internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-07-29 10:54:44 +00:00
Code Issues Projects Releases Wiki Activity

test_hbacrule.yml: Use result.failed also for failed_when

Browse Source 
For failed_when result.failed should be used to make sure that
the task fails if there was an error.
This commit is contained in:
Thomas Woerner
2021-05-20 13:16:16 +02:00
parent 35d133fc3b
commit 762c6e4f35
1 changed files with 51 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

102
tests/hbacrule/test_hbacrule.yml
View File

@@ -66,35 +66,35 @@
- name: "{{ 'testhost04.' + ipaserver_domain }}" - name: "{{ 'testhost04.' + ipaserver_domain }}"
force: yes force: yes
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure host-group testhostgroup01 is present - name: Ensure host-group testhostgroup01 is present
ipahostgroup: ipahostgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhostgroup01 name: testhostgroup01
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure host-group testhostgroup02 is present - name: Ensure host-group testhostgroup02 is present
ipahostgroup: ipahostgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhostgroup02 name: testhostgroup02
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure host-group testhostgroup03 is present - name: Ensure host-group testhostgroup03 is present
ipahostgroup: ipahostgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhostgroup03 name: testhostgroup03
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure host-group testhostgroup04 is present - name: Ensure host-group testhostgroup04 is present
ipahostgroup: ipahostgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhostgroup04 name: testhostgroup04
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure testusers are present - name: Ensure testusers are present
ipauser: ipauser:
@@ -113,91 +113,91 @@
first: test first: test
last: user04 last: user04
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure user group testgroup01 is present - name: Ensure user group testgroup01 is present
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testgroup01 name: testgroup01
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure user group testgroup02 is present - name: Ensure user group testgroup02 is present
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testgroup02 name: testgroup02
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure user group testgroup03 is present - name: Ensure user group testgroup03 is present
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testgroup03 name: testgroup03
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure user group testgroup04 is present - name: Ensure user group testgroup04 is present
ipagroup: ipagroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testgroup04 name: testgroup04
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service testhbacsvc01 is present - name: Ensure HBAC Service testhbacsvc01 is present
ipahbacsvc: ipahbacsvc:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvc01 name: testhbacsvc01
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service testhbacsvc02 is present - name: Ensure HBAC Service testhbacsvc02 is present
ipahbacsvc: ipahbacsvc:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvc02 name: testhbacsvc02
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service testhbacsvc03 is present - name: Ensure HBAC Service testhbacsvc03 is present
ipahbacsvc: ipahbacsvc:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvc03 name: testhbacsvc03
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service testhbacsvc04 is present - name: Ensure HBAC Service testhbacsvc04 is present
ipahbacsvc: ipahbacsvc:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvc04 name: testhbacsvc04
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service Group testhbacsvcgroup01 is present - name: Ensure HBAC Service Group testhbacsvcgroup01 is present
ipahbacsvcgroup: ipahbacsvcgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvcgroup01 name: testhbacsvcgroup01
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service Group testhbacsvcgroup02 is present - name: Ensure HBAC Service Group testhbacsvcgroup02 is present
ipahbacsvcgroup: ipahbacsvcgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvcgroup02 name: testhbacsvcgroup02
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service Group testhbacsvcgroup03 is present - name: Ensure HBAC Service Group testhbacsvcgroup03 is present
ipahbacsvcgroup: ipahbacsvcgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvcgroup03 name: testhbacsvcgroup03
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC Service Group testhbacsvcgroup04 is present - name: Ensure HBAC Service Group testhbacsvcgroup04 is present
ipahbacsvcgroup: ipahbacsvcgroup:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: testhbacsvcgroup04 name: testhbacsvcgroup04
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 is absent - name: Ensure test HBAC rule hbacrule01 is absent
ipahbacrule: ipahbacrule:
@@ -212,14 +212,14 @@
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: hbacrule01 name: hbacrule01
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC rule hbacrule01 is present again - name: Ensure HBAC rule hbacrule01 is present again
ipahbacrule: ipahbacrule:
ipaadmin_password: SomeADMINpassword ipaadmin_password: SomeADMINpassword
name: hbacrule01 name: hbacrule01
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# CHANGE HBACRULE WITH ALL MEMBERS # CHANGE HBACRULE WITH ALL MEMBERS
@@ -236,7 +236,7 @@
hbacsvc: testhbacsvc01,testhbacsvc02 hbacsvc: testhbacsvc01,testhbacsvc02
hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC rule hbacrule01 is present with hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups again - name: Ensure HBAC rule hbacrule01 is present with hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups again
ipahbacrule: ipahbacrule:
@@ -251,7 +251,7 @@
hbacsvc: testhbacsvc01,testhbacsvc02 hbacsvc: testhbacsvc01,testhbacsvc02
hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# REMOVE MEMBERS ONE BY ONE # REMOVE MEMBERS ONE BY ONE
@@ -265,7 +265,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 host members are absent again - name: Ensure test HBAC rule hbacrule01 host members are absent again
ipahbacrule: ipahbacrule:
@@ -277,7 +277,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hostgroup members are absent - name: Ensure test HBAC rule hbacrule01 hostgroup members are absent
ipahbacrule: ipahbacrule:
@@ -287,7 +287,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hostgroup members are absent again - name: Ensure test HBAC rule hbacrule01 hostgroup members are absent again
ipahbacrule: ipahbacrule:
@@ -297,7 +297,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user members are absent - name: Ensure test HBAC rule hbacrule01 user members are absent
ipahbacrule: ipahbacrule:
@@ -307,7 +307,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user members are absent again - name: Ensure test HBAC rule hbacrule01 user members are absent again
ipahbacrule: ipahbacrule:
@@ -317,7 +317,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user group members are absent - name: Ensure test HBAC rule hbacrule01 user group members are absent
ipahbacrule: ipahbacrule:
@@ -327,7 +327,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user group members are absent again - name: Ensure test HBAC rule hbacrule01 user group members are absent again
ipahbacrule: ipahbacrule:
@@ -337,7 +337,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvc members are absent - name: Ensure test HBAC rule hbacrule01 hbacsvc members are absent
ipahbacrule: ipahbacrule:
@@ -347,7 +347,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvc members are absent again - name: Ensure test HBAC rule hbacrule01 hbacsvc members are absent again
ipahbacrule: ipahbacrule:
@@ -357,7 +357,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are absent - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are absent
ipahbacrule: ipahbacrule:
@@ -367,7 +367,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are absent again - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are absent again
ipahbacrule: ipahbacrule:
@@ -377,7 +377,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# ADD MEMBERS BACK # ADD MEMBERS BACK
@@ -390,7 +390,7 @@
- "{{ 'testhost02.' + ipaserver_domain }}" - "{{ 'testhost02.' + ipaserver_domain }}"
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 host members are present again - name: Ensure test HBAC rule hbacrule01 host members are present again
ipahbacrule: ipahbacrule:
@@ -401,7 +401,7 @@
- "{{ 'testhost02.' + ipaserver_domain }}" - "{{ 'testhost02.' + ipaserver_domain }}"
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hostgroup members are present - name: Ensure test HBAC rule hbacrule01 hostgroup members are present
ipahbacrule: ipahbacrule:
@@ -410,7 +410,7 @@
hostgroup: testhostgroup01,testhostgroup02 hostgroup: testhostgroup01,testhostgroup02
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hostgroup members are present again - name: Ensure test HBAC rule hbacrule01 hostgroup members are present again
ipahbacrule: ipahbacrule:
@@ -419,7 +419,7 @@
hostgroup: testhostgroup01,testhostgroup02 hostgroup: testhostgroup01,testhostgroup02
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user members are present - name: Ensure test HBAC rule hbacrule01 user members are present
ipahbacrule: ipahbacrule:
@@ -428,7 +428,7 @@
user: testuser01,testuser02 user: testuser01,testuser02
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user members are present again - name: Ensure test HBAC rule hbacrule01 user members are present again
ipahbacrule: ipahbacrule:
@@ -437,7 +437,7 @@
user: testuser01,testuser02 user: testuser01,testuser02
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user group members are present - name: Ensure test HBAC rule hbacrule01 user group members are present
ipahbacrule: ipahbacrule:
@@ -446,7 +446,7 @@
group: testgroup01,testgroup02 group: testgroup01,testgroup02
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 user group members are present again - name: Ensure test HBAC rule hbacrule01 user group members are present again
ipahbacrule: ipahbacrule:
@@ -455,7 +455,7 @@
group: testgroup01,testgroup02 group: testgroup01,testgroup02
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvc members are present - name: Ensure test HBAC rule hbacrule01 hbacsvc members are present
ipahbacrule: ipahbacrule:
@@ -464,7 +464,7 @@
hbacsvc: testhbacsvc01,testhbacsvc02 hbacsvc: testhbacsvc01,testhbacsvc02
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvc members are present again - name: Ensure test HBAC rule hbacrule01 hbacsvc members are present again
ipahbacrule: ipahbacrule:
@@ -473,7 +473,7 @@
hbacsvc: testhbacsvc01,testhbacsvc02 hbacsvc: testhbacsvc01,testhbacsvc02
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are present - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are present
ipahbacrule: ipahbacrule:
@@ -482,7 +482,7 @@
hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are present again - name: Ensure test HBAC rule hbacrule01 hbacsvcgroup members are present again
ipahbacrule: ipahbacrule:
@@ -491,7 +491,7 @@
hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02 hbacsvcgroup: testhbacsvcgroup01,testhbacsvcgroup02
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# CHANGE TO DIFFERENT MEMBERS # CHANGE TO DIFFERENT MEMBERS
@@ -508,7 +508,7 @@
hbacsvc: testhbacsvc03,testhbacsvc04 hbacsvc: testhbacsvc03,testhbacsvc04
hbacsvcgroup: testhbacsvcgroup03,testhbacsvcgroup04 hbacsvcgroup: testhbacsvcgroup03,testhbacsvcgroup04
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC rule hbacrule01 is present with different hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups again - name: Ensure HBAC rule hbacrule01 is present with different hosts, hostgroups, users, groups, hbassvcs and hbacsvcgroups again
ipahbacrule: ipahbacrule:
@@ -523,7 +523,7 @@
hbacsvc: testhbacsvc03,testhbacsvc04 hbacsvc: testhbacsvc03,testhbacsvc04
hbacsvcgroup: testhbacsvcgroup03,testhbacsvcgroup04 hbacsvcgroup: testhbacsvcgroup03,testhbacsvcgroup04
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# ENSURE OLD TEST MEMBERS ARE ABSENT # ENSURE OLD TEST MEMBERS ARE ABSENT
@@ -542,7 +542,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# ENSURE NEW TEST MEMBERS ARE ABSENT # ENSURE NEW TEST MEMBERS ARE ABSENT
@@ -561,7 +561,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: not result.changed failed_when: not result.changed or result.failed
- name: Ensure HBAC rule hbacrule01 members are absent again - name: Ensure HBAC rule hbacrule01 members are absent again
ipahbacrule: ipahbacrule:
@@ -578,7 +578,7 @@
state: absent state: absent
action: member action: member
register: result register: result
failed_when: result.changed failed_when: result.changed or result.failed
# CLEANUP TEST ITEMS # CLEANUP TEST ITEMS