1 @@ -221,7 +221,7 @@ - name: Host host1... ensure allow_create_keytab users,groups,hosts and hostgroups absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_create_keytab_user: - user1 @@ -242,7 +242,7 @@ - name: Host host1..., host2... and host3... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -253,7 +253,7 @@ - name: Ensure host-groups hostgroup1 and hostgroup2 absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup1,hostgroup2 state: absent register: result @@ -261,7 +261,7 @@ - name: Ensure users user1 and user2 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 - name: user2 @@ -271,7 +271,7 @@ - name: Ensure group1 and group2 absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1,group2 state: absent register: result diff --git a/tests/host/test_host_allow_retrieve_keytab.yml b/tests/host/test_host_allow_retrieve_keytab.yml index 65d86aa6..8f955407 100644 --- a/tests/host/test_host_allow_retrieve_keytab.yml +++ b/tests/host/test_host_allow_retrieve_keytab.yml @@ -22,7 +22,7 @@ - name: Host host1..., host2... and host3... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -31,13 +31,13 @@ - name: Ensure host-groups hostgroup1 and hostgroup2 absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup1,hostgroup2 state: absent - name: Ensure users user1 and user2 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 - name: user2 @@ -45,13 +45,13 @@ - name: Ensure group1 and group2 absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1,group2 state: absent - name: Host host2... and host3... present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host2_fqdn }}" force: yes @@ -62,7 +62,7 @@ - name: Ensure host-group hostgroup1 present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup1 state: present register: result @@ -70,7 +70,7 @@ - name: Ensure host-group hostgroup2 present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup2 state: present register: result @@ -78,7 +78,7 @@ - name: Ensure users user1 and user2 present ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 first: First1 @@ -91,21 +91,21 @@ - name: Ensure group1 present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1 register: result failed_when: not result.changed - name: Ensure group2 present ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group2 register: result failed_when: not result.changed - name: Host host1... present with allow_retrieve_keytab users,groups,hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_retrieve_keytab_user: - user1 @@ -125,7 +125,7 @@ - name: Host host1... present with allow_retrieve_keytab users,groups,hosts and hostgroups again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_retrieve_keytab_user: - user1 @@ -145,14 +145,14 @@ - name: Host host1... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" state: absent - name: Host host1... present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" force: yes register: result @@ -160,7 +160,7 @@ - name: Host host1... ensure allow_retrieve_keytab users,groups,hosts and hostgroups present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_retrieve_keytab_user: - user1 @@ -180,7 +180,7 @@ - name: Host host1... ensure allow_retrieve_keytab users,groups,hosts and hostgroups present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_retrieve_keytab_user: - user1 @@ -200,7 +200,7 @@ - name: Host host1... ensure allow_retrieve_keytab users,groups,hosts and hostgroups absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_retrieve_keytab_user: - user1 @@ -221,7 +221,7 @@ - name: Host host1... ensure allow_retrieve_keytab users,groups,hosts and hostgroups absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" allow_retrieve_keytab_user: - user1 @@ -242,7 +242,7 @@ - name: Host host1..., host2... and host3... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -253,7 +253,7 @@ - name: Ensure host-groups hostgroup1 and hostgroup2 absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: hostgroup1,hostgroup2 state: absent register: result @@ -261,7 +261,7 @@ - name: Ensure users user1 and user2 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 - name: user2 @@ -271,7 +271,7 @@ - name: Ensure group1 and group2 absent ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group1,group2 state: absent register: result diff --git a/tests/host/test_host_bool_params.yml b/tests/host/test_host_bool_params.yml index 824ea999..efded1f1 100644 --- a/tests/host/test_host_bool_params.yml +++ b/tests/host/test_host_bool_params.yml @@ -15,7 +15,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" update_dns: yes @@ -23,7 +23,7 @@ - name: Host "{{ host1_fqdn }}" present with requires_pre_auth, ok_as_delegate and ok_to_auth_as_delegate ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" force: yes requires_pre_auth: yes @@ -34,7 +34,7 @@ - name: Host "{{ host1_fqdn }}" present with requires_pre_auth, ok_as_delegate and ok_to_auth_as_delegate again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" requires_pre_auth: yes ok_as_delegate: yes @@ -44,7 +44,7 @@ - name: Host "{{ host1_fqdn }}" present with requires_pre_auth, ok_as_delegate and ok_to_auth_as_delegate set to no ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" requires_pre_auth: no ok_as_delegate: no @@ -54,7 +54,7 @@ - name: Host "{{ host1_fqdn }}" present with requires_pre_auth, ok_as_delegate and ok_to_auth_as_delegate set to no again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" requires_pre_auth: no ok_as_delegate: no @@ -64,7 +64,7 @@ - name: Host "{{ host1_fqdn }}" present with requires_pre_auth ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" requires_pre_auth: yes register: result @@ -72,7 +72,7 @@ - name: Host "{{ host1_fqdn }}" present with requires_pre_auth again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" requires_pre_auth: yes register: result @@ -80,7 +80,7 @@ - name: Host "{{ host1_fqdn }}" present with ok_as_delegate ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ok_as_delegate: yes register: result @@ -88,7 +88,7 @@ - name: Host "{{ host1_fqdn }}" present with ok_as_delegate again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ok_as_delegate: yes register: result @@ -96,7 +96,7 @@ - name: Host "{{ host1_fqdn }}" present with ok_to_auth_as_delegate ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ok_to_auth_as_delegate: yes register: result @@ -104,7 +104,7 @@ - name: Host "{{ host1_fqdn }}" present with ok_to_auth_as_delegate again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ok_to_auth_as_delegate: yes register: result @@ -112,7 +112,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" update_dns: yes diff --git a/tests/host/test_host_ipaddresses.yml b/tests/host/test_host_ipaddresses.yml index 136a6101..45500707 100644 --- a/tests/host/test_host_ipaddresses.yml +++ b/tests/host/test_host_ipaddresses.yml @@ -22,7 +22,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -32,7 +32,7 @@ - name: Host "{{ host1_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: - "{{ ipv4_prefix + '.201' }}" @@ -44,7 +44,7 @@ - name: Host "{{ host1_fqdn }}" present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: - "{{ ipv4_prefix + '.201' }}" @@ -56,7 +56,7 @@ - name: Host "{{ host1_fqdn }}" present again with new IP address ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: - "{{ ipv4_prefix + '.211' }}" @@ -70,7 +70,7 @@ - name: Host "{{ host1_fqdn }}" present again with new IP address again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: - "{{ ipv4_prefix + '.211' }}" @@ -84,7 +84,7 @@ - name: Host "{{ host1_fqdn }}" member IPv4 address present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: "{{ ipv4_prefix + '.201' }}" action: member @@ -93,7 +93,7 @@ - name: Host "{{ host1_fqdn }}" member IPv4 address present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: "{{ ipv4_prefix + '.201' }}" action: member @@ -102,7 +102,7 @@ - name: Host "{{ host1_fqdn }}" member IPv4 address absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: "{{ ipv4_prefix + '.201' }}" action: member @@ -112,7 +112,7 @@ - name: Host "{{ host1_fqdn }}" member IPv4 address absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: "{{ ipv4_prefix + '.201' }}" action: member @@ -122,7 +122,7 @@ - name: Host "{{ host1_fqdn }}" member IPv6 address present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: fe80::20c:29ff:fe02:a1b2 action: member @@ -131,7 +131,7 @@ - name: Host "{{ host1_fqdn }}" member IPv6 address present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: fe80::20c:29ff:fe02:a1b2 action: member @@ -140,7 +140,7 @@ - name: Host "{{ host1_fqdn }}" member IPv6 address absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: fe80::20c:29ff:fe02:a1b2 action: member @@ -150,7 +150,7 @@ - name: Host "{{ host1_fqdn }}" member IPv6 address absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: fe80::20c:29ff:fe02:a1b2 action: member @@ -159,7 +159,7 @@ - name: Host "{{ host1_fqdn }}" member all ip-addresses absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: - "{{ ipv4_prefix + '.211' }}" @@ -173,7 +173,7 @@ - name: Host "{{ host1_fqdn }}" all member ip-addresses absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" ip_address: - "{{ ipv4_prefix + '.211' }}" @@ -187,7 +187,7 @@ - name: Hosts "{{ host1_fqdn }}" and "{{ host2_fqdn }}" present with same IP addresses ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" ip_address: @@ -206,7 +206,7 @@ - name: Hosts "{{ host1_fqdn }}" and "{{ host2_fqdn }}" present with same IP addresses again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" ip_address: @@ -225,7 +225,7 @@ - name: Hosts "{{ host3_fqdn }}" present with same IP addresses ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host3_fqdn }}" ip_address: @@ -238,7 +238,7 @@ - name: Hosts "{{ host3_fqdn }}" present with same IP addresses again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host3_fqdn }}" ip_address: @@ -251,7 +251,7 @@ - name: Host "{{ host3_fqdn }}" present with differnt IP addresses ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host3_fqdn }}" ip_address: @@ -264,7 +264,7 @@ - name: Host "{{ host3_fqdn }}" present with different IP addresses again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host3_fqdn }}" ip_address: @@ -277,7 +277,7 @@ - name: Host "{{ host3_fqdn }}" present with old IP addresses ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host3_fqdn }}" ip_address: @@ -290,7 +290,7 @@ - name: Host "{{ host3_fqdn }}" present with old IP addresses again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host3_fqdn }}" ip_address: @@ -303,7 +303,7 @@ - name: Absent host01.ihavenodns.info test ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.ihavenodns.info state: absent @@ -312,7 +312,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" diff --git a/tests/host/test_host_managedby_host.yml b/tests/host/test_host_managedby_host.yml index 78c5a43d..e6fb9dc6 100644 --- a/tests/host/test_host_managedby_host.yml +++ b/tests/host/test_host_managedby_host.yml @@ -16,7 +16,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -25,7 +25,7 @@ - name: Host "{{ host1_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" force: yes register: result @@ -33,7 +33,7 @@ - name: Host "{{ host2_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host2_fqdn }}" force: yes register: result @@ -41,7 +41,7 @@ - name: Host "{{ host1_fqdn }}" managed by "{{ 'host2.' + ipaserver_domain }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ host2_fqdn }}" register: result @@ -49,7 +49,7 @@ - name: Host "{{ host1_fqdn }}" managed by "{{ 'host2.' + ipaserver_domain }}" again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ host2_fqdn }}" register: result @@ -57,7 +57,7 @@ - name: Host "{{ host1_fqdn }}" managed by "{{ groups.ipaserver[0] }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ groups.ipaserver[0] }}" action: member @@ -66,7 +66,7 @@ - name: Host "{{ host1_fqdn }}" managed by "{{ groups.ipaserver[0] }}" again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ groups.ipaserver[0] }}" action: member @@ -75,7 +75,7 @@ - name: Host "{{ host1_fqdn }}" not managed by "{{ groups.ipaserver[0] }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ groups.ipaserver[0] }}" action: member @@ -85,7 +85,7 @@ - name: Host "{{ host1_fqdn }}" not managed by "{{ groups.ipaserver[0] }}" again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ groups.ipaserver[0] }}" action: member @@ -95,7 +95,7 @@ - name: Host "{{ host1_fqdn }}" not managed by "{{ 'host2.' + ipaserver_domain }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ host2_fqdn }}" state: absent @@ -105,7 +105,7 @@ - name: Host "{{ host1_fqdn }}" not managed by "{{ 'host2.' + ipaserver_domain }}" again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" managedby_host: "{{ host2_fqdn }}" action: member @@ -115,7 +115,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" diff --git a/tests/host/test_host_principal.yml b/tests/host/test_host_principal.yml index 0dce400a..6c7d0dc0 100644 --- a/tests/host/test_host_principal.yml +++ b/tests/host/test_host_principal.yml @@ -20,7 +20,7 @@ - name: Host host1 absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" update_dns: yes @@ -28,7 +28,7 @@ - name: Host host1... present with principal host/testhost1... ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" @@ -38,7 +38,7 @@ - name: Host host1... principal host/host1... present (existing already) ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - "{{ 'host/host1.' + ipaserver_domain + '@' + ipaserver_realm }}" @@ -48,7 +48,7 @@ - name: Host host1... principal host/testhost1... present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" action: member @@ -57,7 +57,7 @@ - name: Host host1... principal host/testhost1... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" action: member @@ -67,7 +67,7 @@ - name: Host host1... principal host/testhost1... absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" action: member @@ -77,7 +77,7 @@ - name: Host host1... principal host/testhost1... and host/myhost1... present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" @@ -88,7 +88,7 @@ - name: Host host1... principal host/testhost1... and host/myhost1... present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" @@ -99,7 +99,7 @@ - name: Host host1... principal host/testhost1... and host/myhost1... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" @@ -111,7 +111,7 @@ - name: Host host1... principal host/testhost1... and host/myhost1... absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" @@ -123,7 +123,7 @@ - name: Host host1... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" update_dns: yes diff --git a/tests/host/test_host_random.yml b/tests/host/test_host_random.yml index 84893f90..4d1b2545 100644 --- a/tests/host/test_host_random.yml +++ b/tests/host/test_host_random.yml @@ -16,7 +16,7 @@ - name: Test hosts absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -25,7 +25,7 @@ - name: Host "{{ host1_fqdn }}" present with random password ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" random: yes force: yes @@ -43,14 +43,14 @@ - name: Host "{{ host1_fqdn }}" absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" state: absent - name: Hosts "{{ host1_fqdn }}" and "{{ host2_fqdn }}" present with random password ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" random: yes @@ -79,7 +79,7 @@ - name: Hosts "{{ host1_fqdn }}" and "{{ host2_fqdn }}" absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" diff --git a/tests/host/test_hosts.yml b/tests/host/test_hosts.yml index 8e92bf32..30fd6538 100644 --- a/tests/host/test_hosts.yml +++ b/tests/host/test_hosts.yml @@ -21,7 +21,7 @@ - name: Host host1..host6 absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" - name: "{{ host2_fqdn }}" @@ -33,7 +33,7 @@ - name: Hosts host1..host6 present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" force: yes @@ -52,7 +52,7 @@ - name: Hosts host1..host6 present again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" force: yes @@ -71,7 +71,7 @@ - name: Hosts host1..host6 absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" - name: "{{ host2_fqdn }}" @@ -85,7 +85,7 @@ - name: Hosts host1..host6 absent again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" - name: "{{ host2_fqdn }}" diff --git a/tests/host/test_hosts_managedby_host.yml b/tests/host/test_hosts_managedby_host.yml index a692745a..bd6452c4 100644 --- a/tests/host/test_hosts_managedby_host.yml +++ b/tests/host/test_hosts_managedby_host.yml @@ -19,7 +19,7 @@ - name: Host absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -31,7 +31,7 @@ - name: Host "{{ host5_fqdn }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ host5_fqdn }}" force: yes register: result @@ -39,7 +39,7 @@ - name: Hosts "{{ host1_fqdn }}" .. "{{ 'host5.' + ipaserver_domain }}" present and managed by "{{ 'host5.' + ipaserver_domain }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" managedby_host: "{{ host5_fqdn }}" @@ -61,7 +61,7 @@ - name: Hosts "{{ host1_fqdn }}" .. "{{ 'host5.' + ipaserver_domain }}" present and managed by "{{ 'host5.' + ipaserver_domain }}" again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" managedby_host: "{{ host5_fqdn }}" @@ -83,7 +83,7 @@ - name: Hosts "{{ host1_fqdn }}" .. "{{ 'host5.' + ipaserver_domain }}" managed by "{{ 'host5.' + ipaserver_domain }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" managedby_host: "{{ host5_fqdn }}" @@ -101,7 +101,7 @@ - name: Hosts "{{ host1_fqdn }}" .. "{{ 'host5.' + ipaserver_domain }}" not managed by "{{ 'host5.' + ipaserver_domain }}" ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" managedby_host: "{{ host5_fqdn }}" @@ -120,7 +120,7 @@ - name: Hosts "{{ host1_fqdn }}" .. "{{ 'host5.' + ipaserver_domain }}" not managed by "{{ 'host5.' + ipaserver_domain }}" again ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" managedby_host: "{{ host5_fqdn }}" @@ -139,7 +139,7 @@ - name: Hosts "{{ host1_fqdn }}" .. "{{ 'host5.' + ipaserver_domain }}" absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" - name: "{{ host2_fqdn }}" diff --git a/tests/host/test_hosts_principal.yml b/tests/host/test_hosts_principal.yml index 5918d35d..87e3a853 100644 --- a/tests/host/test_hosts_principal.yml +++ b/tests/host/test_hosts_principal.yml @@ -21,7 +21,7 @@ - name: Host host1... and host2... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" @@ -30,7 +30,7 @@ - name: Host hostX... present with principal host/testhostX... X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -45,7 +45,7 @@ - name: Host hostX... principal 'host/hostX... present (existing already) X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -59,7 +59,7 @@ - name: Host hostX... principal host/testhostX... present again X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -73,7 +73,7 @@ - name: Host hostX.. principal host/testhostX... absent X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -88,7 +88,7 @@ - name: Host hostX... principal host/testhostX... absent again X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -103,7 +103,7 @@ - name: Host hostX... principal host/testhostX... and host/myhostX... present X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -119,7 +119,7 @@ - name: Host hostX... principal host/testhostX... and host/myhostX... present again X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -135,7 +135,7 @@ - name: Host hostX... principal host/testhostX... and host/myhostX... absent X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -153,7 +153,7 @@ - name: Host hostX... principal host/testhostX... and host/myhostX... absent again X=[1,2] ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: "{{ host1_fqdn }}" principal: @@ -171,7 +171,7 @@ - name: Hosts host1... and host2... absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ host1_fqdn }}" - "{{ host2_fqdn }}" diff --git a/tests/hostgroup/test_hostgroup.yml b/tests/hostgroup/test_hostgroup.yml index 29935130..ba449a06 100644 --- a/tests/hostgroup/test_hostgroup.yml +++ b/tests/hostgroup/test_hostgroup.yml @@ -12,7 +12,7 @@ - name: Ensure host-group databases, mysql-server and oracle-server are absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - databases - mysql-server @@ -21,7 +21,7 @@ - name: Test hosts db1 and db2 absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ 'db1.' + ipaserver_domain }}" - "{{ 'db2.' + ipaserver_domain }}" @@ -29,7 +29,7 @@ - name: Host "{{ 'db1.' + ipaserver_domain }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ 'db1.' + ipaserver_domain }}" force: yes register: result @@ -37,7 +37,7 @@ - name: Host "{{ 'db2.' + ipaserver_domain }}" present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ 'db2.' + ipaserver_domain }}" force: yes register: result @@ -45,7 +45,7 @@ - name: Ensure host-group mysql-server is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: mysql-server state: present register: result @@ -53,7 +53,7 @@ - name: Ensure host-group mysql-server is present again ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: mysql-server state: present register: result @@ -61,7 +61,7 @@ - name: Ensure host-group oracle-server is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: oracle-server state: present register: result @@ -69,7 +69,7 @@ - name: Ensure host-group oracle-server is present again ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: oracle-server state: present register: result @@ -77,7 +77,7 @@ - name: Ensure host-group databases is present ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present host: @@ -89,7 +89,7 @@ - name: Ensure host-group databases is present again ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present host: @@ -101,7 +101,7 @@ - name: Ensure host db2 is member of host-group databases ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present host: @@ -112,7 +112,7 @@ - name: Ensure host db2 is member of host-group databases again ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present host: @@ -123,7 +123,7 @@ - name: Ensure host-group mysql-server is member of host-group databases ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present hostgroup: @@ -134,7 +134,7 @@ - name: Ensure host-group mysql-server is member of host-group databases again ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present hostgroup: @@ -145,7 +145,7 @@ - name: Ensure host-group oracle-server is member of host-group databases (again) ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: present hostgroup: @@ -156,7 +156,7 @@ - name: Ensure host-group databases, mysql-server and oracle-server are absent ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - databases - mysql-server @@ -167,7 +167,7 @@ - name: Ensure host-group databases, mysql-server and oracle-server are absent again ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - databases - mysql-server @@ -178,7 +178,7 @@ - name: Test hosts db1 and db2 absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - "{{ 'db1.' + ipaserver_domain }}" - "{{ 'db2.' + ipaserver_domain }}" diff --git a/tests/pwpolicy/test_pwpolicy.yml b/tests/pwpolicy/test_pwpolicy.yml index 1a01fca6..d5a254e4 100644 --- a/tests/pwpolicy/test_pwpolicy.yml +++ b/tests/pwpolicy/test_pwpolicy.yml @@ -94,7 +94,7 @@ - name: Ensure maxlife of 90 for global_policy ipapwpolicy: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword maxlife: 90 register: result failed_when: not result.changed diff --git a/tests/sudocmd/test_sudocmd.yml b/tests/sudocmd/test_sudocmd.yml index 523a6f74..c66e8108 100644 --- a/tests/sudocmd/test_sudocmd.yml +++ b/tests/sudocmd/test_sudocmd.yml @@ -8,7 +8,7 @@ tasks: - name: Ensure sudocmds are absent ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/bin/su - /usr/sbin/ifconfig @@ -17,7 +17,7 @@ - name: Ensure sudocmd is present ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: present register: result @@ -25,7 +25,7 @@ - name: Ensure sudocmd is present again ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: present register: result @@ -33,7 +33,7 @@ - name: Ensure sudocmd is absent ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: absent register: result @@ -41,7 +41,7 @@ - name: Ensure sudocmd is absent again ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: absent register: result @@ -49,7 +49,7 @@ - name: Ensure multiple sudocmd are present ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig - /usr/sbin/iwlist @@ -59,7 +59,7 @@ - name: Ensure multiple sudocmd are present again ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig - /usr/sbin/iwlist @@ -69,7 +69,7 @@ - name: Ensure multiple sudocmd are absent ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig - /usr/sbin/iwlist @@ -79,7 +79,7 @@ - name: Ensure multiple sudocmd are absent again ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig - /usr/sbin/iwlist @@ -88,7 +88,7 @@ failed_when: result.changed - name: Ensure sudocmds are absent ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/bin/su - /usr/sbin/ifconfig @@ -97,21 +97,21 @@ - name: Ensure sudocmds are absent ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig state: absent - name: Ensure sudocmds are present ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/iwlist state: present - name: Ensure multiple sudocmd are absent when only one was present ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig - /usr/sbin/iwlist diff --git a/tests/sudocmdgroup/test_sudocmdgroup.yml b/tests/sudocmdgroup/test_sudocmdgroup.yml index 688c0844..ce149de6 100644 --- a/tests/sudocmdgroup/test_sudocmdgroup.yml +++ b/tests/sudocmdgroup/test_sudocmdgroup.yml @@ -8,7 +8,7 @@ tasks: - name: Ensure sudocmds are present ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/bin/su - /usr/sbin/ifconfig @@ -17,13 +17,13 @@ - name: Ensure sudocmdgroup is absent ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: absent - name: Ensure sudocmdgroup is present ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: present register: result @@ -31,7 +31,7 @@ - name: Ensure sudocmdgroup is present again ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: present register: result @@ -39,7 +39,7 @@ - name: Ensure sudocmdgroup is absent ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: absent register: result @@ -47,7 +47,7 @@ - name: Ensure sudocmdgroup is absent again ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: absent register: result @@ -55,7 +55,7 @@ - name: Ensure testing sudocmdgroup is present ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: present register: result @@ -63,7 +63,7 @@ - name: Ensure sudo commands are present in existing sudocmdgroup ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -74,7 +74,7 @@ - name: Ensure sudo commands are present in existing sudocmdgroup, again ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -85,7 +85,7 @@ - name: Ensure sudo commands are absent in existing sudocmdgroup ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -97,7 +97,7 @@ - name: Ensure sudo commands are absent in existing sudocmdgroup, again ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -109,7 +109,7 @@ - name: Ensure sudo commands are present in sudocmdgroup ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -121,7 +121,7 @@ - name: Ensure one sudo command is not present in sudocmdgroup ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -132,7 +132,7 @@ - name: Ensure one sudo command is present in sudocmdgroup ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -143,7 +143,7 @@ - name: Ensure the other sudo command is not present in sudocmdgroup ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/iwlist @@ -154,7 +154,7 @@ - name: Ensure the other sudo commandsis not present in sudocmdgroup, again ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/iwlist diff --git a/tests/sudorule/test_sudorule.yml b/tests/sudorule/test_sudorule.yml index 4b4b6966..0c4aef7f 100644 --- a/tests/sudorule/test_sudorule.yml +++ b/tests/sudorule/test_sudorule.yml @@ -9,14 +9,14 @@ - name: Ensure hostgroup is present, with a host. ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: cluster host: - "{{ groups.ipaserver[0] }}" - name: Ensure some sudocmds are available ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /sbin/ifconfig - /usr/bin/vim @@ -24,14 +24,14 @@ - name: Ensure sudocmdgroup is available ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: test_sudorule sudocmd: /usr/bin/vim state: present - name: Ensure sudorules are absent ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - testrule1 - allusers @@ -41,21 +41,21 @@ - name: Ensure sudorule is present ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 register: result failed_when: not result.changed - name: Ensure sudorule is present again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 register: result failed_when: result.changed - name: Ensure sudorule is present, runAsUserCategory. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 runAsUserCategory: all register: result @@ -63,7 +63,7 @@ - name: Ensure sudorule is present, with usercategory 'all' ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allusers usercategory: all register: result @@ -71,7 +71,7 @@ - name: Ensure sudorule is present, with usercategory 'all', again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allusers usercategory: all register: result @@ -79,7 +79,7 @@ - name: Ensure sudorule is present, with hostategory 'all' ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts hostcategory: all register: result @@ -87,7 +87,7 @@ - name: Ensure sudorule is present, with hostategory 'all', again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts hostcategory: all register: result @@ -95,13 +95,13 @@ - name: Ensure sudorule is disabled ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: disabled - name: Ensure sudorule is disabled, again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: disabled register: result @@ -109,7 +109,7 @@ - name: Ensure sudorule is enabled ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: enabled register: result @@ -117,7 +117,7 @@ - name: Ensure sudorule is enabled, again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: enabled register: result @@ -125,7 +125,7 @@ - name: Ensure sudorule is present and some sudocmd are allowed. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: - /sbin/ifconfig @@ -135,7 +135,7 @@ - name: Ensure sudorule is present and some sudocmd are allowed, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: - /sbin/ifconfig @@ -145,7 +145,7 @@ - name: Ensure sudorule is present and some sudocmd are denyed. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 deny_sudocmd: - /usr/bin/vim @@ -155,7 +155,7 @@ - name: Ensure sudorule is present and some sudocmd are denyed, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 deny_sudocmd: - /usr/bin/vim @@ -165,7 +165,7 @@ - name: Ensure sudorule is present and, sudocmds are absent. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: /sbin/ifconfig deny_sudocmd: /usr/bin/vim @@ -176,7 +176,7 @@ - name: Ensure sudorule is present and, sudocmds are absent, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: /sbin/ifconfig deny_sudocmd: /usr/bin/vim @@ -187,7 +187,7 @@ - name: Ensure sudorule is present with cmdcategory 'all'. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allcommands cmdcategory: all register: result @@ -195,7 +195,7 @@ - name: Ensure sudorule is present with cmdcategory 'all', again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allcommands cmdcategory: all register: result @@ -203,7 +203,7 @@ - name: Ensure host "{{ groups.ipaserver[0] }}" is present in sudorule. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 host: "{{ groups.ipaserver[0] }}" action: member @@ -212,7 +212,7 @@ - name: Ensure host "{{ groups.ipaserver[0] }}" is present in sudorule, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 host: "{{ groups.ipaserver[0] }}" action: member @@ -221,7 +221,7 @@ - name: Ensure hostgroup is present in sudorule. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster action: member @@ -230,7 +230,7 @@ - name: Ensure hostgroup is present in sudorule, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster action: member @@ -239,7 +239,7 @@ - name: Ensure sudorule is present, with an allow_sudocmdgroup. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmdgroup: test_sudorule state: present @@ -248,7 +248,7 @@ - name: Ensure sudorule is present, with an allow_sudocmdgroup, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmdgroup: test_sudorule state: present @@ -257,7 +257,7 @@ - name: Ensure sudorule is present, but allow_sudocmdgroup is absent. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmdgroup: test_sudorule action: member @@ -267,7 +267,7 @@ - name: Ensure sudorule is present, but allow_sudocmdgroup is absent. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmdgroup: test_sudorule action: member @@ -277,7 +277,7 @@ - name: Ensure sudorule is present, with an deny_sudocmdgroup. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 deny_sudocmdgroup: test_sudorule state: present @@ -286,7 +286,7 @@ - name: Ensure sudorule is present, with an deny_sudocmdgroup, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 deny_sudocmdgroup: test_sudorule state: present @@ -295,7 +295,7 @@ - name: Ensure sudorule is present, but deny_sudocmdgroup is absent. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 deny_sudocmdgroup: test_sudorule action: member @@ -305,7 +305,7 @@ - name: Ensure sudorule is present, but deny_sudocmdgroup is absent, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 deny_sudocmdgroup: test_sudorule action: member @@ -315,7 +315,7 @@ - name: Ensure sudorule is absent ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: absent register: result @@ -323,7 +323,7 @@ - name: Ensure sudorule is absent, again. ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: absent register: result @@ -331,7 +331,7 @@ - name: Ensure sudorule allhosts is absent ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts state: absent register: result @@ -339,7 +339,7 @@ - name: Ensure sudorule allhosts is absent, again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts state: absent register: result @@ -347,7 +347,7 @@ - name: Ensure sudorule allusers is absent ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allusers state: absent register: result @@ -355,7 +355,7 @@ - name: Ensure sudorule allusers is absent, again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allusers state: absent register: result @@ -363,7 +363,7 @@ - name: Ensure sudorule allcommands is absent ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allcommands state: absent register: result @@ -371,7 +371,7 @@ - name: Ensure sudorule allcommands is absent, again ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allcommands state: absent register: result @@ -380,19 +380,19 @@ # cleanup - name : Ensure sudocmdgroup is absent ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: test_sudorule state: absent - name: Ensure hostgroup is absent. ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: cluster state: absent - name: Ensure sudocmds are absent ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /sbin/ifconfig - /usr/bin/vim diff --git a/tests/user/test_user_random.yml b/tests/user/test_user_random.yml index 47e4a350..44b9373a 100644 --- a/tests/user/test_user_random.yml +++ b/tests/user/test_user_random.yml @@ -6,7 +6,7 @@ tasks: - name: Users user1 and user2 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - user1 - user2 @@ -14,7 +14,7 @@ - name: User user1 present with random password ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user1 first: first1 last: last1 @@ -30,14 +30,14 @@ - name: User user1 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - user1 state: absent - name: Users user1 and user1 present with random password ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 first: first1 @@ -63,7 +63,7 @@ - name: Users user1 and user2 absent ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - user1 - user2 diff --git a/tests/vault/test_vault.yml b/tests/vault/test_vault.yml index de5a2635..5b467f61 100644 --- a/tests/vault/test_vault.yml +++ b/tests/vault/test_vault.yml @@ -9,7 +9,7 @@ - name: Ensure user vaults are absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - stdvault - symvault @@ -19,7 +19,7 @@ - name: Ensure test users do not exist. ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - user01 - user02 @@ -28,53 +28,53 @@ - name: Ensure test groups do not exist. ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: vaultgroup state: absent - name: Ensure vaultgroup exists. ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: vaultgroup - name: Ensure user01 exists. ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user01 first: First last: Start - name: Ensure user02 exists. ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user02 first: Second last: Middle - name: Ensure user03 exists. ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user03 first: Third last: Last - name: Ensure shared vaults are absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sharedvault shared: True state: absent - name: Ensure service vaults are absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" state: absent - name: Ensure symmetric vault is present ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: user01 vault_password: MyVaultPassword123 @@ -84,7 +84,7 @@ - name: Ensure symmetric vault is present, again ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: user01 vault_password: MyVaultPassword123 @@ -94,7 +94,7 @@ - name: Archive data to symmetric vault ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: user01 vault_password: MyVaultPassword123 @@ -105,7 +105,7 @@ - name: Archive data with non-ASCII characters to symmetric vault ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: user01 vault_password: MyVaultPassword123 @@ -116,7 +116,7 @@ - name: Ensure symmetric vault is absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: user01 state: absent @@ -125,7 +125,7 @@ - name: Ensure symmetric vault is absent, again ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: user01 state: absent @@ -134,7 +134,7 @@ - name: Ensure asymmetric vault is present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 description: A symmetric private vault. @@ -151,7 +151,7 @@ - name: Ensure asymmetric vault is present, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 vault_public_key: @@ -167,7 +167,7 @@ - name: Archive data in asymmetric vault. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 vault_data: Hello World. @@ -177,7 +177,7 @@ - name: Ensure asymmetric vault is absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 state: absent @@ -186,7 +186,7 @@ - name: Ensure asymmetric vault is absent, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 state: absent @@ -195,7 +195,7 @@ - name: Ensure standard vault is present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard username: user01 @@ -205,7 +205,7 @@ - name: Ensure standard vault is present, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 vault_type: standard @@ -215,7 +215,7 @@ - name: Archive data in standard vault. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 vault_data: Hello World. @@ -225,7 +225,7 @@ - name: Ensure standard vault member user is present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -236,7 +236,7 @@ - name: Ensure standard vault member user is present, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -247,7 +247,7 @@ - name: Ensure more vault member users are present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -259,7 +259,7 @@ - name: Ensure vault member user is still present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -270,7 +270,7 @@ - name: Ensure vault users are absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -283,7 +283,7 @@ - name: Ensure vault users are absent, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -296,7 +296,7 @@ - name: Ensure vault user is absent, once more. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -308,7 +308,7 @@ - name: Ensure vault member group is present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -318,7 +318,7 @@ - name: Ensure vault member group is present, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -328,7 +328,7 @@ - name: Ensure vault member group is absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -339,7 +339,7 @@ - name: Ensure vault member group is absent, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 action: member @@ -350,7 +350,7 @@ - name: Ensure vault is absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 state: absent @@ -359,7 +359,7 @@ - name: Ensure vault is absent, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 state: absent @@ -368,7 +368,7 @@ - name: Ensure shared vault is present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sharedvault shared: True ipavaultpassword: MyVaultPassword123 @@ -377,7 +377,7 @@ - name: Ensure shared vault is absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sharedvault shared: True state: absent @@ -386,7 +386,7 @@ - name: Ensure service vault is present. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: svcvault ipavaultpassword: MyVaultPassword123 service: "HTTP/{{ groups.ipaserver[0] }}" @@ -395,7 +395,7 @@ - name: Ensure service vault is absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" state: absent @@ -404,7 +404,7 @@ - name: Ensure vault is present, with members. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 vault_type: standard @@ -418,7 +418,7 @@ - name: Ensure vault is present, with members, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 vault_type: standard @@ -432,7 +432,7 @@ - name: Ensure user02 is not a member of vault stdvault. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 users: user02 @@ -443,7 +443,7 @@ - name: Ensure user02 is not a member of vault stdvault, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 users: user02 @@ -454,7 +454,7 @@ - name: Ensure user02 is a member of vault stdvault. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 users: user02 @@ -464,7 +464,7 @@ - name: Ensure user02 is a member of vault stdvault, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 users: user03 @@ -474,7 +474,7 @@ - name: Ensure user03 owns vault stdvault. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 owners: user03 @@ -484,7 +484,7 @@ - name: Ensure user03 owns vault stdvault, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 owners: user03 @@ -494,7 +494,7 @@ - name: Ensure user03 is not owner of stdvault. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 owners: user03 @@ -505,7 +505,7 @@ - name: Ensure user03 is not owner of stdvault, again. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 owners: user03 @@ -516,7 +516,7 @@ - name: Ensure vault is absent. ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: user01 state: absent @@ -524,7 +524,7 @@ # cleaup - name: Ensure test vaults are absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - stdvault - symvault @@ -534,21 +534,21 @@ - name: Ensure shared vaults are absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sharedvault shared: True state: absent - name: Ensure service vaults are absent ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" state: absent - name: Ensure test users do not exist. ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - user01 - user02 @@ -557,6 +557,6 @@ - name: Ensure test groups do not exist. ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: vaultgroup state: absent From 2b29a90c0d0ac8b4dc2dae621a6bdfc5b6394f5e Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Wed, 26 Feb 2020 12:39:22 +0100 Subject: [PATCH 2/4] READMES: Unite admin password Use SomeADMINpassword as the admin password everywhere, also in the README files. --- README-group.md | 12 ++++++------ README-hbacrule.md | 10 +++++----- README-hbacsvc.md | 6 +++--- README-hbacsvcgroup.md | 10 +++++----- README-host.md | 22 +++++++++++----------- README-hostgroup.md | 8 ++++---- README-pwpolicy.md | 6 +++--- README-sudocmd.md | 4 ++-- README-sudocmdgroup.md | 8 ++++---- README-sudorule.md | 8 ++++---- README-topology.md | 8 ++++---- README-user.md | 26 +++++++++++++------------- README-vault.md | 14 +++++++------- 13 files changed, 71 insertions(+), 71 deletions(-) diff --git a/README-group.md b/README-group.md index 8bba3237..0fb8a265 100644 --- a/README-group.md +++ b/README-group.md @@ -52,20 +52,20 @@ Example playbook to add groups: tasks: # Create group ops with gid 1234 - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops gidnumber: 1234 # Create group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops user: - pinky # Create group appops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: appops ``` @@ -80,7 +80,7 @@ Example playbook to add users to a group: tasks: # Add user member brain to group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops action: member user: @@ -100,7 +100,7 @@ Example playbook to add group members to a group: tasks: # Add group members sysops and appops to group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops group: - sysops @@ -118,7 +118,7 @@ Example playbook to remove groups: tasks: # Remove goups sysops, appops and ops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops,appops,ops state: absent ``` diff --git a/README-hbacrule.md b/README-hbacrule.md index 39a242c1..d14692f9 100644 --- a/README-hbacrule.md +++ b/README-hbacrule.md @@ -50,7 +50,7 @@ Example playbook to make sure HBAC Rule login exists: tasks: # Ensure HBAC Rule login is present - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login ``` @@ -66,7 +66,7 @@ Example playbook to make sure HBAC Rule login exists with the only HBAC Service tasks: # Ensure HBAC Rule login is present with the only HBAC Service sshd - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -83,7 +83,7 @@ Example playbook to make sure HBAC Service sshd is present in HBAC Rule login: tasks: # Ensure HBAC Service sshd is present in HBAC Rule login - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -101,7 +101,7 @@ Example playbook to make sure HBAC Service sshd is absent in HBAC Rule login: tasks: # Ensure HBAC Service sshd is present in HBAC Rule login - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -120,7 +120,7 @@ Example playbook to make sure HBAC Rule login is absent: tasks: # Ensure HBAC Rule login is present - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login state: absent ``` diff --git a/README-hbacsvc.md b/README-hbacsvc.md index 861ed6f9..7203e549 100644 --- a/README-hbacsvc.md +++ b/README-hbacsvc.md @@ -50,7 +50,7 @@ Example playbook to make sure HBAC Service for http is present tasks: # Ensure HBAC Service for http is present - ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http description: Web service ``` @@ -66,7 +66,7 @@ Example playbook to make sure HBAC Service for tftp is present tasks: # Ensure HBAC Service for tftp is present - ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: tftp description: TFTPWeb service ``` @@ -82,7 +82,7 @@ Example playbook to make sure HBAC Services for http and tftp are absent tasks: # Ensure HBAC Service for http and tftp are absent - ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http,tftp state: absent ``` diff --git a/README-hbacsvcgroup.md b/README-hbacsvcgroup.md index 89dd0222..56d5f7a6 100644 --- a/README-hbacsvcgroup.md +++ b/README-hbacsvcgroup.md @@ -50,7 +50,7 @@ Example playbook to make sure HBAC Service Group login exists: tasks: # Ensure HBAC Service Group login is present - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login ``` @@ -66,7 +66,7 @@ Example playbook to make sure HBAC Service Group login exists with the only HBAC tasks: # Ensure HBAC Service Group login is present with the only HBAC Service sshd - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -83,7 +83,7 @@ Example playbook to make sure HBAC Service sshd is present in HBAC Service Group tasks: # Ensure HBAC Service sshd is present in HBAC Service Group login - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -101,7 +101,7 @@ Example playbook to make sure HBAC Service sshd is absent in HBAC Service Group tasks: # Ensure HBAC Service sshd is present in HBAC Service Group login - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd @@ -120,7 +120,7 @@ Example playbook to make sure HBAC Service Group login is absent: tasks: # Ensure HBAC Service Group login is present - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login state: absent ``` diff --git a/README-host.md b/README-host.md index ecc59a9c..5f540cac 100644 --- a/README-host.md +++ b/README-host.md @@ -52,7 +52,7 @@ Example playbook to ensure host presence: tasks: # Ensure host is present - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com description: Example host ip_address: 192.168.0.123 @@ -79,7 +79,7 @@ Example playbook to ensure host presence with several IP addresses: tasks: # Ensure host is present - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com description: Example host ip_address: @@ -109,7 +109,7 @@ Example playbook to ensure IP addresses are present for a host: tasks: # Ensure host is present - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com ip_address: - 192.168.0.124 @@ -130,7 +130,7 @@ Example playbook to ensure IP addresses are absent for a host: tasks: # Ensure host is present - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com ip_address: - 192.168.0.124 @@ -151,7 +151,7 @@ Example playbook to ensure host presence without DNS: tasks: # Ensure host is present without DNS - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host02.example.com description: Example host force: yes @@ -169,7 +169,7 @@ Example playbook to ensure host presence with a random password: tasks: - name: Host host01.example.com present with random password ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com random: yes force: yes @@ -193,7 +193,7 @@ Example playbook to ensure presence of several hosts with a random password: tasks: - name: Hosts host01.example.com and host01.example.com present with random passwords ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com random: yes @@ -225,7 +225,7 @@ Example playbook to ensure presence of host member principal: tasks: - name: Host host01.example.com present with principals host/testhost01.example.com and host/myhost01.example.com ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com principal: - host/testhost01.example.com @@ -244,7 +244,7 @@ Example playbook to ensure presence of host member certificate: tasks: - name: Host host01.example.com present with certificate ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - MIIC/zCCAeegAwIBAg... @@ -262,7 +262,7 @@ Example playbook to ensure presence of member managedby_host for serveral hosts: tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.exmaple.com managedby_host: server.exmaple.com @@ -283,7 +283,7 @@ Example playbook to disable a host: tasks: # Ensure host is disabled - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com update_dns: yes state: disabled diff --git a/README-hostgroup.md b/README-hostgroup.md index 39ea77f0..85701244 100644 --- a/README-hostgroup.md +++ b/README-hostgroup.md @@ -52,7 +52,7 @@ Example playbook to make sure hostgroup databases exists: tasks: # Ensure host-group databases is present - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com @@ -72,7 +72,7 @@ Example playbook to make sure that hosts and hostgroups are present in existing tasks: # Ensure hosts and hostgroups are present in existing databases hostgroup - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com @@ -94,7 +94,7 @@ Example playbook to make sure hosts and hostgroups are absent in databases hostg tasks: # Ensure hosts and hostgroups are absent in databases hostgroup - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com @@ -116,7 +116,7 @@ Example playbook to make sure host-group databases is absent: tasks: # Ensure host-group databases is absent - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: absent ``` diff --git a/README-pwpolicy.md b/README-pwpolicy.md index 847b32d3..f0b5d885 100644 --- a/README-pwpolicy.md +++ b/README-pwpolicy.md @@ -45,7 +45,7 @@ Example playbook to ensure presence of pwpolicies for exisiting group ops: tasks: - name: Ensure presence of pwpolicies for group ops ipapwpolicy: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops minlife: 7 maxlife: 49 @@ -67,7 +67,7 @@ Example playbook to ensure absence of pwpolicies for group ops: tasks: # Ensure absence of pwpolicies for group ops - ipapwpolicy: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops state: absent ``` @@ -83,7 +83,7 @@ Example playbook to ensure maxlife is set to 49 in global policy: tasks: # Ensure absence of pwpolicies for group ops - ipapwpolicy: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword maxlife: 49 ``` diff --git a/README-sudocmd.md b/README-sudocmd.md index 2842a2fc..64300e08 100644 --- a/README-sudocmd.md +++ b/README-sudocmd.md @@ -52,7 +52,7 @@ Example playbook to make sure sudocmd exists: tasks: # Ensure sudocmd is present - ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: present ``` @@ -68,7 +68,7 @@ Example playbook to make sure sudocmd is absent: tasks: # Ensure sudocmd are absent - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: absent ``` diff --git a/README-sudocmdgroup.md b/README-sudocmdgroup.md index f24b2cc4..cca08c19 100644 --- a/README-sudocmdgroup.md +++ b/README-sudocmdgroup.md @@ -52,7 +52,7 @@ Example playbook to make sure sudocmdgroup is present: tasks: # Ensure sudocmdgroup is present - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group01 description: Group of important commands ``` @@ -68,7 +68,7 @@ Example playbook to make sure that a sudo command and sudocmdgroups are present tasks: # Ensure sudo commands are present in existing sudocmdgroup - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group01 sudocmd: - /usr/bin/su @@ -88,7 +88,7 @@ Example playbook to make sure that a sudo command and sudocmdgroups are absent i tasks: # Ensure sudocmds are absent in existing sudocmdgroup - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group01 sudocmd: - /usr/bin/su @@ -108,7 +108,7 @@ Example playbook to make sure sudocmdgroup is absent: tasks: # Ensure sudocmdgroup is absent - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: group01 state: absent ``` diff --git a/README-sudorule.md b/README-sudorule.md index 50c73ade..ffcab963 100644 --- a/README-sudorule.md +++ b/README-sudorule.md @@ -50,7 +50,7 @@ Example playbook to make sure Sudo Rule is present: tasks: # Ensure Sudo Rule is present - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 ``` @@ -66,7 +66,7 @@ Example playbook to make sure sudocmds are present in Sudo Rule: tasks: # Ensure Sudo Rule is present - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: - /sbin/ifconfig @@ -85,7 +85,7 @@ Example playbook to make sure sudocmds are not present in Sudo Rule: tasks: # Ensure Sudo Rule is present - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: - /sbin/ifconfig @@ -104,7 +104,7 @@ Example playbook to make sure Sudo Rule is absent: tasks: # Ensure Sudo Rule is present - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: absent ``` diff --git a/README-topology.md b/README-topology.md index dc595ebd..84ab240d 100644 --- a/README-topology.md +++ b/README-topology.md @@ -50,7 +50,7 @@ Example playbook to add a topology segment with default name (cn): tasks: - name: Add topology segment ipatopologysegment: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain left: ipareplica1.test.local right: ipareplica2.test.local @@ -70,7 +70,7 @@ Example playbook to delete a topology segment: tasks: - name: Delete topology segment ipatopologysegment: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain left: ipareplica1.test.local right: ipareplica2.test.local @@ -90,7 +90,7 @@ Example playbook to reinitialize a topology segment: tasks: - name: Reinitialize topology segment ipatopologysegment: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain left: ipareplica1.test.local right: ipareplica2.test.local @@ -111,7 +111,7 @@ Example playbook to verify a topology suffix: tasks: - name: Verify topology suffix ipatopologysuffix: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain state: verified ``` diff --git a/README-user.md b/README-user.md index 991121c6..6958ebe5 100644 --- a/README-user.md +++ b/README-user.md @@ -52,7 +52,7 @@ Example playbook to ensure a user is present: tasks: # Ensure user pinky is present - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky first: pinky last: Acme @@ -66,7 +66,7 @@ Example playbook to ensure a user is present: # Ensure user brain is present - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: brain first: brain last: Acme @@ -85,7 +85,7 @@ These two `ipauser` module calls can be combined into one with the `users` varia tasks: # Ensure users pinky and brain are present - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: pinky first: pinky @@ -153,7 +153,7 @@ Ensure user pinky is present with a generated random password and print the rand tasks: # Ensure user pinky is present with a random password - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: brain first: brain last: Acme @@ -176,7 +176,7 @@ Ensure users pinky and brain are present with a generated random password and pr tasks: # Ensure users pinky and brain are present with random password - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: pinky first: pinky @@ -212,7 +212,7 @@ Example playbook to delete a user, but preserve it: tasks: # Remove but preserve user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky preserve: yes state: absent @@ -231,7 +231,7 @@ Example playbook to delete a user, but preserve it using the `users` variable: tasks: # Remove but preserve user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: pinky preserve: yes @@ -252,7 +252,7 @@ Example playbook to undelete a preserved user. tasks: # Undelete preserved user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: undeleted ``` @@ -271,7 +271,7 @@ Example playbook to disable a user: tasks: # Disable user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: disabled ``` @@ -290,7 +290,7 @@ Example playbook to enable users: tasks: # Enable user pinky and brain - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: enabled ``` @@ -309,7 +309,7 @@ Example playbook to unlock users: tasks: # Unlock user pinky and brain - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: unlocked ``` @@ -326,7 +326,7 @@ Example playbook to ensure users are absent: tasks: # Ensure users pinky and brain are absent - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: absent ``` @@ -345,7 +345,7 @@ Example playbook to ensure users are absent: tasks: # Ensure users pinky and brain are absent - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: pinky - name: brain diff --git a/README-vault.md b/README-vault.md index 4be24696..9c0c833c 100644 --- a/README-vault.md +++ b/README-vault.md @@ -51,7 +51,7 @@ Example playbook to make sure vault is present: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 @@ -68,7 +68,7 @@ Example playbook to make sure that a vault and its members are present: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin users: user01 @@ -86,7 +86,7 @@ Example playbook to make sure that a vault member is present in vault: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin users: user01 @@ -103,7 +103,7 @@ Example playbook to make sure that a vault owner is absent in vault: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin owner: user01 @@ -121,7 +121,7 @@ Example playbook to make sure vault data is present in a symmetric vault: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 @@ -141,7 +141,7 @@ Example playbook to make sure vault data is absent in a symmetric vault: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 @@ -159,7 +159,7 @@ Example playbook to make sure vault is absent: tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin state: absent From d370ed27370792979acc2e17d9b8d9022b20241e Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Wed, 26 Feb 2020 12:40:22 +0100 Subject: [PATCH 3/4] playbooks: Unite admin password Use SomeADMINpassword as the admin password everywhere, also in all playbooks. --- playbooks/hbacrule/ensure-hbarule-allhosts-absent.yml | 2 +- playbooks/hbacrule/ensure-hbarule-allhosts-disabled.yml | 2 +- playbooks/hbacrule/ensure-hbarule-allhosts-enabled.yml | 2 +- playbooks/hbacrule/ensure-hbarule-allhosts-present.yml | 2 +- .../ensure-hbarule-allhosts-server-member-absent.yml | 2 +- .../ensure-hbarule-allhosts-server-member-present.yml | 2 +- playbooks/hbacsvc/ensure-hbacsvc-absent.yml | 2 +- playbooks/hbacsvc/ensure-hbacsvc-present.yml | 4 ++-- playbooks/hbacsvcgroup/ensure-hbacsvcgroup-absent.yml | 2 +- .../hbacsvcgroup/ensure-hbacsvcgroup-member-absent.yml | 2 +- .../hbacsvcgroup/ensure-hbacsvcgroup-member-present.yml | 2 +- playbooks/hbacsvcgroup/ensure-hbacsvcgroup-present.yml | 2 +- playbooks/host/delete-host.yml | 2 +- playbooks/host/disable-host.yml | 2 +- playbooks/host/ensure_host_with_randompassword.yml | 2 +- playbooks/host/host-member-allow_create_keytab-absent.yml | 2 +- playbooks/host/host-member-allow_create_keytab-present.yml | 2 +- playbooks/host/host-member-allow_retrieve_keytab-absent.yml | 2 +- .../host/host-member-allow_retrieve_keytab-present.yml | 2 +- playbooks/host/host-member-certificate-absent.yml | 2 +- playbooks/host/host-member-certificate-present.yml | 2 +- playbooks/host/host-member-ipaddresses-absent.yml | 2 +- playbooks/host/host-member-ipaddresses-present.yml | 2 +- playbooks/host/host-member-managedby_host-absent.yml | 2 +- playbooks/host/host-member-managedby_host-present.yml | 2 +- playbooks/host/host-member-principal-absent.yml | 2 +- playbooks/host/host-member-principal-present.yml | 2 +- playbooks/host/host-present-with-allow_create_keytab.yml | 2 +- playbooks/host/host-present-with-allow_retrieve_keytab.yml | 2 +- playbooks/host/host-present-with-certificate.yml | 2 +- playbooks/host/host-present-with-managedby_host.yml | 2 +- playbooks/host/host-present-with-principal.yml | 2 +- playbooks/host/host-present-with-randompassword.yml | 2 +- playbooks/host/host-present-with-several-ip-addresses.yml | 2 +- playbooks/host/host-present.yml | 2 +- playbooks/host/hosts-member-certificate-absent.yml | 2 +- playbooks/host/hosts-member-certificate-present.yml | 2 +- playbooks/host/hosts-member-managedby_host-absent.yml | 2 +- playbooks/host/hosts-member-managedby_host-present.yml | 2 +- playbooks/host/hosts-member-principal-absent.yml | 2 +- playbooks/host/hosts-member-principal-present.yml | 2 +- playbooks/host/hosts-present-with-certificate.yml | 2 +- playbooks/host/hosts-present-with-managedby_host.yml | 2 +- playbooks/host/hosts-present-with-randompasswords.yml | 2 +- playbooks/hostgroup/ensure-hostgroup-is-absent.yml | 2 +- playbooks/hostgroup/ensure-hostgroup-is-present.yml | 2 +- .../ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml | 2 +- ...ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml | 2 +- playbooks/sudocmd/ensure-sudocmd-is-absent.yml | 2 +- playbooks/sudocmd/ensure-sudocmd-is-present.yml | 2 +- .../ensure-sudocmd-are-absent-in-sudocmdgroup.yml | 2 +- .../ensure-sudocmd-are-present-in-sudocmdgroup.yml | 4 ++-- .../sudorule/ensure-sudorule-does-not-have-sudooption.yml | 2 +- playbooks/sudorule/ensure-sudorule-has-sudooption.yml | 2 +- .../sudorule/ensure-sudorule-host-member-is-absent.yml | 2 +- .../sudorule/ensure-sudorule-host-member-is-present.yml | 2 +- .../sudorule/ensure-sudorule-hostgroup-member-is-absent.yml | 2 +- .../ensure-sudorule-hostgroup-member-is-present.yml | 2 +- playbooks/sudorule/ensure-sudorule-is-disabled.yml | 2 +- playbooks/sudorule/ensure-sudorule-is-enabled.yml | 2 +- .../sudorule/ensure-sudorule-is-present-with-order.yml | 2 +- playbooks/sudorule/ensure-sudorule-is-present.yml | 2 +- playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml | 2 +- playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml | 2 +- playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml | 2 +- playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml | 2 +- playbooks/topology/add-topologysegment.yml | 2 +- playbooks/topology/delete-topologysegment.yml | 2 +- playbooks/topology/reinitialize-topologysegment.yml | 2 +- playbooks/topology/verify-topologysuffix.yml | 2 +- playbooks/user/add-group.yml | 6 +++--- playbooks/user/add-groups-to-group.yml | 2 +- playbooks/user/add-user-to-group.yml | 2 +- playbooks/user/add-user.yml | 2 +- playbooks/user/delete-group.yml | 2 +- playbooks/user/delete-preserve-user.yml | 2 +- playbooks/user/delete-user.yml | 2 +- playbooks/user/disable-user.yml | 2 +- playbooks/user/enable-user.yml | 2 +- playbooks/user/ensure_user_with_randompassword.yml | 2 +- playbooks/user/ensure_users_with_randompasswords.yml | 2 +- playbooks/user/undelete-user.yml | 2 +- playbooks/user/unlock-users.yml | 2 +- playbooks/vault/data-archive-in-asymmetric-vault.yml | 2 +- playbooks/vault/data-archive-in-symmetric-vault.yml | 2 +- playbooks/vault/ensure-asymetric-vault-is-absent.yml | 2 +- playbooks/vault/ensure-asymetric-vault-is-present.yml | 2 +- playbooks/vault/ensure-service-vault-is-absent.yml | 2 +- playbooks/vault/ensure-service-vault-is-present.yml | 2 +- playbooks/vault/ensure-shared-vault-is-absent.yml | 2 +- playbooks/vault/ensure-shared-vault-is-present.yml | 2 +- playbooks/vault/ensure-standard-vault-is-absent.yml | 2 +- playbooks/vault/ensure-standard-vault-is-present.yml | 2 +- playbooks/vault/ensure-symetric-vault-is-absent.yml | 2 +- playbooks/vault/ensure-symetric-vault-is-present.yml | 2 +- playbooks/vault/ensure-vault-is-present-with-members.yml | 2 +- playbooks/vault/ensure-vault-member-group-is-absent.yml | 2 +- playbooks/vault/ensure-vault-member-group-is-present.yml | 2 +- playbooks/vault/ensure-vault-member-user-is-absent.yml | 2 +- playbooks/vault/ensure-vault-member-user-is-present.yml | 2 +- playbooks/vault/ensure-vault-owner-is-absent.yml | 2 +- playbooks/vault/ensure-vault-owner-is-present.yml | 2 +- 102 files changed, 106 insertions(+), 106 deletions(-) diff --git a/playbooks/hbacrule/ensure-hbarule-allhosts-absent.yml b/playbooks/hbacrule/ensure-hbarule-allhosts-absent.yml index 73dfd2ac..fda5aeac 100644 --- a/playbooks/hbacrule/ensure-hbarule-allhosts-absent.yml +++ b/playbooks/hbacrule/ensure-hbarule-allhosts-absent.yml @@ -7,6 +7,6 @@ tasks: - name: Ensure HBAC Rule allhosts is absent ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts state: absent diff --git a/playbooks/hbacrule/ensure-hbarule-allhosts-disabled.yml b/playbooks/hbacrule/ensure-hbarule-allhosts-disabled.yml index 33196df5..4a5c7b15 100644 --- a/playbooks/hbacrule/ensure-hbarule-allhosts-disabled.yml +++ b/playbooks/hbacrule/ensure-hbarule-allhosts-disabled.yml @@ -7,6 +7,6 @@ tasks: - name: Ensure HBAC Rule allhosts is disabled ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts state: disabled diff --git a/playbooks/hbacrule/ensure-hbarule-allhosts-enabled.yml b/playbooks/hbacrule/ensure-hbarule-allhosts-enabled.yml index ad97b975..86b815f1 100644 --- a/playbooks/hbacrule/ensure-hbarule-allhosts-enabled.yml +++ b/playbooks/hbacrule/ensure-hbarule-allhosts-enabled.yml @@ -7,6 +7,6 @@ tasks: - name: Ensure HBAC Rule allhosts is enabled ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts state: enabled diff --git a/playbooks/hbacrule/ensure-hbarule-allhosts-present.yml b/playbooks/hbacrule/ensure-hbarule-allhosts-present.yml index 203f914a..d43bc4e5 100644 --- a/playbooks/hbacrule/ensure-hbarule-allhosts-present.yml +++ b/playbooks/hbacrule/ensure-hbarule-allhosts-present.yml @@ -7,6 +7,6 @@ tasks: - name: Ensure HBAC Rule allhosts is present ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts usercategory: all diff --git a/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-absent.yml b/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-absent.yml index d3a77394..bbe5e8ca 100644 --- a/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-absent.yml +++ b/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-absent.yml @@ -7,7 +7,7 @@ tasks: - name: Ensure host server is absent in HBAC Rule allhosts ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts host: server action: member diff --git a/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-present.yml b/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-present.yml index 286402fc..d1703b27 100644 --- a/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-present.yml +++ b/playbooks/hbacrule/ensure-hbarule-allhosts-server-member-present.yml @@ -7,7 +7,7 @@ tasks: - name: Ensure host server is present in HBAC Rule allhosts ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts host: server action: member diff --git a/playbooks/hbacsvc/ensure-hbacsvc-absent.yml b/playbooks/hbacsvc/ensure-hbacsvc-absent.yml index cb766e73..357fa8af 100644 --- a/playbooks/hbacsvc/ensure-hbacsvc-absent.yml +++ b/playbooks/hbacsvc/ensure-hbacsvc-absent.yml @@ -7,6 +7,6 @@ tasks: - name: Ensure HBAC Services for http and tftp are absent ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http,tftp state: absent diff --git a/playbooks/hbacsvc/ensure-hbacsvc-present.yml b/playbooks/hbacsvc/ensure-hbacsvc-present.yml index 1ed1d7c9..6892125d 100644 --- a/playbooks/hbacsvc/ensure-hbacsvc-present.yml +++ b/playbooks/hbacsvc/ensure-hbacsvc-present.yml @@ -7,12 +7,12 @@ tasks: - name: Ensure HBAC Service for http is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http description: Web service - name: Ensure HBAC Service for tftp is present ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: tftp description: TFTP service diff --git a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-absent.yml b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-absent.yml index c4e24d13..7564b9bf 100644 --- a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-absent.yml +++ b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-absent.yml @@ -7,7 +7,7 @@ tasks: - name: Ensure HBAC Service Group login is absent ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd diff --git a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-absent.yml b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-absent.yml index b72703c3..f37fa27c 100644 --- a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-absent.yml +++ b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-absent.yml @@ -7,7 +7,7 @@ tasks: - name: Ensure HBAC Services sshd is absent in HBAC Service Group login ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd diff --git a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-present.yml b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-present.yml index 9b213c7b..c03c5571 100644 --- a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-present.yml +++ b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-present.yml @@ -7,7 +7,7 @@ tasks: - name: Ensure HBAC Service sshd is present in HBAC Service Group login ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd diff --git a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-present.yml b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-present.yml index 9b213c7b..c03c5571 100644 --- a/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-present.yml +++ b/playbooks/hbacsvcgroup/ensure-hbacsvcgroup-present.yml @@ -7,7 +7,7 @@ tasks: - name: Ensure HBAC Service sshd is present in HBAC Service Group login ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd diff --git a/playbooks/host/delete-host.yml b/playbooks/host/delete-host.yml index 30eaf3ef..c441c8bb 100644 --- a/playbooks/host/delete-host.yml +++ b/playbooks/host/delete-host.yml @@ -6,6 +6,6 @@ tasks: - name: Ensure host host01.example.com is absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com state: absent diff --git a/playbooks/host/disable-host.yml b/playbooks/host/disable-host.yml index 3e265fe2..c6e277c7 100644 --- a/playbooks/host/disable-host.yml +++ b/playbooks/host/disable-host.yml @@ -6,6 +6,6 @@ tasks: - name: Disable host host01.example.com ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com state: disabled diff --git a/playbooks/host/ensure_host_with_randompassword.yml b/playbooks/host/ensure_host_with_randompassword.yml index cd1a1331..d6376033 100644 --- a/playbooks/host/ensure_host_with_randompassword.yml +++ b/playbooks/host/ensure_host_with_randompassword.yml @@ -6,7 +6,7 @@ tasks: - name: Host "{{ 'host1.' + ipaserver_domain }}" present with random password ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: "{{ 'host1.' + ipaserver_domain }}" random: yes force: yes diff --git a/playbooks/host/host-member-allow_create_keytab-absent.yml b/playbooks/host/host-member-allow_create_keytab-absent.yml index 55e3110d..5ec1a171 100644 --- a/playbooks/host/host-member-allow_create_keytab-absent.yml +++ b/playbooks/host/host-member-allow_create_keytab-absent.yml @@ -6,7 +6,7 @@ tasks: - name: Host host1.example.com members allow_create_keytab absent for users, groups, hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com allow_create_keytab_user: - user01 diff --git a/playbooks/host/host-member-allow_create_keytab-present.yml b/playbooks/host/host-member-allow_create_keytab-present.yml index f5865497..36c31dd2 100644 --- a/playbooks/host/host-member-allow_create_keytab-present.yml +++ b/playbooks/host/host-member-allow_create_keytab-present.yml @@ -6,7 +6,7 @@ tasks: - name: Host host1.example.com members allow_create_keytab present for users, groups, hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com allow_create_keytab_user: - user01 diff --git a/playbooks/host/host-member-allow_retrieve_keytab-absent.yml b/playbooks/host/host-member-allow_retrieve_keytab-absent.yml index b8830f60..b7752e7c 100644 --- a/playbooks/host/host-member-allow_retrieve_keytab-absent.yml +++ b/playbooks/host/host-member-allow_retrieve_keytab-absent.yml @@ -6,7 +6,7 @@ tasks: - name: Host host1.example.com members allow_retrieve_keytab absent for users, groups, hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com allow_retrieve_keytab_user: - user01 diff --git a/playbooks/host/host-member-allow_retrieve_keytab-present.yml b/playbooks/host/host-member-allow_retrieve_keytab-present.yml index fde116cc..ee849e06 100644 --- a/playbooks/host/host-member-allow_retrieve_keytab-present.yml +++ b/playbooks/host/host-member-allow_retrieve_keytab-present.yml @@ -6,7 +6,7 @@ tasks: - name: Host host1.example.com members allow_retrieve_keytab present for users, groups, hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com allow_retrieve_keytab_user: - user01 diff --git a/playbooks/host/host-member-certificate-absent.yml b/playbooks/host/host-member-certificate-absent.yml index 918951f8..841b39cd 100644 --- a/playbooks/host/host-member-certificate-absent.yml +++ b/playbooks/host/host-member-certificate-absent.yml @@ -5,7 +5,7 @@ tasks: - name: Host host01.example.com member certificate absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - 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 diff --git a/playbooks/host/host-member-certificate-present.yml b/playbooks/host/host-member-certificate-present.yml index 066ae0a9..8071a942 100644 --- a/playbooks/host/host-member-certificate-present.yml +++ b/playbooks/host/host-member-certificate-present.yml @@ -5,7 +5,7 @@ tasks: - name: Host host01.example.com member certificate present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - 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 diff --git a/playbooks/host/host-member-ipaddresses-absent.yml b/playbooks/host/host-member-ipaddresses-absent.yml index 2466dbdd..31c2eec7 100644 --- a/playbooks/host/host-member-ipaddresses-absent.yml +++ b/playbooks/host/host-member-ipaddresses-absent.yml @@ -6,7 +6,7 @@ tasks: - name: Ensure host01.example.com IP addresses absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com ip_address: - 192.168.0.123 diff --git a/playbooks/host/host-member-ipaddresses-present.yml b/playbooks/host/host-member-ipaddresses-present.yml index f473993e..2dd88e13 100644 --- a/playbooks/host/host-member-ipaddresses-present.yml +++ b/playbooks/host/host-member-ipaddresses-present.yml @@ -6,7 +6,7 @@ tasks: - name: Ensure host01.example.com IP addresses present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com ip_address: - 192.168.0.123 diff --git a/playbooks/host/host-member-managedby_host-absent.yml b/playbooks/host/host-member-managedby_host-absent.yml index f899a52f..e9fc6b4c 100644 --- a/playbooks/host/host-member-managedby_host-absent.yml +++ b/playbooks/host/host-member-managedby_host-absent.yml @@ -5,7 +5,7 @@ tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com managedby_host: server.exmaple.com action: member diff --git a/playbooks/host/host-member-managedby_host-present.yml b/playbooks/host/host-member-managedby_host-present.yml index 073d81ad..c00548cf 100644 --- a/playbooks/host/host-member-managedby_host-present.yml +++ b/playbooks/host/host-member-managedby_host-present.yml @@ -5,7 +5,7 @@ tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com managedby_host: server.exmaple.com action: member diff --git a/playbooks/host/host-member-principal-absent.yml b/playbooks/host/host-member-principal-absent.yml index b2c3a8d8..2688737e 100644 --- a/playbooks/host/host-member-principal-absent.yml +++ b/playbooks/host/host-member-principal-absent.yml @@ -6,7 +6,7 @@ tasks: - name: Host host01.example.com principals host/testhost01.example.com and host/myhost01.example.com absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com principal: - host/testhost01.example.com diff --git a/playbooks/host/host-member-principal-present.yml b/playbooks/host/host-member-principal-present.yml index b56fd591..8b5d0cf5 100644 --- a/playbooks/host/host-member-principal-present.yml +++ b/playbooks/host/host-member-principal-present.yml @@ -6,7 +6,7 @@ tasks: - name: Host host01.example.com principals host/testhost01.example.com and host/myhost01.example.com present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com principal: - host/testhost01.example.com diff --git a/playbooks/host/host-present-with-allow_create_keytab.yml b/playbooks/host/host-present-with-allow_create_keytab.yml index f7b9c6f4..bcdd5df5 100644 --- a/playbooks/host/host-present-with-allow_create_keytab.yml +++ b/playbooks/host/host-present-with-allow_create_keytab.yml @@ -6,7 +6,7 @@ tasks: - name: Host host1.example.com present with allow_create_keytab for users, groups, hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com allow_create_keytab_user: - user01 diff --git a/playbooks/host/host-present-with-allow_retrieve_keytab.yml b/playbooks/host/host-present-with-allow_retrieve_keytab.yml index 5a9f3af5..f12b15f6 100644 --- a/playbooks/host/host-present-with-allow_retrieve_keytab.yml +++ b/playbooks/host/host-present-with-allow_retrieve_keytab.yml @@ -6,7 +6,7 @@ tasks: - name: Host host1.example.com present with allow_retrieve_keytab for users, groups, hosts and hostgroups ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com allow_retrieve_keytab_user: - user01 diff --git a/playbooks/host/host-present-with-certificate.yml b/playbooks/host/host-present-with-certificate.yml index f5da46d7..919d7c0b 100644 --- a/playbooks/host/host-present-with-certificate.yml +++ b/playbooks/host/host-present-with-certificate.yml @@ -5,7 +5,7 @@ tasks: - name: Host host01.example.com present with certificate ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 diff --git a/playbooks/host/host-present-with-managedby_host.yml b/playbooks/host/host-present-with-managedby_host.yml index b85f5e60..51a1c21f 100644 --- a/playbooks/host/host-present-with-managedby_host.yml +++ b/playbooks/host/host-present-with-managedby_host.yml @@ -5,7 +5,7 @@ tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.exmaple.com managedby_host: server.exmaple.com force: yes diff --git a/playbooks/host/host-present-with-principal.yml b/playbooks/host/host-present-with-principal.yml index 5b8ad4ee..e84f45a5 100644 --- a/playbooks/host/host-present-with-principal.yml +++ b/playbooks/host/host-present-with-principal.yml @@ -6,7 +6,7 @@ tasks: - name: Host host01.example.com present with principals host/testhost01.example.com and host/myhost01.example.com ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com principal: - host/testhost01.example.com diff --git a/playbooks/host/host-present-with-randompassword.yml b/playbooks/host/host-present-with-randompassword.yml index 9063c480..2e9d793d 100644 --- a/playbooks/host/host-present-with-randompassword.yml +++ b/playbooks/host/host-present-with-randompassword.yml @@ -6,7 +6,7 @@ tasks: - name: Host host01.example.com present with random password ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com random: yes force: yes diff --git a/playbooks/host/host-present-with-several-ip-addresses.yml b/playbooks/host/host-present-with-several-ip-addresses.yml index 4956562a..e74f67c6 100644 --- a/playbooks/host/host-present-with-several-ip-addresses.yml +++ b/playbooks/host/host-present-with-several-ip-addresses.yml @@ -6,7 +6,7 @@ tasks: - name: Ensure host is present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com description: Example host ip_address: diff --git a/playbooks/host/host-present.yml b/playbooks/host/host-present.yml index d40c1ecf..afb9a0ec 100644 --- a/playbooks/host/host-present.yml +++ b/playbooks/host/host-present.yml @@ -6,7 +6,7 @@ tasks: - name: Ensure host is present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com description: Example host ip_address: 192.168.0.123 diff --git a/playbooks/host/hosts-member-certificate-absent.yml b/playbooks/host/hosts-member-certificate-absent.yml index bb2d5b03..ec9ba94f 100644 --- a/playbooks/host/hosts-member-certificate-absent.yml +++ b/playbooks/host/hosts-member-certificate-absent.yml @@ -6,7 +6,7 @@ tasks: - name: Hosts host01.example.com and host01.exmaple.com member certificate absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com certificate: diff --git a/playbooks/host/hosts-member-certificate-present.yml b/playbooks/host/hosts-member-certificate-present.yml index c402ef4a..2976244a 100644 --- a/playbooks/host/hosts-member-certificate-present.yml +++ b/playbooks/host/hosts-member-certificate-present.yml @@ -6,7 +6,7 @@ tasks: - name: Hosts host01.example.com and host01.exmaple.com member certificate present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com certificate: diff --git a/playbooks/host/hosts-member-managedby_host-absent.yml b/playbooks/host/hosts-member-managedby_host-absent.yml index 9b584e51..40ae3b7d 100644 --- a/playbooks/host/hosts-member-managedby_host-absent.yml +++ b/playbooks/host/hosts-member-managedby_host-absent.yml @@ -5,7 +5,7 @@ tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.exmaple.com managedby_host: server.exmaple.com diff --git a/playbooks/host/hosts-member-managedby_host-present.yml b/playbooks/host/hosts-member-managedby_host-present.yml index f8d4e2b7..fe70a59f 100644 --- a/playbooks/host/hosts-member-managedby_host-present.yml +++ b/playbooks/host/hosts-member-managedby_host-present.yml @@ -5,7 +5,7 @@ tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.exmaple.com managedby_host: server.exmaple.com diff --git a/playbooks/host/hosts-member-principal-absent.yml b/playbooks/host/hosts-member-principal-absent.yml index edd33521..733bb126 100644 --- a/playbooks/host/hosts-member-principal-absent.yml +++ b/playbooks/host/hosts-member-principal-absent.yml @@ -6,7 +6,7 @@ tasks: - name: Hosts host01.exmaple.com and host02.exmaple.com member principals host/testhost0X.exmaple.com absent ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.exmaple.com principal: diff --git a/playbooks/host/hosts-member-principal-present.yml b/playbooks/host/hosts-member-principal-present.yml index 54c9a8f6..68d26fe5 100644 --- a/playbooks/host/hosts-member-principal-present.yml +++ b/playbooks/host/hosts-member-principal-present.yml @@ -6,7 +6,7 @@ tasks: - name: Hosts host01.exmaple.com and host02.exmaple.com member principals host/testhost0X.exmaple.com present ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.exmaple.com principal: diff --git a/playbooks/host/hosts-present-with-certificate.yml b/playbooks/host/hosts-present-with-certificate.yml index 34e402f7..78102e25 100644 --- a/playbooks/host/hosts-present-with-certificate.yml +++ b/playbooks/host/hosts-present-with-certificate.yml @@ -6,7 +6,7 @@ tasks: - name: Hosts host01.example.com and host01.exmaple.com present with certificate ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com certificate: diff --git a/playbooks/host/hosts-present-with-managedby_host.yml b/playbooks/host/hosts-present-with-managedby_host.yml index 5f3546b6..262f6c1d 100644 --- a/playbooks/host/hosts-present-with-managedby_host.yml +++ b/playbooks/host/hosts-present-with-managedby_host.yml @@ -5,7 +5,7 @@ tasks: ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.exmaple.com managedby_host: server.exmaple.com diff --git a/playbooks/host/hosts-present-with-randompasswords.yml b/playbooks/host/hosts-present-with-randompasswords.yml index f747ca31..5a1ea9c0 100644 --- a/playbooks/host/hosts-present-with-randompasswords.yml +++ b/playbooks/host/hosts-present-with-randompasswords.yml @@ -6,7 +6,7 @@ tasks: - name: Hosts host01.example.com and host01.example.com present with random passwords ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com random: yes diff --git a/playbooks/hostgroup/ensure-hostgroup-is-absent.yml b/playbooks/hostgroup/ensure-hostgroup-is-absent.yml index 86508fc6..c9e37d3f 100644 --- a/playbooks/hostgroup/ensure-hostgroup-is-absent.yml +++ b/playbooks/hostgroup/ensure-hostgroup-is-absent.yml @@ -6,6 +6,6 @@ tasks: # Ensure host-group databases is present - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: absent diff --git a/playbooks/hostgroup/ensure-hostgroup-is-present.yml b/playbooks/hostgroup/ensure-hostgroup-is-present.yml index a2c7ae9a..bc059dba 100644 --- a/playbooks/hostgroup/ensure-hostgroup-is-present.yml +++ b/playbooks/hostgroup/ensure-hostgroup-is-present.yml @@ -6,7 +6,7 @@ tasks: # Ensure host-group databases is present - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com diff --git a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml index 149dfcff..b3fbd558 100644 --- a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml +++ b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml @@ -6,7 +6,7 @@ tasks: # Ensure hosts and hostgroups are present in existing databases hostgroup - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com diff --git a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml index 4b22fd66..c103ce92 100644 --- a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml +++ b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml @@ -6,7 +6,7 @@ tasks: # Ensure hosts and hostgroups are present in existing databases hostgroup - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com diff --git a/playbooks/sudocmd/ensure-sudocmd-is-absent.yml b/playbooks/sudocmd/ensure-sudocmd-is-absent.yml index 1b3bbf45..3539ed00 100644 --- a/playbooks/sudocmd/ensure-sudocmd-is-absent.yml +++ b/playbooks/sudocmd/ensure-sudocmd-is-absent.yml @@ -6,6 +6,6 @@ tasks: # Ensure sudo command is absent - ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: absent diff --git a/playbooks/sudocmd/ensure-sudocmd-is-present.yml b/playbooks/sudocmd/ensure-sudocmd-is-present.yml index 3aa0f471..d648de54 100644 --- a/playbooks/sudocmd/ensure-sudocmd-is-present.yml +++ b/playbooks/sudocmd/ensure-sudocmd-is-present.yml @@ -6,6 +6,6 @@ tasks: # Ensure sudo command is present - ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: present diff --git a/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml b/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml index bde823e5..49ba2d5a 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml @@ -6,7 +6,7 @@ tasks: # Ensure sudocmds are absent in sudocmdgroup - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig diff --git a/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml b/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml index c415695b..fe9ab207 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml @@ -6,7 +6,7 @@ tasks: # Ensure sudo commands are present - ipasudocmd: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: - /usr/sbin/ifconfig - /usr/sbin/iwlist @@ -14,7 +14,7 @@ # Ensure sudo commands are present in existing sudocmdgroup - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig diff --git a/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml b/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml index 13070440..b48a710d 100644 --- a/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml +++ b/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml @@ -7,7 +7,7 @@ tasks: # Ensure sudooption is absent in sudorule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 sudooption: "!root" action: member diff --git a/playbooks/sudorule/ensure-sudorule-has-sudooption.yml b/playbooks/sudorule/ensure-sudorule-has-sudooption.yml index 1f32b9a5..d1a394cf 100644 --- a/playbooks/sudorule/ensure-sudorule-has-sudooption.yml +++ b/playbooks/sudorule/ensure-sudorule-has-sudooption.yml @@ -7,7 +7,7 @@ tasks: # Ensure sudooption is present in sudorule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 sudooption: "!root" action: member diff --git a/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml b/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml index f74765c2..2f0655c5 100644 --- a/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml @@ -7,7 +7,7 @@ tasks: # Ensure host server is absent in Sudo Rule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 host: server action: member diff --git a/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml b/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml index 4ecf3f33..e0ce73de 100644 --- a/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml @@ -7,7 +7,7 @@ tasks: # Ensure host server is present in Sudo Rule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 host: server action: member diff --git a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml index 301030f5..c30d63a0 100644 --- a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml @@ -7,7 +7,7 @@ tasks: # Ensure hostgroup cluster is absent in Sudo Rule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster action: member diff --git a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml index b4473b27..4813213b 100644 --- a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml @@ -7,7 +7,7 @@ tasks: # Ensure hostgrep cluster is present in Sudo Rule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster action: member diff --git a/playbooks/sudorule/ensure-sudorule-is-disabled.yml b/playbooks/sudorule/ensure-sudorule-is-disabled.yml index 90afbd24..b51da118 100644 --- a/playbooks/sudorule/ensure-sudorule-is-disabled.yml +++ b/playbooks/sudorule/ensure-sudorule-is-disabled.yml @@ -6,6 +6,6 @@ tasks: # Ensure sudorule command is disabled - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: disabled diff --git a/playbooks/sudorule/ensure-sudorule-is-enabled.yml b/playbooks/sudorule/ensure-sudorule-is-enabled.yml index 6618344c..4cba3bec 100644 --- a/playbooks/sudorule/ensure-sudorule-is-enabled.yml +++ b/playbooks/sudorule/ensure-sudorule-is-enabled.yml @@ -6,6 +6,6 @@ tasks: # Ensure sudorule command is enabled - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: enabled diff --git a/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml b/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml index 9a3c2b21..b884886e 100644 --- a/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml +++ b/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml @@ -7,6 +7,6 @@ tasks: # Ensure sudorule is present with the given order. - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 order: 2 diff --git a/playbooks/sudorule/ensure-sudorule-is-present.yml b/playbooks/sudorule/ensure-sudorule-is-present.yml index 89041afb..e88017cf 100644 --- a/playbooks/sudorule/ensure-sudorule-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-is-present.yml @@ -6,7 +6,7 @@ tasks: # Ensure sudorule command is present - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 description: A test sudo rule. allow_sudocmd: /bin/ls diff --git a/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml b/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml index 56612f15..465f386c 100644 --- a/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml @@ -7,7 +7,7 @@ tasks: # Ensure sudorule is present with the given order. - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 runasuser: admin action: member diff --git a/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml b/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml index 8af49b93..4a5bee94 100644 --- a/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml @@ -7,7 +7,7 @@ tasks: # Ensure sudorule is present with the given order. - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 runasuser: admin action: member diff --git a/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml b/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml index 328242ab..3ded226e 100644 --- a/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: - /sbin/ifconfig diff --git a/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml b/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml index 55acd61f..23dd56de 100644 --- a/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: - /sbin/ifconfig diff --git a/playbooks/topology/add-topologysegment.yml b/playbooks/topology/add-topologysegment.yml index ebf55445..cf157e2c 100644 --- a/playbooks/topology/add-topologysegment.yml +++ b/playbooks/topology/add-topologysegment.yml @@ -6,7 +6,7 @@ tasks: - name: Add topology segment ipatopologysegment: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain left: ipareplica1.test.local right: ipareplica2.test.local diff --git a/playbooks/topology/delete-topologysegment.yml b/playbooks/topology/delete-topologysegment.yml index a3f2c680..984ea1f5 100644 --- a/playbooks/topology/delete-topologysegment.yml +++ b/playbooks/topology/delete-topologysegment.yml @@ -6,7 +6,7 @@ tasks: - name: Delete topology segment ipatopologysegment: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain left: ipareplica1.test.local right: ipareplica2.test.local diff --git a/playbooks/topology/reinitialize-topologysegment.yml b/playbooks/topology/reinitialize-topologysegment.yml index 1f21cd23..efe6bc3e 100644 --- a/playbooks/topology/reinitialize-topologysegment.yml +++ b/playbooks/topology/reinitialize-topologysegment.yml @@ -6,7 +6,7 @@ tasks: - name: Reinitialize topology segment ipatopologysegment: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain left: ipareplica1.test.local right: ipareplica2.test.local diff --git a/playbooks/topology/verify-topologysuffix.yml b/playbooks/topology/verify-topologysuffix.yml index b27ca3d6..70e788c3 100644 --- a/playbooks/topology/verify-topologysuffix.yml +++ b/playbooks/topology/verify-topologysuffix.yml @@ -6,6 +6,6 @@ tasks: - name: Verify topology suffix ipatopologysuffix: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword suffix: domain state: verified diff --git a/playbooks/user/add-group.yml b/playbooks/user/add-group.yml index a36ca14f..46e0faab 100644 --- a/playbooks/user/add-group.yml +++ b/playbooks/user/add-group.yml @@ -6,19 +6,19 @@ tasks: - name: Create group ops with gid 1234 ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops gidnumber: 1234 - name: Create group sysops ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops user: - pinky - name: Create group appops ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: appops diff --git a/playbooks/user/add-groups-to-group.yml b/playbooks/user/add-groups-to-group.yml index ecc9b455..d91e5264 100644 --- a/playbooks/user/add-groups-to-group.yml +++ b/playbooks/user/add-groups-to-group.yml @@ -6,7 +6,7 @@ tasks: - name: Add group members sysops and appops to group sysops ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops group: - sysops diff --git a/playbooks/user/add-user-to-group.yml b/playbooks/user/add-user-to-group.yml index 9ed5eb1a..635c0a91 100644 --- a/playbooks/user/add-user-to-group.yml +++ b/playbooks/user/add-user-to-group.yml @@ -6,7 +6,7 @@ tasks: - name: Add user member brain to group sysops ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops action: member user: diff --git a/playbooks/user/add-user.yml b/playbooks/user/add-user.yml index 345a028e..ed72e51d 100644 --- a/playbooks/user/add-user.yml +++ b/playbooks/user/add-user.yml @@ -6,7 +6,7 @@ tasks: - name: Create user pinky ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky first: pinky last: Acme diff --git a/playbooks/user/delete-group.yml b/playbooks/user/delete-group.yml index 2d863c37..ae9f78c7 100644 --- a/playbooks/user/delete-group.yml +++ b/playbooks/user/delete-group.yml @@ -6,6 +6,6 @@ tasks: - name: Remove goups sysops, appops and ops ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops,appops,ops state: absent diff --git a/playbooks/user/delete-preserve-user.yml b/playbooks/user/delete-preserve-user.yml index c202b159..5d93a3d3 100644 --- a/playbooks/user/delete-preserve-user.yml +++ b/playbooks/user/delete-preserve-user.yml @@ -6,7 +6,7 @@ tasks: - name: Delete and preserve user pinky ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky preserve: yes state: absent diff --git a/playbooks/user/delete-user.yml b/playbooks/user/delete-user.yml index 101a2b4b..d9239e04 100644 --- a/playbooks/user/delete-user.yml +++ b/playbooks/user/delete-user.yml @@ -6,6 +6,6 @@ tasks: - name: Remove user pinky and brain ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: absent diff --git a/playbooks/user/disable-user.yml b/playbooks/user/disable-user.yml index 192fd531..17c55940 100644 --- a/playbooks/user/disable-user.yml +++ b/playbooks/user/disable-user.yml @@ -6,6 +6,6 @@ tasks: - name: Disable user pinky ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: disabled diff --git a/playbooks/user/enable-user.yml b/playbooks/user/enable-user.yml index dfbba493..fd3ebf3b 100644 --- a/playbooks/user/enable-user.yml +++ b/playbooks/user/enable-user.yml @@ -6,6 +6,6 @@ tasks: - name: Enable user pinky ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: enabled diff --git a/playbooks/user/ensure_user_with_randompassword.yml b/playbooks/user/ensure_user_with_randompassword.yml index 4ca9f214..ee821f0a 100644 --- a/playbooks/user/ensure_user_with_randompassword.yml +++ b/playbooks/user/ensure_user_with_randompassword.yml @@ -6,7 +6,7 @@ tasks: - name: User user1 present with random password ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: user1 first: first1 last: last1 diff --git a/playbooks/user/ensure_users_with_randompasswords.yml b/playbooks/user/ensure_users_with_randompasswords.yml index 06f50c71..c0398877 100644 --- a/playbooks/user/ensure_users_with_randompasswords.yml +++ b/playbooks/user/ensure_users_with_randompasswords.yml @@ -6,7 +6,7 @@ tasks: - name: Users user1 and user1 present with random password ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword users: - name: user1 first: first1 diff --git a/playbooks/user/undelete-user.yml b/playbooks/user/undelete-user.yml index 79feda07..2b95100f 100644 --- a/playbooks/user/undelete-user.yml +++ b/playbooks/user/undelete-user.yml @@ -6,6 +6,6 @@ tasks: - name: Undelete preserved user pinky ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: undeleted diff --git a/playbooks/user/unlock-users.yml b/playbooks/user/unlock-users.yml index 337e97f4..36edac25 100644 --- a/playbooks/user/unlock-users.yml +++ b/playbooks/user/unlock-users.yml @@ -6,6 +6,6 @@ tasks: - name: Unlock users pinky and brain ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: unlocked diff --git a/playbooks/vault/data-archive-in-asymmetric-vault.yml b/playbooks/vault/data-archive-in-asymmetric-vault.yml index f70d76db..5fd55dfe 100644 --- a/playbooks/vault/data-archive-in-asymmetric-vault.yml +++ b/playbooks/vault/data-archive-in-asymmetric-vault.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 vault_data: The world of π is half rounded. diff --git a/playbooks/vault/data-archive-in-symmetric-vault.yml b/playbooks/vault/data-archive-in-symmetric-vault.yml index eb8b0a0f..f94e9d87 100644 --- a/playbooks/vault/data-archive-in-symmetric-vault.yml +++ b/playbooks/vault/data-archive-in-symmetric-vault.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 diff --git a/playbooks/vault/ensure-asymetric-vault-is-absent.yml b/playbooks/vault/ensure-asymetric-vault-is-absent.yml index 62866c43..7ee6cf39 100644 --- a/playbooks/vault/ensure-asymetric-vault-is-absent.yml +++ b/playbooks/vault/ensure-asymetric-vault-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: admin state: absent diff --git a/playbooks/vault/ensure-asymetric-vault-is-present.yml b/playbooks/vault/ensure-asymetric-vault-is-present.yml index f946779b..247f36fc 100644 --- a/playbooks/vault/ensure-asymetric-vault-is-present.yml +++ b/playbooks/vault/ensure-asymetric-vault-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: admin vault_public_key: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FDdGFudjRkK3ptSTZ0T3ova1RXdGowY3AxRAowUENoYy8vR0pJMTUzTi9CN3UrN0h3SXlRVlZoNUlXZG1UcCtkWXYzd09yeVpPbzYvbHN5eFJaZ2pZRDRwQ3VGCjlxM295VTFEMnFOZERYeGtSaFFETXBiUEVSWWlHbE1jbzdhN0hIVDk1bGNQbmhObVFkb3VGdHlVbFBUVS96V1kKZldYWTBOeU1UbUtoeFRseUV3SURBUUFCCi0tLS0tRU5EIFBVQkxJQyBLRVktLS0tLQo= diff --git a/playbooks/vault/ensure-service-vault-is-absent.yml b/playbooks/vault/ensure-service-vault-is-absent.yml index 1affb4c7..65c4c8d8 100644 --- a/playbooks/vault/ensure-service-vault-is-absent.yml +++ b/playbooks/vault/ensure-service-vault-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" state: absent diff --git a/playbooks/vault/ensure-service-vault-is-present.yml b/playbooks/vault/ensure-service-vault-is-present.yml index 423fef1f..cf6da223 100644 --- a/playbooks/vault/ensure-service-vault-is-present.yml +++ b/playbooks/vault/ensure-service-vault-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" ipavaultpassword: MyVaultPassword123 diff --git a/playbooks/vault/ensure-shared-vault-is-absent.yml b/playbooks/vault/ensure-shared-vault-is-absent.yml index fdf1babd..0191ab1c 100644 --- a/playbooks/vault/ensure-shared-vault-is-absent.yml +++ b/playbooks/vault/ensure-shared-vault-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sharedvault shared: True state: absent diff --git a/playbooks/vault/ensure-shared-vault-is-present.yml b/playbooks/vault/ensure-shared-vault-is-present.yml index 9f25e407..c403afcc 100644 --- a/playbooks/vault/ensure-shared-vault-is-present.yml +++ b/playbooks/vault/ensure-shared-vault-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sharedvault shared: True ipavaultpassword: MyVaultPassword123 diff --git a/playbooks/vault/ensure-standard-vault-is-absent.yml b/playbooks/vault/ensure-standard-vault-is-absent.yml index c52806e6..3d7cd8ab 100644 --- a/playbooks/vault/ensure-standard-vault-is-absent.yml +++ b/playbooks/vault/ensure-standard-vault-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault username: admin state: absent diff --git a/playbooks/vault/ensure-standard-vault-is-present.yml b/playbooks/vault/ensure-standard-vault-is-present.yml index a55f55cc..64d08fec 100644 --- a/playbooks/vault/ensure-standard-vault-is-present.yml +++ b/playbooks/vault/ensure-standard-vault-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard username: admin diff --git a/playbooks/vault/ensure-symetric-vault-is-absent.yml b/playbooks/vault/ensure-symetric-vault-is-absent.yml index 87c3bdc2..a0d5bbcd 100644 --- a/playbooks/vault/ensure-symetric-vault-is-absent.yml +++ b/playbooks/vault/ensure-symetric-vault-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin state: absent diff --git a/playbooks/vault/ensure-symetric-vault-is-present.yml b/playbooks/vault/ensure-symetric-vault-is-present.yml index ea10d573..949f60e2 100644 --- a/playbooks/vault/ensure-symetric-vault-is-present.yml +++ b/playbooks/vault/ensure-symetric-vault-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 diff --git a/playbooks/vault/ensure-vault-is-present-with-members.yml b/playbooks/vault/ensure-vault-is-present-with-members.yml index 65cd72d4..ba96ad14 100644 --- a/playbooks/vault/ensure-vault-is-present-with-members.yml +++ b/playbooks/vault/ensure-vault-is-present-with-members.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard username: admin diff --git a/playbooks/vault/ensure-vault-member-group-is-absent.yml b/playbooks/vault/ensure-vault-member-group-is-absent.yml index f26bc670..c5e7f7d5 100644 --- a/playbooks/vault/ensure-vault-member-group-is-absent.yml +++ b/playbooks/vault/ensure-vault-member-group-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: keychain username: admin state: absent diff --git a/playbooks/vault/ensure-vault-member-group-is-present.yml b/playbooks/vault/ensure-vault-member-group-is-present.yml index 84dc087e..12b52613 100644 --- a/playbooks/vault/ensure-vault-member-group-is-present.yml +++ b/playbooks/vault/ensure-vault-member-group-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: keychain username: admin state: present diff --git a/playbooks/vault/ensure-vault-member-user-is-absent.yml b/playbooks/vault/ensure-vault-member-user-is-absent.yml index 99c9d6cc..7d0578a6 100644 --- a/playbooks/vault/ensure-vault-member-user-is-absent.yml +++ b/playbooks/vault/ensure-vault-member-user-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: keychain username: admin state: absent diff --git a/playbooks/vault/ensure-vault-member-user-is-present.yml b/playbooks/vault/ensure-vault-member-user-is-present.yml index 820a9f7c..a04e6e20 100644 --- a/playbooks/vault/ensure-vault-member-user-is-present.yml +++ b/playbooks/vault/ensure-vault-member-user-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: keychain username: admin state: present diff --git a/playbooks/vault/ensure-vault-owner-is-absent.yml b/playbooks/vault/ensure-vault-owner-is-absent.yml index 33670fc8..817a324b 100644 --- a/playbooks/vault/ensure-vault-owner-is-absent.yml +++ b/playbooks/vault/ensure-vault-owner-is-absent.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin owners: user01 diff --git a/playbooks/vault/ensure-vault-owner-is-present.yml b/playbooks/vault/ensure-vault-owner-is-present.yml index 52b1d93c..7c4cfb20 100644 --- a/playbooks/vault/ensure-vault-owner-is-present.yml +++ b/playbooks/vault/ensure-vault-owner-is-present.yml @@ -6,7 +6,7 @@ tasks: - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin owners: user01 From 472050de7b68078614f0bbcdf6615a42d4f4a806 Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Wed, 26 Feb 2020 12:41:05 +0100 Subject: [PATCH 4/4] plugins: Unite admin password Use SomeADMINpassword as the admin password also in the examples in the management modules. --- plugins/modules/ipagroup.py | 14 +++++++------- plugins/modules/ipahbacrule.py | 16 ++++++++-------- plugins/modules/ipahbacsvc.py | 4 ++-- plugins/modules/ipahbacsvcgroup.py | 8 ++++---- plugins/modules/ipahost.py | 8 ++++---- plugins/modules/ipahostgroup.py | 8 ++++---- plugins/modules/ipapwpolicy.py | 2 +- plugins/modules/ipasudocmd.py | 4 ++-- plugins/modules/ipasudocmdgroup.py | 8 ++++---- plugins/modules/ipasudorule.py | 12 ++++++------ plugins/modules/ipauser.py | 14 +++++++------- plugins/modules/ipavault.py | 24 ++++++++++++------------ 12 files changed, 61 insertions(+), 61 deletions(-) diff --git a/plugins/modules/ipagroup.py b/plugins/modules/ipagroup.py index 50838cbf..477c5051 100644 --- a/plugins/modules/ipagroup.py +++ b/plugins/modules/ipagroup.py @@ -90,23 +90,23 @@ author: EXAMPLES = """ # Create group ops with gid 1234 - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops gidnumber: 1234 # Create group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops # Create group appops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: appops # Add user member pinky to group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops action: member user: @@ -114,7 +114,7 @@ EXAMPLES = """ # Add user member brain to group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops action: member user: @@ -122,7 +122,7 @@ EXAMPLES = """ # Add group members sysops and appops to group sysops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops group: - sysops @@ -130,7 +130,7 @@ EXAMPLES = """ # Remove goups sysops, appops and ops - ipagroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sysops,appops,ops state: absent """ diff --git a/plugins/modules/ipahbacrule.py b/plugins/modules/ipahbacrule.py index 82340c25..fd0ce238 100644 --- a/plugins/modules/ipahbacrule.py +++ b/plugins/modules/ipahbacrule.py @@ -103,52 +103,52 @@ author: EXAMPLES = """ # Ensure HBAC Rule allhosts is present - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts usercategory: all # Ensure host server is present in HBAC Rule allhosts - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts host: server action: member # Ensure HBAC Rule sshd-pinky is present - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sshd-pinky hostcategory: all # Ensure user pinky is present in HBAC Rule sshd-pinky - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sshd-pinky user: pinky action: member # Ensure HBAC service sshd is present in HBAC Rule sshd-pinky - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sshd-pinky hbacsvc: sshd action: member # Ensure HBAC Rule sshd-pinky is disabled - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sshd-pinky state: disabled # Ensure HBAC Rule sshd-pinky is enabled - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sshd-pinky state: enabled # Ensure HBAC Rule sshd-pinky is absent - ipahbacrule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: sshd-pinky state: absent """ diff --git a/plugins/modules/ipahbacsvc.py b/plugins/modules/ipahbacsvc.py index cf9bc60c..969a62ef 100644 --- a/plugins/modules/ipahbacsvc.py +++ b/plugins/modules/ipahbacsvc.py @@ -56,13 +56,13 @@ author: EXAMPLES = """ # Ensure HBAC Service for http is present - ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: http description: Web service # Ensure HBAC Service for tftp is absent - ipahbacsvc: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: tftp state: absent """ diff --git a/plugins/modules/ipahbacsvcgroup.py b/plugins/modules/ipahbacsvcgroup.py index 643f2805..3b9132a0 100644 --- a/plugins/modules/ipahbacsvcgroup.py +++ b/plugins/modules/ipahbacsvcgroup.py @@ -69,14 +69,14 @@ author: EXAMPLES = """ # Ensure hbacsvcgroup login is present - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login hbacsvc: - sshd # Ensure hbacsvc sshd is present in existing login hbacsvcgroup - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases hbacsvc: - sshd @@ -84,7 +84,7 @@ EXAMPLES = """ # Ensure hbacsvc sshd is abdsent in existing login hbacsvcgroup - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases hbacsvc: - sshd @@ -93,7 +93,7 @@ EXAMPLES = """ # Ensure hbacsvcgroup login is absent - ipahbacsvcgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: login state: absent """ diff --git a/plugins/modules/ipahost.py b/plugins/modules/ipahost.py index 062f7680..7108839c 100644 --- a/plugins/modules/ipahost.py +++ b/plugins/modules/ipahost.py @@ -343,7 +343,7 @@ author: EXAMPLES = """ # Ensure host is present - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com description: Example host ip_address: 192.168.0.123 @@ -358,14 +358,14 @@ EXAMPLES = """ # Ensure host is present without DNS - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host02.example.com description: Example host force: yes # Initiate generation of a random password for the host - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com description: Example host ip_address: 192.168.0.123 @@ -373,7 +373,7 @@ EXAMPLES = """ # Ensure host is disabled - ipahost: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: host01.example.com update_dns: yes state: disabled diff --git a/plugins/modules/ipahostgroup.py b/plugins/modules/ipahostgroup.py index 9dbfa625..5fcca1d6 100644 --- a/plugins/modules/ipahostgroup.py +++ b/plugins/modules/ipahostgroup.py @@ -73,7 +73,7 @@ author: EXAMPLES = """ # Ensure host-group databases is present - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com @@ -83,7 +83,7 @@ EXAMPLES = """ # Ensure hosts and hostgroups are present in existing databases hostgroup - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com @@ -94,7 +94,7 @@ EXAMPLES = """ # Ensure hosts and hostgroups are absent in databases hostgroup - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases host: - db.example.com @@ -106,7 +106,7 @@ EXAMPLES = """ # Ensure host-group databases is absent - ipahostgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: databases state: absent """ diff --git a/plugins/modules/ipapwpolicy.py b/plugins/modules/ipapwpolicy.py index f1687039..0d68fb1c 100644 --- a/plugins/modules/ipapwpolicy.py +++ b/plugins/modules/ipapwpolicy.py @@ -98,7 +98,7 @@ author: EXAMPLES = """ # Ensure pwpolicy is set for ops - ipapwpolicy: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: ops minlife: 7 maxlife: 49 diff --git a/plugins/modules/ipasudocmd.py b/plugins/modules/ipasudocmd.py index 7c6188b9..74947933 100644 --- a/plugins/modules/ipasudocmd.py +++ b/plugins/modules/ipasudocmd.py @@ -57,13 +57,13 @@ author: EXAMPLES = """ # Ensure sudocmd is present - ipacommand: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: su state: present # Ensure sudocmd is absent - ipacommand: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: su state: absent """ diff --git a/plugins/modules/ipasudocmdgroup.py b/plugins/modules/ipasudocmdgroup.py index bfa01300..3cbb2803 100644 --- a/plugins/modules/ipasudocmdgroup.py +++ b/plugins/modules/ipasudocmdgroup.py @@ -73,13 +73,13 @@ author: EXAMPLES = """ # Ensure sudocmd-group 'network' is present - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network state: present # Ensure sudocmdgroup and sudocmd are present in 'network' sudocmdgroup - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -88,7 +88,7 @@ EXAMPLES = """ # Ensure sudocmdgroup and sudocmd are absent in 'network' sudocmdgroup - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network sudocmd: - /usr/sbin/ifconfig @@ -98,7 +98,7 @@ EXAMPLES = """ # Ensure sudocmd-group 'network' is absent - ipasudocmdgroup: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: network action: member state: absent diff --git a/plugins/modules/ipasudorule.py b/plugins/modules/ipasudorule.py index 285a9469..24d0d7ee 100644 --- a/plugins/modules/ipasudorule.py +++ b/plugins/modules/ipasudorule.py @@ -131,7 +131,7 @@ author: EXAMPLES = """ # Ensure Sudo Rule tesrule1 is present - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 # Ensure sudocmd is present in Sudo Rule @@ -146,35 +146,35 @@ EXAMPLES = """ # Ensure host server is present in Sudo Rule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 host: server action: member # Ensure hostgroup cluster is present in Sudo Rule - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster action: member # Ensure sudo rule for usercategory "all" - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allusers usercategory: all action: enabled # Ensure sudo rule for hostcategory "all" - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: allhosts hostcategory: all action: enabled # Ensure Sudo Rule tesrule1 is absent - ipasudorule: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: testrule1 state: absent """ diff --git a/plugins/modules/ipauser.py b/plugins/modules/ipauser.py index 8d547594..73f16eff 100644 --- a/plugins/modules/ipauser.py +++ b/plugins/modules/ipauser.py @@ -392,7 +392,7 @@ author: EXAMPLES = """ # Create user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky first: pinky last: Acme @@ -406,39 +406,39 @@ EXAMPLES = """ # Create user brain - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: brain first: brain last: Acme # Delete user pinky, but preserved - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky preserve: yes state: absent # Undelete user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky state: undeleted # Disable user pinky - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: disabled # Enable user pinky and brain - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: enabled # Remove user pinky and brain - ipauser: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: pinky,brain state: disabled """ diff --git a/plugins/modules/ipavault.py b/plugins/modules/ipavault.py index 32137ee7..d102202e 100644 --- a/plugins/modules/ipavault.py +++ b/plugins/modules/ipavault.py @@ -111,7 +111,7 @@ author: EXAMPLES = """ # Ensure vault symvault is present - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 @@ -120,7 +120,7 @@ EXAMPLES = """ # Ensure group ipausers is a vault member. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin groups: ipausers @@ -128,7 +128,7 @@ EXAMPLES = """ # Ensure group ipausers is not a vault member. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin groups: ipausers @@ -137,7 +137,7 @@ EXAMPLES = """ # Ensure vault users are present. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin users: @@ -147,7 +147,7 @@ EXAMPLES = """ # Ensure vault users are absent. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin users: @@ -158,7 +158,7 @@ EXAMPLES = """ # Ensure user owns vault. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin action: member @@ -166,7 +166,7 @@ EXAMPLES = """ # Ensure user does not own vault. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin owners: user01 @@ -175,7 +175,7 @@ EXAMPLES = """ # Ensure data is archived to a symmetric vault - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_password: MyVaultPassword123 @@ -186,14 +186,14 @@ EXAMPLES = """ # Ensure vault symvault is absent - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: symvault user: admin state: absent # Ensure asymmetric vault is present. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 description: An asymmetric vault @@ -208,7 +208,7 @@ EXAMPLES = """ # Ensure data is archived in an asymmetric vault - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: admin vault_data: > @@ -218,7 +218,7 @@ EXAMPLES = """ # Ensure asymmetric vault is absent. - ipavault: - ipaadmin_password: MyPassword123 + ipaadmin_password: SomeADMINpassword name: asymvault username: user01 vault_type: asymmetric