internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-03-26 21:33:05 +00:00
Code Issues Projects Releases Wiki Activity

idoverride{user,group}: Fix delete_continue with state absent

Browse Source 
All tasks for idoverrideuser and idoverridegroup with state absent
failed with "'continue' is required" when delete_continue was not set.

This happended as delete_continue was internally None and continue: None
was provided to the API.

The fix is simply to use '"continue": delete_continue or False' so that
continue is set to False in this case.
This commit is contained in:
Thomas Woerner
2023-11-16 13:47:04 +01:00
parent f1a6f44477
commit 92e44f6a6c
4 changed files with 281 additions and 160 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/modules/ipaidoverridegroup.py
View File

@@ -332,7 +332,7 @@ def main():
merge_dicts( merge_dicts(
{ {
"ipaanchoruuid": anchor, "ipaanchoruuid": anchor,
"continue": delete_continue "continue": delete_continue or False
}, },
runtime_args runtime_args
)] )]

2
plugins/modules/ipaidoverrideuser.py
View File

@@ -572,7 +572,7 @@ def main():
merge_dicts( merge_dicts(
{ {
"ipaanchoruuid": anchor, "ipaanchoruuid": anchor,
"continue": delete_continue "continue": delete_continue or False
}, },
runtime_args runtime_args
)] )]

157
tests/idoverridegroup/test_idoverridegroup.yml
View File

@@ -18,16 +18,21 @@
# CLEANUP TEST ITEMS # CLEANUP TEST ITEMS
- name: Ensure test group test_group does not exist - name: Ensure test groups test_group1..3 do not exist
ipagroup: ipagroup:
name: test_group name:
- test_group1
- test_group2
- test_group3
state: absent state: absent
- name: Ensure test group test_group is absent in idview test_idview - name: Ensure test groups test_group1..3 are absent in idview test_idview
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor:
continue: true - test_group1
- test_group2
- test_group3
state: absent state: absent
- name: Ensure test idview test_idview does not exist - name: Ensure test idview test_idview does not exist
@@ -37,9 +42,17 @@
# CREATE TEST ITEMS # CREATE TEST ITEMS
- name: Ensure test group test_group exists - name: Ensure test group test_group1 exists
ipagroup: ipagroup:
name: test_group name: test_group1
- name: Ensure test group test_group2 exists
ipagroup:
name: test_group2
- name: Ensure test group test_group3 exists
ipagroup:
name: test_group3
- name: Ensure test idview test_idview exists - name: Ensure test idview test_idview exists
ipaidview: ipaidview:
@@ -47,118 +60,146 @@
# TESTS # TESTS
- name: Ensure test group test_group is present in idview test_idview - name: Ensure test group test_group1 is present in idview test_idview
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview, again - name: Ensure test group test_group1 is present in idview test_idview, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group2 is present in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group2
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group2 is present in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group2
register: result
failed_when: result.changed or result.failed
- name: Ensure test group test_group3 is present in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor: test_group3
register: result
failed_when: not result.changed or result.failed
- name: Ensure test group test_group3 is present in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor: test_group3
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# description # description
- name: Ensure test group test_group is present in idview test_idview with description - name: Ensure test group test_group1 is present in idview test_idview with description
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
description: "test_group description" description: "test_group1 description"
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview with description, again - name: Ensure test group test_group1 is present in idview test_idview with description, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
description: "test_group description" description: "test_group1 description"
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without description - name: Ensure test group test_group1 is present in idview test_idview without description
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
description: "" description: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without description, again - name: Ensure test group test_group1 is present in idview test_idview without description, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
description: "" description: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# name # name
- name: Ensure test group test_group is present in idview test_idview with internal name test_123_group - name: Ensure test group test_group1 is present in idview test_idview with internal name test_123_group
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
name: test_123_group name: test_123_group
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview with internal name test_123_group, again - name: Ensure test group test_group1 is present in idview test_idview with internal name test_123_group, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
name: test_123_group name: test_123_group
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without internal name - name: Ensure test group test_group1 is present in idview test_idview without internal name
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
name: "" name: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without internal name, again - name: Ensure test group test_group1 is present in idview test_idview without internal name, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
name: "" name: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# gid # gid
- name: Ensure test group test_group is present in idview test_idview with gid 20001 - name: Ensure test group test_group1 is present in idview test_idview with gid 20001
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
gid: 20001 gid: 20001
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview with gid 20001, again - name: Ensure test group test_group1 is present in idview test_idview with gid 20001, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
gid: 20001 gid: 20001
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without gid - name: Ensure test group test_group1 is present in idview test_idview without gid
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
gid: "" gid: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is present in idview test_idview without gid, again - name: Ensure test group test_group1 is present in idview test_idview without gid, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
gid: "" gid: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
@@ -167,36 +208,56 @@
# absent # absent
- name: Ensure test group test_group is absent in idview test_idview - name: Ensure test group test_group1 is absent in idview test_idview
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
continue: true
state: absent state: absent
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test group test_group is absent in idview test_idview, again - name: Ensure test group test_group1 is absent in idview test_idview, again
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor: test_group1
continue: true state: absent
register: result
failed_when: result.changed or result.failed
- name: Ensure test groups test_group2,3 are absent in idview test_idview
ipaidoverridegroup:
idview: test_idview
anchor:
- test_group2
- test_group3
state: absent
register: result
failed_when: not result.changed or result.failed
- name: Ensure test groups test_group2,3 are absent in idview test_idview, again
ipaidoverridegroup:
idview: test_idview
anchor:
- test_group2
- test_group3
state: absent state: absent
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# CLEANUP TEST ITEMS # CLEANUP TEST ITEMS
- name: Ensure test group test_group does not exist - name: Ensure test group test_group1 does not exist
ipagroup: ipagroup:
name: test_group name: test_group1
state: absent state: absent
- name: Ensure test group test_group is absent in idview test_idview - name: Ensure test groups test_group1..3 are absent in idview test_idview
ipaidoverridegroup: ipaidoverridegroup:
idview: test_idview idview: test_idview
anchor: test_group anchor:
continue: true - test_group1
- test_group2
- test_group3
state: absent state: absent
- name: Ensure test idview test_idview does not exist - name: Ensure test idview test_idview does not exist

280
tests/idoverrideuser/test_idoverrideuser.yml
View File

@@ -18,16 +18,21 @@
# CLEANUP TEST ITEMS # CLEANUP TEST ITEMS
- name: Ensure test user test_user does not exist - name: Ensure test users test_user1..3 do not exist
ipauser: ipauser:
name: test_user name:
- test_user1
- test_user2
- test_user3
state: absent state: absent
- name: Ensure test user test_user is absent in idview test_idview - name: Ensure test users test_user1..3 are absent in idview test_idview
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor:
continue: true - test_user1
- test_user2
- test_user3
state: absent state: absent
- name: Ensure test idview test_idview does not exist - name: Ensure test idview test_idview does not exist
@@ -37,11 +42,18 @@
# CREATE TEST ITEMS # CREATE TEST ITEMS
- name: Ensure test user test_user exists - name: Ensure test users test_user1..3 exist
ipauser: ipauser:
name: test_user users:
first: test - name: test_user1
last: user first: test
last: user1
- name: test_user2
first: test
last: user2
- name: test_user3
first: test
last: user3
- name: Ensure test idview test_idview exists - name: Ensure test idview test_idview exists
ipaidview: ipaidview:
@@ -59,274 +71,302 @@
# TESTS # TESTS
- name: Ensure test user test_user is present in idview test_idview - name: Ensure test user test_user1 is present in idview test_idview
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview, again - name: Ensure test user test_user1 is present in idview test_idview, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user2 is present in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user2
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user2 is present in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user2
register: result
failed_when: result.changed or result.failed
- name: Ensure test user test_user3 is present in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor: test_user3
register: result
failed_when: not result.changed or result.failed
- name: Ensure test user test_user3 is present in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor: test_user3
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# description # description
- name: Ensure test user test_user is present in idview test_idview with description - name: Ensure test user test_user1 is present in idview test_idview with description
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
description: "test_user description" description: "test_user1 description"
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with description, again - name: Ensure test user test_user1 is present in idview test_idview with description, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
description: "test_user description" description: "test_user1 description"
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without description - name: Ensure test user test_user1 is present in idview test_idview without description
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
description: "" description: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without description, again - name: Ensure test user test_user1 is present in idview test_idview without description, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
description: "" description: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# name # name
- name: Ensure test user test_user is present in idview test_idview with internal name test_123_user - name: Ensure test user test_user1 is present in idview test_idview with internal name test_123_user
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
name: test_123_user name: test_123_user
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with internal name test_123_user, again - name: Ensure test user test_user1 is present in idview test_idview with internal name test_123_user, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
name: test_123_user name: test_123_user
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without internal name - name: Ensure test user test_user1 is present in idview test_idview without internal name
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
name: "" name: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without internal name, again - name: Ensure test user test_user1 is present in idview test_idview without internal name, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
name: "" name: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# uid # uid
- name: Ensure test user test_user is present in idview test_idview with uid 20001 - name: Ensure test user test_user1 is present in idview test_idview with uid 20001
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
uid: 20001 uid: 20001
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with uid 20001, again - name: Ensure test user test_user1 is present in idview test_idview with uid 20001, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
uid: 20001 uid: 20001
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without uid - name: Ensure test user test_user1 is present in idview test_idview without uid
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
uid: "" uid: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without uid, again - name: Ensure test user test_user1 is present in idview test_idview without uid, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
uid: "" uid: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# gecos # gecos
- name: Ensure test user test_user is present in idview test_idview with gecos "Gecos Test" - name: Ensure test user test_user1 is present in idview test_idview with gecos "Gecos Test"
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gecos: Gecos Test öäüÇœß gecos: Gecos Test öäüÇœß
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with gecos "Gecos Test", again - name: Ensure test user test_user1 is present in idview test_idview with gecos "Gecos Test", again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gecos: Gecos Test öäüÇœß gecos: Gecos Test öäüÇœß
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gecos - name: Ensure test user test_user1 is present in idview test_idview without gecos
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gecos: "" gecos: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gecos, again - name: Ensure test user test_user1 is present in idview test_idview without gecos, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gecos: "" gecos: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# gidnumber # gidnumber
- name: Ensure test user test_user is present in idview test_idview with gidnumber 20001 - name: Ensure test user test_user1 is present in idview test_idview with gidnumber 20001
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gidnumber: 20001 gidnumber: 20001
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with gidnumber 20001, again - name: Ensure test user test_user1 is present in idview test_idview with gidnumber 20001, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gidnumber: 20001 gidnumber: 20001
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gidnumber - name: Ensure test user test_user1 is present in idview test_idview without gidnumber
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gidnumber: "" gidnumber: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without gidnumber, again - name: Ensure test user test_user1 is present in idview test_idview without gidnumber, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
gidnumber: "" gidnumber: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# homedir # homedir
- name: Ensure test user test_user is present in idview test_idview with homedir /Users - name: Ensure test user test_user1 is present in idview test_idview with homedir /Users
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
homedir: /Users homedir: /Users
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with homedir /Users, again - name: Ensure test user test_user1 is present in idview test_idview with homedir /Users, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
homedir: /Users homedir: /Users
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without homedir - name: Ensure test user test_user1 is present in idview test_idview without homedir
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
homedir: "" homedir: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without homedir, again - name: Ensure test user test_user1 is present in idview test_idview without homedir, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
homedir: "" homedir: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# shell # shell
- name: Ensure test user test_user is present in idview test_idview with shell /bin/someshell - name: Ensure test user test_user1 is present in idview test_idview with shell /bin/someshell
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
shell: /bin/someshell shell: /bin/someshell
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with shell /bin/someshell, again - name: Ensure test user test_user1 is present in idview test_idview with shell /bin/someshell, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
shell: /bin/someshell shell: /bin/someshell
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without shell - name: Ensure test user test_user1 is present in idview test_idview without shell
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
shell: "" shell: ""
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without shell, again - name: Ensure test user test_user1 is present in idview test_idview without shell, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
shell: "" shell: ""
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# sshpubkey # sshpubkey
- name: Ensure test user test_user is present in idview test_idview with sshpubkey - name: Ensure test user test_user1 is present in idview test_idview with sshpubkey
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
sshpubkey: sshpubkey:
# yamllint disable-line rule:line-length # yamllint disable-line rule:line-length
- ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204 - ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with sshpubkey, again - name: Ensure test user test_user1 is present in idview test_idview with sshpubkey, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
sshpubkey: sshpubkey:
# yamllint disable-line rule:line-length # yamllint disable-line rule:line-length
- ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204 - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCqmVDpEX5gnSjKuv97AyzOhaUMMKz8ahOA3GY77tVC4o68KNgMCmDSEG1/kOIaElngNLaCha3p/2iAcU9Bi1tLKUlm2bbO5NHNwHfRxY/3cJtq+/7D1vxJzqThYwI4F9vr1WxyY2+mMTv3pXbfAJoR8Mu06XaEY5PDetlDKjHLuNWF+/O7ZU8PsULTa1dJZFrtXeFpmUoLoGxQBvlrlcPI1zDciCSU24t27Zan5Py2l5QchyI7yhCyMM77KDtj5+AFVpmkb9+zq50rYJAyFVeyUvwjzErvQrKJzYpA0NyBp7vskWbt36M16/M/LxEK7HA6mkcakO3ESWx5MT1LAjvdlnxbWG3787MxweHXuB8CZU+9bZPFBaJ+VQtOfJ7I8eH0S16moPC4ak8FlcFvOH8ERDPWLFDqfy09yaZ7bVIF0//5ZI7Nf3YDe3S7GrBX5ieYuECyP6UNkTx9BRsAQeVvXEc6otzB7iCSnYBMGUGzCqeigoAWaVQUONsSR3Uatks= pinky@ipaserver.el81.local # noqa 204
@@ -334,56 +374,56 @@
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without sshpubkey - name: Ensure test user test_user1 is present in idview test_idview without sshpubkey
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
sshpubkey: [] sshpubkey: []
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without sshpubkey, again - name: Ensure test user test_user1 is present in idview test_idview without sshpubkey, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
sshpubkey: [] sshpubkey: []
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# certificate # certificate
- name: Ensure test user test_user is present in idview test_idview with 1 certificate - name: Ensure test user test_user1 is present in idview test_idview with 1 certificate
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}" - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 1 certificate, again - name: Ensure test user test_user1 is present in idview test_idview with 1 certificate, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}" - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 1 certificate member - name: Ensure test user test_user1 is present in idview test_idview with 1 certificate member
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}" - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
action: member action: member
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 3 certificate members - name: Ensure test user test_user1 is present in idview test_idview with 3 certificate members
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}" - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}" - "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
@@ -392,10 +432,10 @@
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview with 3 certificate members, again - name: Ensure test user test_user1 is present in idview test_idview with 3 certificate members, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}" - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}" - "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
@@ -404,10 +444,10 @@
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificate members - name: Ensure test user test_user1 is present in idview test_idview without certificate members
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}" - "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert3.b64', rstrip=False) }}" - "{{ lookup('file', 'cert3.b64', rstrip=False) }}"
@@ -416,10 +456,10 @@
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificate members, again - name: Ensure test user test_user1 is present in idview test_idview without certificate members, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}" - "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert3.b64', rstrip=False) }}" - "{{ lookup('file', 'cert3.b64', rstrip=False) }}"
@@ -428,26 +468,26 @@
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificates - name: Ensure test user test_user1 is present in idview test_idview without certificates
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: [] certificate: []
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificates, again - name: Ensure test user test_user1 is present in idview test_idview without certificates, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: [] certificate: []
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
- name: Ensure test user test_user is present in idview test_idview without certificate members - name: Ensure test user test_user1 is present in idview test_idview without certificate members
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
certificate: certificate:
- "{{ lookup('file', 'cert1.b64', rstrip=False) }}" - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
- "{{ lookup('file', 'cert2.b64', rstrip=False) }}" - "{{ lookup('file', 'cert2.b64', rstrip=False) }}"
@@ -461,36 +501,56 @@
# absent # absent
- name: Ensure test user test_user is absent in idview test_idview - name: Ensure test user test_user1 is absent in idview test_idview
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
continue: true
state: absent state: absent
register: result register: result
failed_when: not result.changed or result.failed failed_when: not result.changed or result.failed
- name: Ensure test user test_user is absent in idview test_idview, again - name: Ensure test user test_user1 is absent in idview test_idview, again
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor: test_user1
continue: true state: absent
register: result
failed_when: result.changed or result.failed
- name: Ensure test users test_user2,3 are absent in idview test_idview
ipaidoverrideuser:
idview: test_idview
anchor:
- test_user2
- test_user3
state: absent
register: result
failed_when: not result.changed or result.failed
- name: Ensure test users test_user2,3 are absent in idview test_idview, again
ipaidoverrideuser:
idview: test_idview
anchor:
- test_user2
- test_user3
state: absent state: absent
register: result register: result
failed_when: result.changed or result.failed failed_when: result.changed or result.failed
# CLEANUP TEST ITEMS # CLEANUP TEST ITEMS
- name: Ensure test user test_user does not exist - name: Ensure test user test_user1 does not exist
ipauser: ipauser:
name: test_user name: test_user1
state: absent state: absent
- name: Ensure test user test_user is absent in idview test_idview - name: Ensure test users test_user1..3 are absent in idview test_idview
ipaidoverrideuser: ipaidoverrideuser:
idview: test_idview idview: test_idview
anchor: test_user anchor:
continue: true - test_user1
- test_user2
- test_user3
state: absent state: absent
- name: Ensure test idview test_idview does not exist - name: Ensure test idview test_idview does not exist