internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-03-26 21:33:05 +00:00
Code Issues Projects Releases Wiki Activity

idoverride{user,group}: Fix delete_continue with state absent

Browse Source 
All tasks for idoverrideuser and idoverridegroup with state absent
failed with "'continue' is required" when delete_continue was not set.

This happended as delete_continue was internally None and continue: None
was provided to the API.

The fix is simply to use '"continue": delete_continue or False' so that
continue is set to False in this case.
This commit is contained in:
Thomas Woerner
2023-11-16 13:47:04 +01:00
parent f1a6f44477
commit 92e44f6a6c
4 changed files with 281 additions and 160 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/modules/ipaidoverridegroup.py
View File

@@ -332,7 +332,7 @@ def main():
merge_dicts(
{
"ipaanchoruuid": anchor,
"continue": delete_continue
"continue": delete_continue or False
},
runtime_args
)]

2
plugins/modules/ipaidoverrideuser.py
View File

@@ -572,7 +572,7 @@ def main():
merge_dicts(
{
"ipaanchoruuid": anchor,
"continue": delete_continue
"continue": delete_continue or False
},
runtime_args
)]

157
tests/idoverridegroup/test_idoverridegroup.yml
View File

@@ -18,16 +18,21 @@
# CLEANUP TEST ITEMS
- name: Ensure test group test_group does not exist
- name: Ensure test groups test_group1..3 do not exist
ipagroup:
name: test_group
name:
- test_group1
- test_group2
- test_group3
state: absent
- name: Ensure test group test_group is absent in idview test_idview
- name: Ensure test groups test_group1..3 are absent in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group
continue: true
anchor:
- test_group1
- test_group2
- test_group3
state: absent
- name: Ensure test idview test_idview does not exist
@@ -37,9 +42,17 @@
# CREATE TEST ITEMS
- name: Ensure test group test_group exists
- name: Ensure test group test_group1 exists
ipagroup:
name: test_group
name: test_group1
- name: Ensure test group test_group2 exists
ipagroup:
name: test_group2
- name: Ensure test group test_group3 exists
ipagroup:
name: test_group3
- name: Ensure test idview test_idview exists
ipaidview:
@@ -47,118 +60,146 @@
# TESTS
- name: Ensure test group test_group is present in idview test_idview
- name: Ensure test group test_group1 is present in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview, again
- name: Ensure test group test_group1 is present in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group2 is present in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group2
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group2 is present in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group2
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group3 is present in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group3
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group3 is present in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group3
register: result
failed_when: result.changed or result.failed
# description
- name: Ensure test group test_group is present in idview test_idview with description
- name: Ensure test group test_group1 is present in idview test_idview with description
ipaidoverridegroup:
idview: test_idview
anchor: test_group
description: "test_group description"
anchor: test_group1
description: "test_group1 description"
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview with description, again
- name: Ensure test group test_group1 is present in idview test_idview with description, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
description: "test_group description"
anchor: test_group1
description: "test_group1 description"
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without description
- name: Ensure test group test_group1 is present in idview test_idview without description
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
description: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without description, again
- name: Ensure test group test_group1 is present in idview test_idview without description, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
description: ""
register: result
failed_when: result.changed or result.failed
# name
- name: Ensure test group test_group is present in idview test_idview with internal name test_123_group
- name: Ensure test group test_group1 is present in idview test_idview with internal name test_123_group
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
name: test_123_group
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview with internal name test_123_group, again
- name: Ensure test group test_group1 is present in idview test_idview with internal name test_123_group, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
name: test_123_group
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without internal name
- name: Ensure test group test_group1 is present in idview test_idview without internal name
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
name: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without internal name, again
- name: Ensure test group test_group1 is present in idview test_idview without internal name, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
name: ""
register: result
failed_when: result.changed or result.failed
# gid
- name: Ensure test group test_group is present in idview test_idview with gid 20001
- name: Ensure test group test_group1 is present in idview test_idview with gid 20001
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
gid: 20001
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview with gid 20001, again
- name: Ensure test group test_group1 is present in idview test_idview with gid 20001, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
gid: 20001
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without gid
- name: Ensure test group test_group1 is present in idview test_idview without gid
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
gid: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without gid, again
- name: Ensure test group test_group1 is present in idview test_idview without gid, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
anchor: test_group1
gid: ""
register: result
failed_when: result.changed or result.failed
@@ -167,36 +208,56 @@
# absent
- name: Ensure test group test_group is absent in idview test_idview
- name: Ensure test group test_group1 is absent in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group
continue: true
anchor: test_group1
state: absent
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group is absent in idview test_idview, again
- name: Ensure test group test_group1 is absent in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group
continue: true
anchor: test_group1
state: absent
register: result
failed_when: result.changed or result.failed
- name: Ensure test groups test_group2,3 are absent in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor:
- test_group2
- test_group3
state: absent
register: result
failed_when: not result.changed or result.failed
- name: Ensure test groups test_group2,3 are absent in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor:
- test_group2
- test_group3
state: absent
register: result
failed_when: result.changed or result.failed
# CLEANUP TEST ITEMS
- name: Ensure test group test_group does not exist
- name: Ensure test group test_group1 does not exist
ipagroup:
name: test_group
name: test_group1
state: absent
- name: Ensure test group test_group is absent in idview test_idview
- name: Ensure test groups test_group1..3 are absent in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group
continue: true
anchor:
- test_group1
- test_group2
- test_group3
state: absent
- name: Ensure test idview test_idview does not exist

280
tests/idoverrideuser/test_idoverrideuser.yml
View File

@@ -18,16 +18,21 @@
# CLEANUP TEST ITEMS
- name: Ensure test user test_user does not exist
- name: Ensure test users test_user1..3 do not exist
ipauser:
name: test_user
name:
- test_user1
- test_user2
- test_user3
state: absent
- name: Ensure test user test_user is absent in idview test_idview
- name: Ensure test users test_user1..3 are absent in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user
continue: true
anchor:
- test_user1
- test_user2
- test_user3
state: absent
- name: Ensure test idview test_idview does not exist
@@ -37,11 +42,18 @@
# CREATE TEST ITEMS
- name: Ensure test user test_user exists
- name: Ensure test users test_user1..3 exist
ipauser:
name: test_user
first: test
last: user
users:
- name: test_user1
first: test
last: user1
- name: test_user2
first: test
last: user2
- name: test_user3
first: test
last: user3
- name: Ensure test idview test_idview exists
ipaidview:
@@ -59,274 +71,302 @@
# TESTS
- name: Ensure test user test_user is present in idview test_idview
- name: Ensure test user test_user1 is present in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview, again
- name: Ensure test user test_user1 is present in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user2 is present in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user2
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user2 is present in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user2
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user3 is present in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user3
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user3 is present in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user3
register: result
failed_when: result.changed or result.failed
# description
- name: Ensure test user test_user is present in idview test_idview with description
- name: Ensure test user test_user1 is present in idview test_idview with description
ipaidoverrideuser:
idview: test_idview
anchor: test_user
description: "test_user description"
anchor: test_user1
description: "test_user1 description"
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with description, again
- name: Ensure test user test_user1 is present in idview test_idview with description, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
description: "test_user description"
anchor: test_user1
description: "test_user1 description"
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without description
- name: Ensure test user test_user1 is present in idview test_idview without description
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
description: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without description, again
- name: Ensure test user test_user1 is present in idview test_idview without description, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
description: ""
register: result
failed_when: result.changed or result.failed
# name
- name: Ensure test user test_user is present in idview test_idview with internal name test_123_user
- name: Ensure test user test_user1 is present in idview test_idview with internal name test_123_user
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
name: test_123_user
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with internal name test_123_user, again
- name: Ensure test user test_user1 is present in idview test_idview with internal name test_123_user, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
name: test_123_user
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without internal name
- name: Ensure test user test_user1 is present in idview test_idview without internal name
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
name: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without internal name, again
- name: Ensure test user test_user1 is present in idview test_idview without internal name, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
name: ""
register: result
failed_when: result.changed or result.failed
# uid
- name: Ensure test user test_user is present in idview test_idview with uid 20001
- name: Ensure test user test_user1 is present in idview test_idview with uid 20001
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
uid: 20001
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with uid 20001, again
- name: Ensure test user test_user1 is present in idview test_idview with uid 20001, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
uid: 20001
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without uid
- name: Ensure test user test_user1 is present in idview test_idview without uid
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
uid: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without uid, again
- name: Ensure test user test_user1 is present in idview test_idview without uid, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
uid: ""
register: result
failed_when: result.changed or result.failed
# gecos
- name: Ensure test user test_user is present in idview test_idview with gecos "Gecos Test"
- name: Ensure test user test_user1 is present in idview test_idview with gecos "Gecos Test"
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gecos: Gecos Test öäüÇœß
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with gecos "Gecos Test", again
- name: Ensure test user test_user1 is present in idview test_idview with gecos "Gecos Test", again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gecos: Gecos Test öäüÇœß
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gecos
- name: Ensure test user test_user1 is present in idview test_idview without gecos
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gecos: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gecos, again
- name: Ensure test user test_user1 is present in idview test_idview without gecos, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gecos: ""
register: result
failed_when: result.changed or result.failed
# gidnumber
- name: Ensure test user test_user is present in idview test_idview with gidnumber 20001
- name: Ensure test user test_user1 is present in idview test_idview with gidnumber 20001
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gidnumber: 20001
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with gidnumber 20001, again
- name: Ensure test user test_user1 is present in idview test_idview with gidnumber 20001, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gidnumber: 20001
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gidnumber
- name: Ensure test user test_user1 is present in idview test_idview without gidnumber
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gidnumber: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gidnumber, again
- name: Ensure test user test_user1 is present in idview test_idview without gidnumber, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
gidnumber: ""
register: result
failed_when: result.changed or result.failed
# homedir
- name: Ensure test user test_user is present in idview test_idview with homedir /Users
- name: Ensure test user test_user1 is present in idview test_idview with homedir /Users
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
homedir: /Users
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with homedir /Users, again
- name: Ensure test user test_user1 is present in idview test_idview with homedir /Users, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
homedir: /Users
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without homedir
- name: Ensure test user test_user1 is present in idview test_idview without homedir
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
homedir: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without homedir, again
- name: Ensure test user test_user1 is present in idview test_idview without homedir, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
homedir: ""
register: result
failed_when: result.changed or result.failed
# shell
- name: Ensure test user test_user is present in idview test_idview with shell /bin/someshell
- name: Ensure test user test_user1 is present in idview test_idview with shell /bin/someshell
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
shell: /bin/someshell
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with shell /bin/someshell, again
- name: Ensure test user test_user1 is present in idview test_idview with shell /bin/someshell, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
shell: /bin/someshell
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without shell
- name: Ensure test user test_user1 is present in idview test_idview without shell
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
shell: ""
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without shell, again
- name: Ensure test user test_user1 is present in idview test_idview without shell, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
shell: ""
register: result
failed_when: result.changed or result.failed
# sshpubkey
- name: Ensure test user test_user is present in idview test_idview with sshpubkey
- name: Ensure test user test_user1 is present in idview test_idview with sshpubkey
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
sshpubkey:
# yamllint disable-line rule:line-length
- ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with sshpubkey, again
- name: Ensure test user test_user1 is present in idview test_idview with sshpubkey, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
sshpubkey:
# yamllint disable-line rule:line-length
- ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204
@@ -334,56 +374,56 @@
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without sshpubkey
- name: Ensure test user test_user1 is present in idview test_idview without sshpubkey
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
sshpubkey: []
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without sshpubkey, again
- name: Ensure test user test_user1 is present in idview test_idview without sshpubkey, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
sshpubkey: []
register: result
failed_when: result.changed or result.failed
# certificate
- name: Ensure test user test_user is present in idview test_idview with 1 certificate
- name: Ensure test user test_user1 is present in idview test_idview with 1 certificate
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 1 certificate, again
- name: Ensure test user test_user1 is present in idview test_idview with 1 certificate, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 1 certificate member
- name: Ensure test user test_user1 is present in idview test_idview with 1 certificate member
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
action: member
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 3 certificate members
- name: Ensure test user test_user1 is present in idview test_idview with 3 certificate members
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
@@ -392,10 +432,10 @@
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 3 certificate members, again
- name: Ensure test user test_user1 is present in idview test_idview with 3 certificate members, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
@@ -404,10 +444,10 @@
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificate members
- name: Ensure test user test_user1 is present in idview test_idview without certificate members
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert3.b64', rstrip=False) }}"
@@ -416,10 +456,10 @@
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificate members, again
- name: Ensure test user test_user1 is present in idview test_idview without certificate members, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert3.b64', rstrip=False) }}"
@@ -428,26 +468,26 @@
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificates
- name: Ensure test user test_user1 is present in idview test_idview without certificates
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate: []
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificates, again
- name: Ensure test user test_user1 is present in idview test_idview without certificates, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate: []
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificate members
- name: Ensure test user test_user1 is present in idview test_idview without certificate members
ipaidoverrideuser:
idview: test_idview
anchor: test_user
anchor: test_user1
certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
@@ -461,36 +501,56 @@
# absent
- name: Ensure test user test_user is absent in idview test_idview
- name: Ensure test user test_user1 is absent in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user
continue: true
anchor: test_user1
state: absent
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user is absent in idview test_idview, again
- name: Ensure test user test_user1 is absent in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user
continue: true
anchor: test_user1
state: absent
register: result
failed_when: result.changed or result.failed
- name: Ensure test users test_user2,3 are absent in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor:
- test_user2
- test_user3
state: absent
register: result
failed_when: not result.changed or result.failed
- name: Ensure test users test_user2,3 are absent in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor:
- test_user2
- test_user3
state: absent
register: result
failed_when: result.changed or result.failed
# CLEANUP TEST ITEMS
- name: Ensure test user test_user does not exist
- name: Ensure test user test_user1 does not exist
ipauser:
name: test_user
name: test_user1
state: absent
- name: Ensure test user test_user is absent in idview test_idview
- name: Ensure test users test_user1..3 are absent in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user
continue: true
anchor:
- test_user1
- test_user2
- test_user3
state: absent
- name: Ensure test idview test_idview does not exist