diff --git a/.ansible-lint b/.ansible-lint index 4db98b76..e71a16f8 100644 --- a/.ansible-lint +++ b/.ansible-lint @@ -1,3 +1,4 @@ +--- exclude_paths: - .ansible-freeipa-tests/ - .cache/ @@ -8,22 +9,21 @@ exclude_paths: - .yamllint - molecule/ - tests/azure/ + - meta/runtime.yml +kinds: + - playbook: '**/tests/**/test_*.yml' + - playbook: '**/playbooks/**/*.yml' parseable: true quiet: false skip_list: - - '201' # Trailing whitespace - - '204' # Lines should be no longer than 160 chars - - '206' # Variables should have spaces before and after: {{ var_name }}' - - '208' # File permissions not mentioned - '301' # Commands should not change things if nothing needs doing' - - '305' # Use shell only when shell functionality is required' - - '306' # Shells that use pipes should set the pipefail option' - - '502' # All tasks should be named - - '505' # Referenced missing file + - '305' # Use shell only when shell functionality is required + - '306' # risky-shell-pipe + - yaml # yamllint should be executed separately. use_default_rules: true diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 80400482..d680f076 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -21,6 +21,7 @@ jobs: tests/*/*/*.yml playbooks/*.yml playbooks/*/*.yml + roles/*/*/*.yml env: ANSIBLE_MODULE_UTILS: plugins/module_utils ANSIBLE_LIBRARY: plugins/modules diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 9ad47baa..51c3ca91 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -7,7 +7,9 @@ repos: always_run: false pass_filenames: true files: \.(yaml|yml)$ - entry: env ANSIBLE_LIBRARY=./plugins/modules ANSIBLE_MODULE_UTILS=./plugins/module_utils ANSIBLE_DOC_FRAGMENT_PLUGINS=./plugins/doc_fragments ansible-lint --force-color + exclude: /env[^/]*.(yaml|yml)$ + entry: | + env ANSIBLE_LIBRARY=./plugins/modules ANSIBLE_MODULE_UTILS=./plugins/module_utils ANSIBLE_DOC_FRAGMENT_PLUGINS=./plugins/doc_fragments ansible-lint - repo: https://github.com/adrienverge/yamllint.git rev: v1.26.1 hooks: diff --git a/.yamllint b/.yamllint index 3671e728..5fbcc17c 100644 --- a/.yamllint +++ b/.yamllint @@ -16,13 +16,8 @@ rules: truthy: allowed-values: ["yes", "no", "true", "false", "True", "False"] level: error + line-length: + max: 160 # Disabled rules - document-start: disable indentation: disable - line-length: disable - colons: disable - empty-lines: disable comments: disable - comments-indentation: disable - trailing-spaces: disable - new-line-at-end-of-file: disable diff --git a/README-config.md b/README-config.md index f7a5b681..a756f67b 100644 --- a/README-config.md +++ b/README-config.md @@ -56,7 +56,7 @@ Example playbook to read config options: register: result - name: display default login shell debug: - msg: '{{result.config.defaultlogin }}' + msg: '{{ result.config.defaultlogin }}' - name: ensure defaultloginshell and maxusernamelength are set as required ipaconfig: diff --git a/galaxy.yml b/galaxy.yml index 6f2a5c04..9bd34760 100644 --- a/galaxy.yml +++ b/galaxy.yml @@ -1,3 +1,4 @@ +--- namespace: "freeipa" name: "ansible_freeipa" version: "A.B.C" diff --git a/meta/runtime.yml b/meta/runtime.yml index aba42e9b..18dabe9d 100644 --- a/meta/runtime.yml +++ b/meta/runtime.yml @@ -1 +1,2 @@ +--- requires_ansible: ">=2.9" diff --git a/molecule/resources/playbooks/prepare-common.yml b/molecule/resources/playbooks/prepare-common.yml index 6dd93532..2292e4c9 100644 --- a/molecule/resources/playbooks/prepare-common.yml +++ b/molecule/resources/playbooks/prepare-common.yml @@ -1,3 +1,4 @@ +--- # IPA depends on IPv6 and without it dirsrv service won't start. - name: Ensure IPv6 is ENABLED sysctl: @@ -6,7 +7,7 @@ sysctl_set: yes state: present reload: yes - with_items : + with_items: - name: net.ipv6.conf.all.disable_ipv6 value: 0 - name: net.ipv6.conf.lo.disable_ipv6 @@ -25,9 +26,8 @@ - name: Ensure fs.protected_regular is disabled sysctl: name: fs.protected_regular - value: 0 + value: '0' sysctl_set: yes state: present reload: yes when: result.stat.exists - diff --git a/molecule/resources/playbooks/prepare.yml b/molecule/resources/playbooks/prepare.yml index 26d139e4..761d4a95 100644 --- a/molecule/resources/playbooks/prepare.yml +++ b/molecule/resources/playbooks/prepare.yml @@ -16,6 +16,7 @@ owner: dirsrv group: dirsrv path: "{{ item }}" + mode: 0770 loop: - /var/lock/dirsrv/ - /var/lock/dirsrv/slapd-TEST-LOCAL/ diff --git a/playbooks/automount/automount-location-absent.yml b/playbooks/automount/automount-location-absent.yml index f31a4394..48114956 100644 --- a/playbooks/automount/automount-location-absent.yml +++ b/playbooks/automount/automount-location-absent.yml @@ -10,4 +10,3 @@ - DMZ - internal state: absent - diff --git a/playbooks/automount/automount-location-present.yml b/playbooks/automount/automount-location-present.yml index 72e7a402..f2b74555 100644 --- a/playbooks/automount/automount-location-present.yml +++ b/playbooks/automount/automount-location-present.yml @@ -10,4 +10,3 @@ - DMZ - internal state: present - diff --git a/playbooks/config/retrieve-config.yml b/playbooks/config/retrieve-config.yml index 7f05e802..595c9b1d 100644 --- a/playbooks/config/retrieve-config.yml +++ b/playbooks/config/retrieve-config.yml @@ -10,5 +10,6 @@ ipaadmin_password: SomeADMINpassword register: serverconfig - - debug: + - name: Display current configuration. + debug: msg: "{{ serverconfig }}" diff --git a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml index 10976de1..6c56f1e4 100644 --- a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml +++ b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-absent.yml @@ -5,7 +5,7 @@ gather_facts: false tasks: - # Ensure DNS zone is present - - ipadnsforwardzone: + - name: Ensure DNS forward zone is absent + ipadnsforwardzone: ipaadmin_password: SomeADMINpassword state: absent diff --git a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml index 1970432f..92b698cf 100644 --- a/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml +++ b/playbooks/dnsforwardzone/ensure-dnsforwardzone-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure DNS zone is present - - ipadnsforwardzone: + - name: Ensure DNS forward zone is present + ipadnsforwardzone: ipaadmin_password: SomeADMINpassword name: example.com forwarders: diff --git a/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml b/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml index c27767b5..449497bd 100644 --- a/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml +++ b/playbooks/dnsforwardzone/ensure-dnsforwardzone-with-forwarder-port.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure DNS zone is present - - ipadnsforwardzone: + - name: Ensure DNS forward zone is present with forwarder address and non-standard port. + ipadnsforwardzone: ipaadmin_password: SomeADMINpassword name: example.com forwarders: diff --git a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml index f4dffc66..1bdba90c 100644 --- a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml +++ b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-absent.yml @@ -1,12 +1,11 @@ --- -- name: Test PTR Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a PTR record is present - - name: Ensure that 'host04' has A and AAAA records. + - name: Ensure that 'host04' A and AAAA records are absent. ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: ipatest.local diff --git a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml index b59acfe0..3f794574 100644 --- a/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml +++ b/playbooks/dnsrecord/ensure-A-and-AAAA-records-are-present.yml @@ -1,12 +1,11 @@ --- -- name: Test PTR Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a PTR record is present - - name: Ensure that 'host04' has A and AAAA records. + - name: Ensure that 'host04' A and AAAA records are present. ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: ipatest.local diff --git a/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml b/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml index 9b02b147..751fc043 100644 --- a/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml +++ b/playbooks/dnsrecord/ensure-CNAME-record-is-absent.yml @@ -1,12 +1,12 @@ --- -- name: Test CNAME Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that 'host04' has CNAME, with cname_hostname - - ipadnsrecord: + - name: Ensure that 'host04' has CNAME, with cname_hostname, is absent + ipadnsrecord: zone_name: example.com name: host04 cname_hostname: host04.example.com diff --git a/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml b/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml index e6e918c3..3a0c5b95 100644 --- a/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-CNAME-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test CNAME Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that 'host04' has CNAME, with cname_hostname - - ipadnsrecord: + - name: Ensure that 'host04' has CNAME, with cname_hostname, is present + ipadnsrecord: zone_name: example.com name: host04 cname_hostname: host04.example.com diff --git a/playbooks/dnsrecord/ensure-MX-record-is-present.yml b/playbooks/dnsrecord/ensure-MX-record-is-present.yml index 139c1681..df21c7ac 100644 --- a/playbooks/dnsrecord/ensure-MX-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-MX-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Ensure MX Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure an MX record is absent - - ipadnsrecord: + - name: Ensure an MX record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: '@' record_type: 'MX' diff --git a/playbooks/dnsrecord/ensure-PTR-record-is-present.yml b/playbooks/dnsrecord/ensure-PTR-record-is-present.yml index 0a59c0d2..3a3fc3b9 100644 --- a/playbooks/dnsrecord/ensure-PTR-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-PTR-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test PTR Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a PTR record is present - - ipadnsrecord: + - name: Ensure a PTR record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: 5 record_type: 'PTR' diff --git a/playbooks/dnsrecord/ensure-SRV-record-is-present.yml b/playbooks/dnsrecord/ensure-SRV-record-is-present.yml index 3c18ff34..ba00f36a 100644 --- a/playbooks/dnsrecord/ensure-SRV-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-SRV-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test SRV Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a SRV record is present - - ipadnsrecord: + - name: Ensure a SRV record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: _kerberos._udp.example.com record_type: 'SRV' diff --git a/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml b/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml index 99ec5542..9a902c00 100644 --- a/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-SSHFP-record-is-present.yml @@ -1,13 +1,13 @@ --- -- name: Test SSHFP Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a SSHFP record is present # SSHFP fingerprint generated with `ssh-keygen -r host04.testzone.local` - - ipadnsrecord: + - name: Ensure a SSHFP record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: example.com name: host04 diff --git a/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml b/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml index 65e94792..fdbe9ad0 100644 --- a/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-TLSA-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test SSHFP Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a SSHFP record is present - - ipadnsrecord: + - name: Ensure a TLSA record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword zone_name: example.com name: host04 diff --git a/playbooks/dnsrecord/ensure-TXT-record-is-present.yml b/playbooks/dnsrecord/ensure-TXT-record-is-present.yml index 35be86e1..0ca8bdc8 100644 --- a/playbooks/dnsrecord/ensure-TXT-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-TXT-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test TXT Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a TXT record is absent - - ipadnsrecord: + - name: Ensure a TXT record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: _kerberos record_type: 'TXT' diff --git a/playbooks/dnsrecord/ensure-URI-record-is-present.yml b/playbooks/dnsrecord/ensure-URI-record-is-present.yml index be1b25df..c07f24f5 100644 --- a/playbooks/dnsrecord/ensure-URI-record-is-present.yml +++ b/playbooks/dnsrecord/ensure-URI-record-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test URI Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure a URI record is absent - - ipadnsrecord: + - name: Ensure a URI record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: _ftp._tcp record_type: 'URI' diff --git a/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml b/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml index 3cfed05c..6397bd44 100644 --- a/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml +++ b/playbooks/dnsrecord/ensure-dnsrecord-is-absent.yml @@ -1,12 +1,12 @@ --- -- name: Test DNS Record is absent. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that dns record is absent - - ipadnsrecord: + - name: Ensure that dns localhost AAAA record is absent + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: host01 zone_name: example.com diff --git a/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml b/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml index b1ae113d..132f65f1 100644 --- a/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml +++ b/playbooks/dnsrecord/ensure-dnsrecord-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test DNS Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that dns record is present - - ipadnsrecord: + - name: Ensure that dns record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: host01 zone_name: example.com diff --git a/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml b/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml index bef7d33a..dbbf3310 100644 --- a/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml +++ b/playbooks/dnsrecord/ensure-dnsrecord-with-reverse-is-present.yml @@ -1,12 +1,12 @@ --- -- name: Test DNS Record is present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that dns record is present - - ipadnsrecord: + - name: Ensure that dns record is present + ipadnsrecord: ipaadmin_password: SomeADMINpassword name: host01 zone_name: example.com diff --git a/playbooks/dnsrecord/ensure-presence-multiple-records.yml b/playbooks/dnsrecord/ensure-presence-multiple-records.yml index 94e01aea..48e32938 100644 --- a/playbooks/dnsrecord/ensure-presence-multiple-records.yml +++ b/playbooks/dnsrecord/ensure-presence-multiple-records.yml @@ -1,12 +1,12 @@ --- -- name: Test multiple DNS Records are present. +- name: Playbook to manage DNS records. hosts: ipaserver become: true gather_facts: false tasks: - # Ensure that multiple dns records are present - - ipadnsrecord: + - name: Ensure that multiple dns records are present + ipadnsrecord: ipaadmin_password: SomeADMINpassword records: - name: host01 diff --git a/playbooks/dnszone/dnszone-all-params.yml b/playbooks/dnszone/dnszone-all-params.yml index c02485f5..79747d2a 100644 --- a/playbooks/dnszone/dnszone-all-params.yml +++ b/playbooks/dnszone/dnszone-all-params.yml @@ -1,3 +1,4 @@ +--- - name: dnszone present hosts: ipaserver become: true diff --git a/playbooks/dnszone/dnszone-present.yml b/playbooks/dnszone/dnszone-present.yml index c3106317..04d07ba0 100644 --- a/playbooks/dnszone/dnszone-present.yml +++ b/playbooks/dnszone/dnszone-present.yml @@ -1,3 +1,4 @@ +--- - name: dnszone present hosts: ipaserver become: true diff --git a/playbooks/host/host-member-certificate-absent.yml b/playbooks/host/host-member-certificate-absent.yml index 841b39cd..6ef7aa06 100644 --- a/playbooks/host/host-member-certificate-absent.yml +++ b/playbooks/host/host-member-certificate-absent.yml @@ -1,3 +1,4 @@ +--- - name: Host member certificate absent hosts: ipaserver become: true @@ -8,6 +9,24 @@ ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMD + EwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6X + sqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7G + PHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8H + nSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRc + mZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2Q + glidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplR + BoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldn + f13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4K + k+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGs + GLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31y + kBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0 + fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9m + BDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8 + AN65NAdv7+js8jKUKCuyji8r3 action: member state: absent diff --git a/playbooks/host/host-member-certificate-present.yml b/playbooks/host/host-member-certificate-present.yml index 8071a942..17f5e595 100644 --- a/playbooks/host/host-member-certificate-present.yml +++ b/playbooks/host/host-member-certificate-present.yml @@ -1,3 +1,4 @@ +--- - name: Host member certificate present hosts: ipaserver become: true @@ -8,5 +9,23 @@ ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMD + EwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6X + sqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7G + PHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8H + nSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRc + mZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2Q + glidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplR + BoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldn + f13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4K + k+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGs + GLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31y + kBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0 + fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9m + BDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8 + AN65NAdv7+js8jKUKCuyji8r3 action: member diff --git a/playbooks/host/host-member-managedby_host-absent.yml b/playbooks/host/host-member-managedby_host-absent.yml index 56ee6818..11867775 100644 --- a/playbooks/host/host-member-managedby_host-absent.yml +++ b/playbooks/host/host-member-managedby_host-absent.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure host member managedby_host 'server.example.com' is absent + ipahost: ipaadmin_password: SomeADMINpassword name: host01.example.com managedby_host: server.example.com diff --git a/playbooks/host/host-member-managedby_host-present.yml b/playbooks/host/host-member-managedby_host-present.yml index 9d27f4cd..d62459d1 100644 --- a/playbooks/host/host-member-managedby_host-present.yml +++ b/playbooks/host/host-member-managedby_host-present.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure host member managedby_host 'server.example.com' is present + ipahost: ipaadmin_password: SomeADMINpassword name: host01.example.com managedby_host: server.example.com diff --git a/playbooks/host/host-present-with-certificate.yml b/playbooks/host/host-present-with-certificate.yml index 919d7c0b..27f4afec 100644 --- a/playbooks/host/host-present-with-certificate.yml +++ b/playbooks/host/host-present-with-certificate.yml @@ -1,3 +1,4 @@ +--- - name: Host present with certificate hosts: ipaserver become: true @@ -8,5 +9,23 @@ ipaadmin_password: SomeADMINpassword name: host01.example.com certificate: - - MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMD + EwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6X + sqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7G + PHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8H + nSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRc + mZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2Q + glidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplR + BoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldn + f13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4K + k+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGs + GLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31y + kBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0 + fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9m + BDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8 + AN65NAdv7+js8jKUKCuyji8r3 force: yes diff --git a/playbooks/host/host-present-with-managedby_host.yml b/playbooks/host/host-present-with-managedby_host.yml index 31adaa1d..1a54ef99 100644 --- a/playbooks/host/host-present-with-managedby_host.yml +++ b/playbooks/host/host-present-with-managedby_host.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure host is present with managedby_host attribute. + ipahost: ipaadmin_password: SomeADMINpassword name: host01.example.com managedby_host: server.example.com diff --git a/playbooks/host/hosts-member-certificate-absent.yml b/playbooks/host/hosts-member-certificate-absent.yml index 45b47406..6465a8df 100644 --- a/playbooks/host/hosts-member-certificate-absent.yml +++ b/playbooks/host/hosts-member-certificate-absent.yml @@ -10,9 +10,45 @@ hosts: - name: host01.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMD + EwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6X + sqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7G + PHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8H + nSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRc + mZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2Q + glidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplR + BoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldn + f13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4K + k+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGs + GLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31y + kBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0 + fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9m + BDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8 + AN65NAdv7+js8jKUKCuyji8r3 - name: host02.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NDVaFw0yMD + EwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhFonx99AKi44iaZkrl + MKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJijJ7S/4o7h7eeqcJVXJkE + hWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClplysL8OyyEG7pbX/aB9iAfFb/ + +vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1wNw1rqWKF1ZzagWRlG4QgzRGwQ4q + uc7yO98TKikj2OPiIt7Zd46hbqQxmgGBtCkVOZIhxu77OmNrFsXmM4rZZpm + qh0UdqcpwkRojVnGXmNqeMCd6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5 + R1mG4RJ2XAgMBAAGjUzBRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFK + OnpTAfBgNVHSMEGDAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBB + g97T2Uc1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdo + tIWlG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKhd + hu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMngCfGU + e1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcmDKfNT3YZM + 8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi8mW+V6bAqn9pi + r/J14r4YFnqMGgjmdt81tscJV action: member state: absent diff --git a/playbooks/host/hosts-member-certificate-present.yml b/playbooks/host/hosts-member-certificate-present.yml index c5908e61..9ad049c9 100644 --- a/playbooks/host/hosts-member-certificate-present.yml +++ b/playbooks/host/hosts-member-certificate-present.yml @@ -10,8 +10,44 @@ hosts: - name: host01.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMD + EwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6X + sqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7G + PHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8H + nSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRc + mZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2Q + glidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplR + BoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldn + f13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4K + k+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGs + GLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31y + kBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0 + fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9m + BDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8 + AN65NAdv7+js8jKUKCuyji8r3 - name: host02.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NDVaFw0yMD + EwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhFonx99AKi44iaZkrl + MKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJijJ7S/4o7h7eeqcJVXJkE + hWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClplysL8OyyEG7pbX/aB9iAfFb/ + +vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1wNw1rqWKF1ZzagWRlG4QgzRGwQ4q + uc7yO98TKikj2OPiIt7Zd46hbqQxmgGBtCkVOZIhxu77OmNrFsXmM4rZZpm + qh0UdqcpwkRojVnGXmNqeMCd6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5 + R1mG4RJ2XAgMBAAGjUzBRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFK + OnpTAfBgNVHSMEGDAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBB + g97T2Uc1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdo + tIWlG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKhd + hu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMngCfGU + e1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcmDKfNT3YZM + 8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi8mW+V6bAqn9pi + r/J14r4YFnqMGgjmdt81tscJV action: member diff --git a/playbooks/host/hosts-member-managedby_host-present.yml b/playbooks/host/hosts-member-managedby_host-present.yml index b09771ef..4c867402 100644 --- a/playbooks/host/hosts-member-managedby_host-present.yml +++ b/playbooks/host/hosts-member-managedby_host-present.yml @@ -4,7 +4,7 @@ become: true tasks: - - name: Ensure hosts manadegby_host is absent. + - name: Ensure hosts manadegby_host is present. ipahost: ipaadmin_password: SomeADMINpassword hosts: diff --git a/playbooks/host/hosts-present-with-certificate.yml b/playbooks/host/hosts-present-with-certificate.yml index 3cbd2387..c3ac9349 100644 --- a/playbooks/host/hosts-present-with-certificate.yml +++ b/playbooks/host/hosts-present-with-certificate.yml @@ -10,8 +10,44 @@ hosts: - name: host01.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMD + EwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6X + sqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7G + PHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8H + nSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRc + mZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2Q + glidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplR + BoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldn + f13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4K + k+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGs + GLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31y + kBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0 + fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9m + BDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8 + AN65NAdv7+js8jKUKCuyji8r3 - name: host02.example.com certificate: - - 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 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZIhvc + NAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NDVaFw0yMD + EwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBA + QUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhFonx99AKi44iaZkrl + MKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJijJ7S/4o7h7eeqcJVXJkE + hWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClplysL8OyyEG7pbX/aB9iAfFb/ + +vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1wNw1rqWKF1ZzagWRlG4QgzRGwQ4q + uc7yO98TKikj2OPiIt7Zd46hbqQxmgGBtCkVOZIhxu77OmNrFsXmM4rZZpm + qh0UdqcpwkRojVnGXmNqeMCd6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5 + R1mG4RJ2XAgMBAAGjUzBRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFK + OnpTAfBgNVHSMEGDAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBA + f8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBB + g97T2Uc1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdo + tIWlG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKhd + hu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMngCfGU + e1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcmDKfNT3YZM + 8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi8mW+V6bAqn9pi + r/J14r4YFnqMGgjmdt81tscJV force: yes diff --git a/playbooks/host/hosts-present-with-managedby_host.yml b/playbooks/host/hosts-present-with-managedby_host.yml index 750319ad..ad04fac8 100644 --- a/playbooks/host/hosts-present-with-managedby_host.yml +++ b/playbooks/host/hosts-present-with-managedby_host.yml @@ -4,7 +4,8 @@ become: true tasks: - - ipahost: + - name: Ensure hosts are present with managedby_host attribute. + ipahost: ipaadmin_password: SomeADMINpassword hosts: - name: host01.example.com diff --git a/playbooks/hostgroup/ensure-hostgroup-is-absent.yml b/playbooks/hostgroup/ensure-hostgroup-is-absent.yml index c9e37d3f..f82fecc9 100644 --- a/playbooks/hostgroup/ensure-hostgroup-is-absent.yml +++ b/playbooks/hostgroup/ensure-hostgroup-is-absent.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure host-group databases is present - - ipahostgroup: + - name: Ensure host-group databases is absent + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases state: absent diff --git a/playbooks/hostgroup/ensure-hostgroup-is-present.yml b/playbooks/hostgroup/ensure-hostgroup-is-present.yml index bc059dba..b4430db5 100644 --- a/playbooks/hostgroup/ensure-hostgroup-is-present.yml +++ b/playbooks/hostgroup/ensure-hostgroup-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure host-group databases is present - - ipahostgroup: + - name: Ensure host-group databases is present + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases host: diff --git a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml index b3fbd558..fe41c5fd 100644 --- a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml +++ b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure hosts and hostgroups are present in existing databases hostgroup - - ipahostgroup: + - name: Ensure hosts and hostgroups are absent in existing databases hostgroup + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases host: diff --git a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml index c103ce92..70712783 100644 --- a/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml +++ b/playbooks/hostgroup/ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure hosts and hostgroups are present in existing databases hostgroup - - ipahostgroup: + - name: Ensure hosts and hostgroups are present in existing databases hostgroup + ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases host: diff --git a/playbooks/hostgroup/rename-hostgroup.yml b/playbooks/hostgroup/rename-hostgroup.yml index 53937aa1..38dce199 100644 --- a/playbooks/hostgroup/rename-hostgroup.yml +++ b/playbooks/hostgroup/rename-hostgroup.yml @@ -4,7 +4,7 @@ become: yes tasks: - - name : Rename host-group from `databases` to `datalake` + - name: Rename host-group from `databases` to `datalake` ipahostgroup: ipaadmin_password: SomeADMINpassword name: databases diff --git a/playbooks/role/role-is-absent.yml b/playbooks/role/role-is-absent.yml index d8d88a1d..27151de1 100644 --- a/playbooks/role/role-is-absent.yml +++ b/playbooks/role/role-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole state: absent diff --git a/playbooks/role/role-is-present.yml b/playbooks/role/role-is-present.yml index 89ae6b61..80ecd9df 100644 --- a/playbooks/role/role-is-present.yml +++ b/playbooks/role/role-is-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole description: A role in IPA. diff --git a/playbooks/role/role-member-group-absent.yml b/playbooks/role/role-member-group-absent.yml index c4695f9b..cde4f236 100644 --- a/playbooks/role/role-member-group-absent.yml +++ b/playbooks/role/role-member-group-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'group' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole group: diff --git a/playbooks/role/role-member-group-present.yml b/playbooks/role/role-member-group-present.yml index c14c7ec2..ec162142 100644 --- a/playbooks/role/role-member-group-present.yml +++ b/playbooks/role/role-member-group-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'group' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole group: diff --git a/playbooks/role/role-member-host-absent.yml b/playbooks/role/role-member-host-absent.yml index 8acaeb28..00779195 100644 --- a/playbooks/role/role-member-host-absent.yml +++ b/playbooks/role/role-member-host-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'host' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole host: diff --git a/playbooks/role/role-member-host-present.yml b/playbooks/role/role-member-host-present.yml index 58359797..69a9396a 100644 --- a/playbooks/role/role-member-host-present.yml +++ b/playbooks/role/role-member-host-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'host' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole host: diff --git a/playbooks/role/role-member-hostgroup-absent.yml b/playbooks/role/role-member-hostgroup-absent.yml index ee07f97d..53bec0f3 100644 --- a/playbooks/role/role-member-hostgroup-absent.yml +++ b/playbooks/role/role-member-hostgroup-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'hostgroup' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole hostgroup: diff --git a/playbooks/role/role-member-hostgroup-present.yml b/playbooks/role/role-member-hostgroup-present.yml index 2caf9a2d..7ca7ea8c 100644 --- a/playbooks/role/role-member-hostgroup-present.yml +++ b/playbooks/role/role-member-hostgroup-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'hostgroup' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole hostgroup: diff --git a/playbooks/role/role-member-privilege-absent.yml b/playbooks/role/role-member-privilege-absent.yml index f6033904..0d186622 100644 --- a/playbooks/role/role-member-privilege-absent.yml +++ b/playbooks/role/role-member-privilege-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'privilege' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole privilege: diff --git a/playbooks/role/role-member-privilege-present.yml b/playbooks/role/role-member-privilege-present.yml index 837e989f..f7f05346 100644 --- a/playbooks/role/role-member-privilege-present.yml +++ b/playbooks/role/role-member-privilege-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'privilege' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole privilege: diff --git a/playbooks/role/role-member-service-absent.yml b/playbooks/role/role-member-service-absent.yml index 595047cf..2c5bd8cc 100644 --- a/playbooks/role/role-member-service-absent.yml +++ b/playbooks/role/role-member-service-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'service' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: testrole service: diff --git a/playbooks/role/role-member-service-present.yml b/playbooks/role/role-member-service-present.yml index 98dc9bea..505c44a9 100644 --- a/playbooks/role/role-member-service-present.yml +++ b/playbooks/role/role-member-service-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'service' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole service: diff --git a/playbooks/role/role-member-user-absent.yml b/playbooks/role/role-member-user-absent.yml index 3efda216..8425d5f4 100644 --- a/playbooks/role/role-member-user-absent.yml +++ b/playbooks/role/role-member-user-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'user' is absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: diff --git a/playbooks/role/role-member-user-present.yml b/playbooks/role/role-member-user-present.yml index 02a39be8..bee5f0d1 100644 --- a/playbooks/role/role-member-user-present.yml +++ b/playbooks/role/role-member-user-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role member 'user' is present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: diff --git a/playbooks/role/role-members-absent.yml b/playbooks/role/role-members-absent.yml index aedd81cb..6b34abf3 100644 --- a/playbooks/role/role-members-absent.yml +++ b/playbooks/role/role-members-absent.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role members are absent. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: diff --git a/playbooks/role/role-members-present.yml b/playbooks/role/role-members-present.yml index d659c1f5..aa3ca51a 100644 --- a/playbooks/role/role-members-present.yml +++ b/playbooks/role/role-members-present.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Ensure role members are present. + iparole: ipaadmin_password: SomeADMINpassword name: somerole user: @@ -21,3 +22,4 @@ - User Administrators service: - service01 + action: member diff --git a/playbooks/role/role-rename.yml b/playbooks/role/role-rename.yml index 9d078f52..9e53969d 100644 --- a/playbooks/role/role-rename.yml +++ b/playbooks/role/role-rename.yml @@ -5,7 +5,8 @@ gather_facts: no tasks: - - iparole: + - name: Rename role. + iparole: ipaadmin_password: SomeADMINpassword name: somerole rename: anotherrole diff --git a/playbooks/service/service-host-is-absent.yml b/playbooks/service/service-host-is-absent.yml index 5b3fbcbb..a6e4a376 100644 --- a/playbooks/service/service-host-is-absent.yml +++ b/playbooks/service/service-host-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure management host is absent. - - ipaservice: + - name: Ensure management host is absent. + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com host: "{{ groups.ipaserver[0] }}" diff --git a/playbooks/service/service-host-is-present.yml b/playbooks/service/service-host-is-present.yml index 46f5bb6f..28180667 100644 --- a/playbooks/service/service-host-is-present.yml +++ b/playbooks/service/service-host-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure management host is present. - - ipaservice: + - name: Ensure management host is present. + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com host: "{{ groups.ipaserver[0] }}" diff --git a/playbooks/service/service-is-absent.yml b/playbooks/service/service-is-absent.yml index 7fd138c0..8054908c 100644 --- a/playbooks/service/service-is-absent.yml +++ b/playbooks/service/service-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is absent - - ipaservice: + - name: Ensure service is absent + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com state: absent diff --git a/playbooks/service/service-is-disabled.yml b/playbooks/service/service-is-disabled.yml index b21e1929..893669e2 100644 --- a/playbooks/service/service-is-disabled.yml +++ b/playbooks/service/service-is-disabled.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is disabled - - ipaservice: + - name: Ensure service is disabled + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com state: disabled diff --git a/playbooks/service/service-is-present-with-all-attributes.yml b/playbooks/service/service-is-present-with-all-attributes.yml index a7494cc8..b53eaad9 100644 --- a/playbooks/service/service-is-present-with-all-attributes.yml +++ b/playbooks/service/service-is-present-with-all-attributes.yml @@ -5,12 +5,25 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com certificate: - - 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 + - > + MIICBjCCAW8CFHnm32VcXaUDGfEGdDL/erPSijUAMA0GCSqGSIb3DQ + EBCwUAMEIxCzAJBgNVBAYTAlhYMRUwEwYDVQQHDAxEZWZhdWx0IENp + dHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwHhcNMjAwMT + IzMDA1NjQ2WhcNMjEwMTIyMDA1NjQ2WjBCMQswCQYDVQQGEwJYWDEV + MBMGA1UEBwwMRGVmYXVsdCBDaXR5MRwwGgYDVQQKDBNEZWZhdWx0IE + NvbXBhbnkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDY + rdVmsr7iT3f67DM5bb1osSEe5/c91UUMEIcFq5wrgBhzVfs8iIMDVC + 1yiUGTsDLJNJc4nb1tUxeR9K5fh25E6n/eWDBP75NStotjAXRU4Ahi + 3FNRhWFOKesds5xNqgDk5/dY8UekJv2yUblQuZzeF8b2XFrmHuCaYu + FctzPfWwIDAQABMA0GCSqGSIb3DQEBCwUAA4GBACF+5RS8Ce0HRixG + Pu4Xd51i+Kzblg++lx8fDJ8GW5G16/Z1AsB72Hc7etJL2PksHlue/x + Cq6SA9fIfHc4TBNCiWjPSP1NhHJeYyoPiSkcYsqXuxWyoyRLbnAhBV + vhoiqZbUt3u3tGB0uMMA0yJvj07mP7Nea2KdBYVH8X1pM0V+ pac_type: - MS-PAC - PAD diff --git a/playbooks/service/service-is-present-with-host-force.yml b/playbooks/service/service-is-present-with-host-force.yml index a02fa7c2..aa0ab8e0 100644 --- a/playbooks/service/service-is-present-with-host-force.yml +++ b/playbooks/service/service-is-present-with-host-force.yml @@ -5,9 +5,8 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/ihavenodns.info force: yes - # state: absent diff --git a/playbooks/service/service-is-present-without-host-object.yml b/playbooks/service/service-is-present-without-host-object.yml index 2496177a..4c3c4edd 100644 --- a/playbooks/service/service-is-present-without-host-object.yml +++ b/playbooks/service/service-is-present-without-host-object.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.ansible.com skip_host_check: yes diff --git a/playbooks/service/service-is-present.yml b/playbooks/service/service-is-present.yml index e2c49274..18c86255 100644 --- a/playbooks/service/service-is-present.yml +++ b/playbooks/service/service-is-present.yml @@ -5,7 +5,7 @@ gather_facts: false tasks: - # Ensure service is present - - ipaservice: + - name: Ensure service is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com diff --git a/playbooks/service/service-member-certificate-absent.yml b/playbooks/service/service-member-certificate-absent.yml index bb4092b9..51770846 100644 --- a/playbooks/service/service-member-certificate-absent.yml +++ b/playbooks/service/service-member-certificate-absent.yml @@ -5,12 +5,24 @@ gather_facts: false tasks: - # Ensure service certificate is absent - - ipaservice: + - name: Ensure service certificate is absent + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com - certificate: - - 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 + - > + MIICBjCCAW8CFHnm32VcXaUDGfEGdDL/erPSijUAMA0GCSqGSIb3DQ + EBCwUAMEIxCzAJBgNVBAYTAlhYMRUwEwYDVQQHDAxEZWZhdWx0IENp + dHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwHhcNMjAwMT + IzMDA1NjQ2WhcNMjEwMTIyMDA1NjQ2WjBCMQswCQYDVQQGEwJYWDEV + MBMGA1UEBwwMRGVmYXVsdCBDaXR5MRwwGgYDVQQKDBNEZWZhdWx0IE + NvbXBhbnkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDY + rdVmsr7iT3f67DM5bb1osSEe5/c91UUMEIcFq5wrgBhzVfs8iIMDVC + 1yiUGTsDLJNJc4nb1tUxeR9K5fh25E6n/eWDBP75NStotjAXRU4Ahi + 3FNRhWFOKesds5xNqgDk5/dY8UekJv2yUblQuZzeF8b2XFrmHuCaYu + FctzPfWwIDAQABMA0GCSqGSIb3DQEBCwUAA4GBACF+5RS8Ce0HRixG + Pu4Xd51i+Kzblg++lx8fDJ8GW5G16/Z1AsB72Hc7etJL2PksHlue/x + Cq6SA9fIfHc4TBNCiWjPSP1NhHJeYyoPiSkcYsqXuxWyoyRLbnAhBV + vhoiqZbUt3u3tGB0uMMA0yJvj07mP7Nea2KdBYVH8X1pM0V+ action: member state: absent diff --git a/playbooks/service/service-member-certificate-present.yml b/playbooks/service/service-member-certificate-present.yml index 025d0aa3..41c2c4a2 100644 --- a/playbooks/service/service-member-certificate-present.yml +++ b/playbooks/service/service-member-certificate-present.yml @@ -5,11 +5,24 @@ gather_facts: false tasks: - # Ensure service certificate is present - - ipaservice: + - name: Ensure service certificate is present + ipaservice: ipaadmin_password: SomeADMINpassword name: HTTP/www.example.com certificate: - - MIICBjCCAW8CFHnm32VcXaUDGfEGdDL/erPSijUAMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlhYMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwHhcNMjAwMTIzMDA1NjQ2WhcNMjEwMTIyMDA1NjQ2WjBCMQswCQYDVQQGEwJYWDEVMBMGA1UEBwwMRGVmYXVsdCBDaXR5MRwwGgYDVQQKDBNEZWZhdWx0IENvbXBhbnkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYrdVmsr7iT3f67DM5bb1osSEe5/c91UUMEIcFq5wrgBhzVfs8iIMDVC1yiUGTsDLJNJc4nb1tUxeR9K5fh25E6n/eWDBP75NStotjAXRU4Ahi3FNRhWFOKesds5xNqgDk5/dY8UekJv2yUblQuZzeF8b2XFrmHuCaYuFctzPfWwIDAQABMA0GCSqGSIb3DQEBCwUAA4GBACF+5RS8Ce0HRixGPu4Xd51i+Kzblg++lx8fDJ8GW5G16/Z1AsB72Hc7etJL2PksHlue/xCq6SA9fIfHc4TBNCiWjPSP1NhHJeYyoPiSkcYsqXuxWyoyRLbnAhBVvhoiqZbUt3u3tGB0uMMA0yJvj07mP7Nea2KdBYVH8X1pM0V+ + - > + MIICBjCCAW8CFHnm32VcXaUDGfEGdDL/erPSijUAMA0GCSqGSIb3DQ + EBCwUAMEIxCzAJBgNVBAYTAlhYMRUwEwYDVQQHDAxEZWZhdWx0IENp + dHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwHhcNMjAwMT + IzMDA1NjQ2WhcNMjEwMTIyMDA1NjQ2WjBCMQswCQYDVQQGEwJYWDEV + MBMGA1UEBwwMRGVmYXVsdCBDaXR5MRwwGgYDVQQKDBNEZWZhdWx0IE + NvbXBhbnkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDY + rdVmsr7iT3f67DM5bb1osSEe5/c91UUMEIcFq5wrgBhzVfs8iIMDVC + 1yiUGTsDLJNJc4nb1tUxeR9K5fh25E6n/eWDBP75NStotjAXRU4Ahi + 3FNRhWFOKesds5xNqgDk5/dY8UekJv2yUblQuZzeF8b2XFrmHuCaYu + FctzPfWwIDAQABMA0GCSqGSIb3DQEBCwUAA4GBACF+5RS8Ce0HRixG + Pu4Xd51i+Kzblg++lx8fDJ8GW5G16/Z1AsB72Hc7etJL2PksHlue/x + Cq6SA9fIfHc4TBNCiWjPSP1NhHJeYyoPiSkcYsqXuxWyoyRLbnAhBV + vhoiqZbUt3u3tGB0uMMA0yJvj07mP7Nea2KdBYVH8X1pM0V+ action: member state: present diff --git a/playbooks/sudocmd/ensure-sudocmd-is-absent.yml b/playbooks/sudocmd/ensure-sudocmd-is-absent.yml index 3539ed00..16ebbf4c 100644 --- a/playbooks/sudocmd/ensure-sudocmd-is-absent.yml +++ b/playbooks/sudocmd/ensure-sudocmd-is-absent.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudo command is absent - - ipasudocmd: + - name: Ensure sudo command is absent + ipasudocmd: ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: absent diff --git a/playbooks/sudocmd/ensure-sudocmd-is-present.yml b/playbooks/sudocmd/ensure-sudocmd-is-present.yml index d648de54..c11b5b0d 100644 --- a/playbooks/sudocmd/ensure-sudocmd-is-present.yml +++ b/playbooks/sudocmd/ensure-sudocmd-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudo command is present - - ipasudocmd: + - name: Ensure sudo command is present + ipasudocmd: ipaadmin_password: SomeADMINpassword name: /usr/bin/su state: present diff --git a/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml b/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml index 49ba2d5a..b75be51a 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmd-are-absent-in-sudocmdgroup.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudocmds are absent in sudocmdgroup - - ipasudocmdgroup: + - name: Ensure sudocmds are absent in sudocmdgroup + ipasudocmdgroup: ipaadmin_password: SomeADMINpassword name: network sudocmd: diff --git a/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml b/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml index fe9ab207..4e511d21 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmd-are-present-in-sudocmdgroup.yml @@ -4,16 +4,16 @@ become: true tasks: - # Ensure sudo commands are present - - ipasudocmd: - ipaadmin_password: SomeADMINpassword - name: - - /usr/sbin/ifconfig - - /usr/sbin/iwlist - state: present + - name: Ensure sudo commands are present + ipasudocmd: + ipaadmin_password: SomeADMINpassword + name: + - /usr/sbin/ifconfig + - /usr/sbin/iwlist + state: present - # Ensure sudo commands are present in existing sudocmdgroup - - ipasudocmdgroup: + - name: Ensure sudocmdgroup is present with sudo commands. + ipasudocmdgroup: ipaadmin_password: SomeADMINpassword name: network sudocmd: diff --git a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml index 7674e5de..338dad71 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-absent.yml @@ -4,9 +4,9 @@ become: true tasks: - # Ensure sudocmdgroup is absent - - ipasudocmdgroup: - ipaadmin_password: pass1234 - name: network - state: absent - action: sudocmdgroup + - name: Ensure sudocmdgroup is absent + ipasudocmdgroup: + ipaadmin_password: pass1234 + name: network + state: absent + action: sudocmdgroup diff --git a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml index 6809080c..e97162cd 100644 --- a/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml +++ b/playbooks/sudocmdgroup/ensure-sudocmdgroup-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudocmdgroup sudocmds are present - - ipasudocmdgroup: + - name: Ensure sudocmdgroup sudocmds are present + ipasudocmdgroup: ipaadmin_password: pass1234 name: network description: Group of important commands. diff --git a/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml b/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml index b48a710d..2be625db 100644 --- a/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml +++ b/playbooks/sudorule/ensure-sudorule-does-not-have-sudooption.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudooption is absent in sudorule - - ipasudorule: + - name: Ensure sudooption '!root' is absent in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 sudooption: "!root" diff --git a/playbooks/sudorule/ensure-sudorule-has-sudooption.yml b/playbooks/sudorule/ensure-sudorule-has-sudooption.yml index d1a394cf..8334ac3e 100644 --- a/playbooks/sudorule/ensure-sudorule-has-sudooption.yml +++ b/playbooks/sudorule/ensure-sudorule-has-sudooption.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudooption is present in sudorule - - ipasudorule: + - name: Ensure sudooption '!root' is present in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 sudooption: "!root" diff --git a/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml b/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml index 2f0655c5..4fb16521 100644 --- a/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-host-member-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure host server is absent in Sudo Rule - - ipasudorule: + - name: Ensure host 'server' is absent in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 host: server diff --git a/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml b/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml index e0ce73de..1b4fa47b 100644 --- a/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-host-member-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure host server is present in Sudo Rule - - ipasudorule: + - name: Ensure host 'server' is present in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 host: server diff --git a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml index c30d63a0..020eead1 100644 --- a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure hostgroup cluster is absent in Sudo Rule - - ipasudorule: + - name: Ensure hostgroup 'cluster' is absent in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster diff --git a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml index 4813213b..4e14ac8d 100644 --- a/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-hostgroup-member-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure hostgrep cluster is present in Sudo Rule - - ipasudorule: + - name: Ensure hostgroup 'cluster' is present in sudorule + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 hostgroup: cluster diff --git a/playbooks/sudorule/ensure-sudorule-is-absent.yml b/playbooks/sudorule/ensure-sudorule-is-absent.yml index 4b87902c..774ab75e 100644 --- a/playbooks/sudorule/ensure-sudorule-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-is-absent.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is absent - - ipasudorule: + - name: Ensure sudorule command is absent + ipasudorule: ipaadmin_password: pass1234 name: testrule1 state: absent diff --git a/playbooks/sudorule/ensure-sudorule-is-disabled.yml b/playbooks/sudorule/ensure-sudorule-is-disabled.yml index b51da118..b96406e7 100644 --- a/playbooks/sudorule/ensure-sudorule-is-disabled.yml +++ b/playbooks/sudorule/ensure-sudorule-is-disabled.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is disabled - - ipasudorule: + - name: Ensure sudorule command is disabled + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 state: disabled diff --git a/playbooks/sudorule/ensure-sudorule-is-enabled.yml b/playbooks/sudorule/ensure-sudorule-is-enabled.yml index 4cba3bec..6a2cddff 100644 --- a/playbooks/sudorule/ensure-sudorule-is-enabled.yml +++ b/playbooks/sudorule/ensure-sudorule-is-enabled.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is enabled - - ipasudorule: + - name: Ensure sudorule command is enabled + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 state: enabled diff --git a/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml b/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml index b884886e..0c9d49e7 100644 --- a/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml +++ b/playbooks/sudorule/ensure-sudorule-is-present-with-order.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudorule is present with the given order. - - ipasudorule: + - name: Ensure sudorule is present with the given order. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 order: 2 diff --git a/playbooks/sudorule/ensure-sudorule-is-present.yml b/playbooks/sudorule/ensure-sudorule-is-present.yml index e88017cf..7d036337 100644 --- a/playbooks/sudorule/ensure-sudorule-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-is-present.yml @@ -4,8 +4,8 @@ become: true tasks: - # Ensure sudorule command is present - - ipasudorule: + - name: Ensure sudorule command is present + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 description: A test sudo rule. diff --git a/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml b/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml index 465f386c..fb25365f 100644 --- a/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-runasuser-is-absent.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudorule is present with the given order. - - ipasudorule: + - name: Ensure sudorule 'runasuser' member 'admin' is absent. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 runasuser: admin diff --git a/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml b/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml index 4a5bee94..00cbfe06 100644 --- a/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-runasuser-is-present.yml @@ -5,8 +5,8 @@ gather_facts: false tasks: - # Ensure sudorule is present with the given order. - - ipasudorule: + - name: Ensure sudorule 'runasuser' member 'admin' is present. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 runasuser: admin diff --git a/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml b/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml index 3ded226e..91c717db 100644 --- a/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml +++ b/playbooks/sudorule/ensure-sudorule-sudocmd-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipasudorule: + - name: Ensure sudorule members are absent. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: diff --git a/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml b/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml index 23dd56de..f67c930c 100644 --- a/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml +++ b/playbooks/sudorule/ensure-sudorule-sudocmd-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipasudorule: + - name: Ensure sudorule members are present. + ipasudorule: ipaadmin_password: SomeADMINpassword name: testrule1 allow_sudocmd: diff --git a/playbooks/user/add-group.yml b/playbooks/user/add-group.yml index 46e0faab..20e825c6 100644 --- a/playbooks/user/add-group.yml +++ b/playbooks/user/add-group.yml @@ -21,4 +21,3 @@ ipagroup: ipaadmin_password: SomeADMINpassword name: appops - diff --git a/playbooks/user/add-user.yml b/playbooks/user/add-user.yml index ed72e51d..e33d9928 100644 --- a/playbooks/user/add-user.yml +++ b/playbooks/user/add-user.yml @@ -17,4 +17,3 @@ passwordexpiration: "2023-01-19 23:59:59" password: "no-brain" update_password: on_create - diff --git a/playbooks/user/delete-user.yml b/playbooks/user/delete-user.yml index d9239e04..cef949e0 100644 --- a/playbooks/user/delete-user.yml +++ b/playbooks/user/delete-user.yml @@ -4,7 +4,7 @@ become: true tasks: - - name: Remove user pinky and brain + - name: Remove user pinky ipauser: ipaadmin_password: SomeADMINpassword name: pinky diff --git a/playbooks/user/user_certificate_absent.yml b/playbooks/user/user_certificate_absent.yml index d50b40f4..4aa03fb5 100644 --- a/playbooks/user/user_certificate_absent.yml +++ b/playbooks/user/user_certificate_absent.yml @@ -9,8 +9,66 @@ ipauser: ipaadmin_password: SomeADMINpassword name: test + action: member certificate: - - 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 - - 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 - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4Mz + VaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXN + lzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9f + kGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8P + uzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmsps + ir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6 + rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73 + cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUz + BRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEG + DAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmh + sH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv + 6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31 + ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17I + j2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQC + LqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9 + Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4ND + VaFw0yMDEwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhF + onx99AKi44iaZkrlMKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJi + jJ7S/4o7h7eeqcJVXJkEhWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClp + lysL8OyyEG7pbX/aB9iAfFb/+vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1 + wNw1rqWKF1ZzagWRlG4QgzRGwQ4quc7yO98TKikj2OPiIt7Zd46hbqQ + xmgGBtCkVOZIhxu77OmNrFsXmM4rZZpmqh0UdqcpwkRojVnGXmNqeMC + d6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5R1mG4RJ2XAgMBAAGjUz + BRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFKOnpTAfBgNVHSMEG + DAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBBg97T2Uc + 1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdotIW + lG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKh + dhu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMn + gCfGUe1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcm + DKfNT3YZM8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi + 8mW+V6bAqn9pir/J14r4YFnqMGgjmdt81tscJV + - > + MIIC/zCCAeegAwIBAgIUTC33WUoYGFoIVGMwgjbc5J6xCyowDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NT + JaFw0yMDEwMTMxNjI4NTJaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA+6P2eieXHaVJivtWif7 + SntjjkJm0juRKRRGsT3wt+zCZqoDe8zylTBN0mse/POWXdC+zXRMC2X + /c4V10kgrvWbnNdFdUFfBUphiXSoqnUYHZ6Ta+b4UTzC2tECSUEnSCz + 9n1ofHnyqDyT9FELzVkRkQqexD+BFgZTF39R4q8BA4bWKQy94Kgvb+I + P77+ou4fhkBLI1MX5nkWa3Oyu4TMzT/tqgPE70hk8wQzUU2aiwJ7Ism + nWE6Ysk7c4DYMJQF/51bi2ByZWERNjyBY6L+ZV90aL4UFR9O+Pw9Hat + fHVBRdmzSkKJOr9iu4summWgH0QYDmbkdhGwYvup0EmEfAgMBAAGjUz + BRMB0GA1UdDgQWBBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAfBgNVHSMEG + DAWgBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAILLPnau32r/YoOVCVWQotGtySy36 + aFlHa3T8IkSpatNCPIf3U0FWS6TVYBwY0PBfdqWBkvCuJTupLh0OEP4 + TCsDa5pJGOK7blyfiAfcHajqyouACSVNlG63EPvB63h4H4F4HJnhDd4 + z7pVC/WPB8w5GTBJNjELmeWfH7nj7lu8UkOdLhzTKL40RPs0k4l09yY + BmZqqExxGsSfvRBQcrwlAsvQ0E/cTNGbyzOKs3SbOM2WEHye6xNEsey + 01icYcjfjqvEd6mw3+WOUeJAuDH9/EOloFM2iz5Xp31Ig3WT0RVy+lM + riG9GesPpFBs2xp9wQCXLNIkpbHKyYs3voMyBH state: absent diff --git a/playbooks/user/user_certificate_present.yml b/playbooks/user/user_certificate_present.yml index b3220846..04969c95 100644 --- a/playbooks/user/user_certificate_present.yml +++ b/playbooks/user/user_certificate_present.yml @@ -9,7 +9,65 @@ ipauser: ipaadmin_password: SomeADMINpassword name: test + action: member certificate: - - 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 - - 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 - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4Mz + VaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXN + lzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9f + kGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8P + uzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmsps + ir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6 + rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73 + cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUz + BRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEG + DAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmh + sH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv + 6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31 + ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17I + j2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQC + LqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9 + Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4ND + VaFw0yMDEwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhF + onx99AKi44iaZkrlMKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJi + jJ7S/4o7h7eeqcJVXJkEhWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClp + lysL8OyyEG7pbX/aB9iAfFb/+vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1 + wNw1rqWKF1ZzagWRlG4QgzRGwQ4quc7yO98TKikj2OPiIt7Zd46hbqQ + xmgGBtCkVOZIhxu77OmNrFsXmM4rZZpmqh0UdqcpwkRojVnGXmNqeMC + d6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5R1mG4RJ2XAgMBAAGjUz + BRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFKOnpTAfBgNVHSMEG + DAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBBg97T2Uc + 1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdotIW + lG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKh + dhu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMn + gCfGUe1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcm + DKfNT3YZM8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi + 8mW+V6bAqn9pir/J14r4YFnqMGgjmdt81tscJV + - > + MIIC/zCCAeegAwIBAgIUTC33WUoYGFoIVGMwgjbc5J6xCyowDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NT + JaFw0yMDEwMTMxNjI4NTJaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA+6P2eieXHaVJivtWif7 + SntjjkJm0juRKRRGsT3wt+zCZqoDe8zylTBN0mse/POWXdC+zXRMC2X + /c4V10kgrvWbnNdFdUFfBUphiXSoqnUYHZ6Ta+b4UTzC2tECSUEnSCz + 9n1ofHnyqDyT9FELzVkRkQqexD+BFgZTF39R4q8BA4bWKQy94Kgvb+I + P77+ou4fhkBLI1MX5nkWa3Oyu4TMzT/tqgPE70hk8wQzUU2aiwJ7Ism + nWE6Ysk7c4DYMJQF/51bi2ByZWERNjyBY6L+ZV90aL4UFR9O+Pw9Hat + fHVBRdmzSkKJOr9iu4summWgH0QYDmbkdhGwYvup0EmEfAgMBAAGjUz + BRMB0GA1UdDgQWBBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAfBgNVHSMEG + DAWgBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAILLPnau32r/YoOVCVWQotGtySy36 + aFlHa3T8IkSpatNCPIf3U0FWS6TVYBwY0PBfdqWBkvCuJTupLh0OEP4 + TCsDa5pJGOK7blyfiAfcHajqyouACSVNlG63EPvB63h4H4F4HJnhDd4 + z7pVC/WPB8w5GTBJNjELmeWfH7nj7lu8UkOdLhzTKL40RPs0k4l09yY + BmZqqExxGsSfvRBQcrwlAsvQ0E/cTNGbyzOKs3SbOM2WEHye6xNEsey + 01icYcjfjqvEd6mw3+WOUeJAuDH9/EOloFM2iz5Xp31Ig3WT0RVy+lM + riG9GesPpFBs2xp9wQCXLNIkpbHKyYs3voMyBH diff --git a/playbooks/user/users_certificate_absent.yml b/playbooks/user/users_certificate_absent.yml index 0963e4fe..47c788c3 100644 --- a/playbooks/user/users_certificate_absent.yml +++ b/playbooks/user/users_certificate_absent.yml @@ -11,7 +11,64 @@ users: - name: test certificate: - - MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 - - 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 - - MIIC/zCCAeegAwIBAgIUTC33WUoYGFoIVGMwgjbc5J6xCyowDQYJKoZIhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NTJaFw0yMDEwMTMxNjI4NTJaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA+6P2eieXHaVJivtWif7SntjjkJm0juRKRRGsT3wt+zCZqoDe8zylTBN0mse/POWXdC+zXRMC2X/c4V10kgrvWbnNdFdUFfBUphiXSoqnUYHZ6Ta+b4UTzC2tECSUEnSCz9n1ofHnyqDyT9FELzVkRkQqexD+BFgZTF39R4q8BA4bWKQy94Kgvb+IP77+ou4fhkBLI1MX5nkWa3Oyu4TMzT/tqgPE70hk8wQzUU2aiwJ7IsmnWE6Ysk7c4DYMJQF/51bi2ByZWERNjyBY6L+ZV90aL4UFR9O+Pw9HatfHVBRdmzSkKJOr9iu4summWgH0QYDmbkdhGwYvup0EmEfAgMBAAGjUzBRMB0GA1UdDgQWBBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAfBgNVHSMEGDAWgBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAILLPnau32r/YoOVCVWQotGtySy36aFlHa3T8IkSpatNCPIf3U0FWS6TVYBwY0PBfdqWBkvCuJTupLh0OEP4TCsDa5pJGOK7blyfiAfcHajqyouACSVNlG63EPvB63h4H4F4HJnhDd4z7pVC/WPB8w5GTBJNjELmeWfH7nj7lu8UkOdLhzTKL40RPs0k4l09yYBmZqqExxGsSfvRBQcrwlAsvQ0E/cTNGbyzOKs3SbOM2WEHye6xNEsey01icYcjfjqvEd6mw3+WOUeJAuDH9/EOloFM2iz5Xp31Ig3WT0RVy+lMriG9GesPpFBs2xp9wQCXLNIkpbHKyYs3voMyBH + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4Mz + VaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXN + lzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9f + kGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8P + uzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmsps + ir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6 + rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73 + cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUz + BRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEG + DAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmh + sH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv + 6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31 + ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17I + j2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQC + LqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9 + Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4ND + VaFw0yMDEwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhF + onx99AKi44iaZkrlMKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJi + jJ7S/4o7h7eeqcJVXJkEhWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClp + lysL8OyyEG7pbX/aB9iAfFb/+vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1 + wNw1rqWKF1ZzagWRlG4QgzRGwQ4quc7yO98TKikj2OPiIt7Zd46hbqQ + xmgGBtCkVOZIhxu77OmNrFsXmM4rZZpmqh0UdqcpwkRojVnGXmNqeMC + d6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5R1mG4RJ2XAgMBAAGjUz + BRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFKOnpTAfBgNVHSMEG + DAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBBg97T2Uc + 1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdotIW + lG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKh + dhu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMn + gCfGUe1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcm + DKfNT3YZM8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi + 8mW+V6bAqn9pir/J14r4YFnqMGgjmdt81tscJV + - > + MIIC/zCCAeegAwIBAgIUTC33WUoYGFoIVGMwgjbc5J6xCyowDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NT + JaFw0yMDEwMTMxNjI4NTJaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA+6P2eieXHaVJivtWif7 + SntjjkJm0juRKRRGsT3wt+zCZqoDe8zylTBN0mse/POWXdC+zXRMC2X + /c4V10kgrvWbnNdFdUFfBUphiXSoqnUYHZ6Ta+b4UTzC2tECSUEnSCz + 9n1ofHnyqDyT9FELzVkRkQqexD+BFgZTF39R4q8BA4bWKQy94Kgvb+I + P77+ou4fhkBLI1MX5nkWa3Oyu4TMzT/tqgPE70hk8wQzUU2aiwJ7Ism + nWE6Ysk7c4DYMJQF/51bi2ByZWERNjyBY6L+ZV90aL4UFR9O+Pw9Hat + fHVBRdmzSkKJOr9iu4summWgH0QYDmbkdhGwYvup0EmEfAgMBAAGjUz + BRMB0GA1UdDgQWBBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAfBgNVHSMEG + DAWgBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAILLPnau32r/YoOVCVWQotGtySy36 + aFlHa3T8IkSpatNCPIf3U0FWS6TVYBwY0PBfdqWBkvCuJTupLh0OEP4 + TCsDa5pJGOK7blyfiAfcHajqyouACSVNlG63EPvB63h4H4F4HJnhDd4 + z7pVC/WPB8w5GTBJNjELmeWfH7nj7lu8UkOdLhzTKL40RPs0k4l09yY + BmZqqExxGsSfvRBQcrwlAsvQ0E/cTNGbyzOKs3SbOM2WEHye6xNEsey + 01icYcjfjqvEd6mw3+WOUeJAuDH9/EOloFM2iz5Xp31Ig3WT0RVy+lM + riG9GesPpFBs2xp9wQCXLNIkpbHKyYs3voMyBH state: absent diff --git a/playbooks/user/users_certificate_present.yml b/playbooks/user/users_certificate_present.yml index 8d82a877..0386f50f 100644 --- a/playbooks/user/users_certificate_present.yml +++ b/playbooks/user/users_certificate_present.yml @@ -11,6 +11,63 @@ users: - name: test certificate: - - MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZIhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4MzVaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXNlzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9fkGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8Puzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmspsir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUzBRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEGDAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmhsH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17Ij2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQCLqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 - - 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 - - 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 + - > + MIIC/zCCAeegAwIBAgIUZGHLaSYg1myp6EI4VGWSC27vOrswDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4Mz + VaFw0yMDEwMTMxNjI4MzVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/lB8wUAmPTSwSc/NOXN + lzdpPOQDSwrhKH6XsqZF4KpQoSY/nmCjAhJmOVpOUo4K2fGRZ0yAH9f + kGv6yJP6c7IAFjLeec7GPHVwN4bZrP1DXfTAmfmXhcRQbCYkV+wmq8P + uzw/+xA9EJrrodnJPPsE6E8HnSVLF6Ys9+cJMJ7HuwOI+wYt3gkmsps + ir1tccmf4x1PP+yHJWdcXyetlFRcmZ8gspjqOR2jb89xSQsh8gcyDW6 + rPNlSTzYZ2FmNtjES6ZhCsYL31fQbF2QglidlLGpAlvHUUS+xCigW73 + cvhFPMWXcfO51Mr15RcgYTckY+7QZ2nYqplRBoDlQl6DnAgMBAAGjUz + BRMB0GA1UdDgQWBBTPG99XVRdxpOXMZo3Nhy+ldnf13TAfBgNVHSMEG + DAWgBTPG99XVRdxpOXMZo3Nhy+ldnf13TAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAjWTcnIl2mpNbfHAN8DB4Kk+RNRmh + sH0y+r/47MXVTMMMToCfofeNY3Jeohu+2lIXMPQfTvXUbDTkNAGsGLv + 6LtQEUfSREqgk1eY7bT9BFfpH1uV2ZFhCO9jBA+E4bf55Kx7bgUNG31 + ykBshOsOblOJM1lS/0q4TWHAxrsU2PNwPi8X0ten+eGeB8aRshxS17I + j2cH0fdAMmSA+jMAvTIZl853Bxe0HuozauKwOFWL4qHm61c4O/j1mQC + LqJKYfJ9mBDWFQLszd/tF+ePKiNhZCQly60F8Lumn2CDZj5UIkl8wk9 + Wls5n1BIQs+M8AN65NAdv7+js8jKUKCuyji8r3 + - > + MIIC/zCCAeegAwIBAgIUAWE1vaA+mZd3nwZqwWH64EbHvR0wDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4ND + VaFw0yMDEwMTMxNjI4NDVaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWzJibKtN8Zf7LgandINhF + onx99AKi44iaZkrlMKEObE6Faf8NTUbUgK3VfJNYmCbA1baLVJ0YZJi + jJ7S/4o7h7eeqcJVXJkEhWNTimWXNW/YCzTHe3SSapnSYOKmdHHRClp + lysL8OyyEG7pbX/aB9iAfFb/+vUFCX5sMwFFrYxOimKJ9Pc/NRFtdv1 + wNw1rqWKF1ZzagWRlG4QgzRGwQ4quc7yO98TKikj2OPiIt7Zd46hbqQ + xmgGBtCkVOZIhxu77OmNrFsXmM4rZZpmqh0UdqcpwkRojVnGXmNqeMC + d6dNTnLhr9wukUYw0KgE57zCDVr9Ix+p/dA5R1mG4RJ2XAgMBAAGjUz + BRMB0GA1UdDgQWBBSbuiH2lNVrID3yt1SsFwtOFKOnpTAfBgNVHSMEG + DAWgBSbuiH2lNVrID3yt1SsFwtOFKOnpTAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQBCVWd293wWyohFqMFMHRBBg97T2Uc + 1yeT0dMH4BpuOaCqQp4q5ep+uLcXEI6+3mEwm8pa/ULQCD8yLLdotIW + lG3+h/4boFpdiPFcBDgT8kGe+0KOzB8Nt7E13QYOu12MNi10qwGrjKh + dhu1xBe4fpY5VCetVU1OLyuTsUyucQsFrtZI0SR83h+blbyoMZ7IhMn + gCfGUe1bnYeWnLbpFbigKfPuVDWsMH2kgj05EAd5EgHkWbX8QA8hmcm + DKfNT3YZM8kiGQwmFrnQdq8bN0uHR8Nz+24cbmdbHcD65wlDW6GmYxi + 8mW+V6bAqn9pir/J14r4YFnqMGgjmdt81tscJV + - > + MIIC/zCCAeegAwIBAgIUTC33WUoYGFoIVGMwgjbc5J6xCyowDQYJKoZ + IhvcNAQELBQAwDzENMAsGA1UEAwwEdGVzdDAeFw0xOTEwMTQxNjI4NT + JaFw0yMDEwMTMxNjI4NTJaMA8xDTALBgNVBAMMBHRlc3QwggEiMA0GC + SqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA+6P2eieXHaVJivtWif7 + SntjjkJm0juRKRRGsT3wt+zCZqoDe8zylTBN0mse/POWXdC+zXRMC2X + /c4V10kgrvWbnNdFdUFfBUphiXSoqnUYHZ6Ta+b4UTzC2tECSUEnSCz + 9n1ofHnyqDyT9FELzVkRkQqexD+BFgZTF39R4q8BA4bWKQy94Kgvb+I + P77+ou4fhkBLI1MX5nkWa3Oyu4TMzT/tqgPE70hk8wQzUU2aiwJ7Ism + nWE6Ysk7c4DYMJQF/51bi2ByZWERNjyBY6L+ZV90aL4UFR9O+Pw9Hat + fHVBRdmzSkKJOr9iu4summWgH0QYDmbkdhGwYvup0EmEfAgMBAAGjUz + BRMB0GA1UdDgQWBBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAfBgNVHSMEG + DAWgBSJCQ8ho0Ppe0khVhgiMqsvlgxIjzAPBgNVHRMBAf8EBTADAQH/ + MA0GCSqGSIb3DQEBCwUAA4IBAQAILLPnau32r/YoOVCVWQotGtySy36 + aFlHa3T8IkSpatNCPIf3U0FWS6TVYBwY0PBfdqWBkvCuJTupLh0OEP4 + TCsDa5pJGOK7blyfiAfcHajqyouACSVNlG63EPvB63h4H4F4HJnhDd4 + z7pVC/WPB8w5GTBJNjELmeWfH7nj7lu8UkOdLhzTKL40RPs0k4l09yY + BmZqqExxGsSfvRBQcrwlAsvQ0E/cTNGbyzOKs3SbOM2WEHye6xNEsey + 01icYcjfjqvEd6mw3+WOUeJAuDH9/EOloFM2iz5Xp31Ig3WT0RVy+lM + riG9GesPpFBs2xp9wQCXLNIkpbHKyYs3voMyBH diff --git a/playbooks/vault/data-archive-in-asymmetric-vault.yml b/playbooks/vault/data-archive-in-asymmetric-vault.yml index 5fd55dfe..e05126c2 100644 --- a/playbooks/vault/data-archive-in-asymmetric-vault.yml +++ b/playbooks/vault/data-archive-in-asymmetric-vault.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Archive data into asymmetric vault. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: user01 diff --git a/playbooks/vault/data-archive-in-symmetric-vault.yml b/playbooks/vault/data-archive-in-symmetric-vault.yml index 3d4ae99f..b2a5e25f 100644 --- a/playbooks/vault/data-archive-in-symmetric-vault.yml +++ b/playbooks/vault/data-archive-in-symmetric-vault.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Archieve data into symmetric vault. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-asymetric-vault-is-absent.yml b/playbooks/vault/ensure-asymetric-vault-is-absent.yml index 7ee6cf39..fc6d2fb3 100644 --- a/playbooks/vault/ensure-asymetric-vault-is-absent.yml +++ b/playbooks/vault/ensure-asymetric-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure asymmetric vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: admin diff --git a/playbooks/vault/ensure-asymetric-vault-is-present.yml b/playbooks/vault/ensure-asymetric-vault-is-present.yml index 247f36fc..1c8629f1 100644 --- a/playbooks/vault/ensure-asymetric-vault-is-present.yml +++ b/playbooks/vault/ensure-asymetric-vault-is-present.yml @@ -5,9 +5,17 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure asymmetric vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: admin - vault_public_key: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FDdGFudjRkK3ptSTZ0T3ova1RXdGowY3AxRAowUENoYy8vR0pJMTUzTi9CN3UrN0h3SXlRVlZoNUlXZG1UcCtkWXYzd09yeVpPbzYvbHN5eFJaZ2pZRDRwQ3VGCjlxM295VTFEMnFOZERYeGtSaFFETXBiUEVSWWlHbE1jbzdhN0hIVDk1bGNQbmhObVFkb3VGdHlVbFBUVS96V1kKZldYWTBOeU1UbUtoeFRseUV3SURBUUFCCi0tLS0tRU5EIFBVQkxJQyBLRVktLS0tLQo= + vault_public_key: > + LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUlHZk1BMEdDU3FHU0liM0RR + RUJBUVVBQTRHTkFEQ0JpUUtCZ1FDdGFudjRkK3ptSTZ0T3ova1RXdGowY3Ax + RAowUENoYy8vR0pJMTUzTi9CN3UrN0h3SXlRVlZoNUlXZG1UcCtkWXYzd09y + eVpPbzYvbHN5eFJaZ2pZRDRwQ3VGCjlxM295VTFEMnFOZERYeGtSaFFETXBi + UEVSWWlHbE1jbzdhN0hIVDk1bGNQbmhObVFkb3VGdHlVbFBUVS96V1kKZldY + WTBOeU1UbUtoeFRseUV3SURBUUFCCi0tLS0tRU5EIFBVQkxJQyBLRVktLS0t + LQo= vault_type: asymmetric diff --git a/playbooks/vault/ensure-service-vault-is-absent.yml b/playbooks/vault/ensure-service-vault-is-absent.yml index 65c4c8d8..66435670 100644 --- a/playbooks/vault/ensure-service-vault-is-absent.yml +++ b/playbooks/vault/ensure-service-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure service vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" diff --git a/playbooks/vault/ensure-service-vault-is-present.yml b/playbooks/vault/ensure-service-vault-is-present.yml index cf6da223..a77739ed 100644 --- a/playbooks/vault/ensure-service-vault-is-present.yml +++ b/playbooks/vault/ensure-service-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure service vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: svcvault service: "HTTP/{{ groups.ipaserver[0] }}" diff --git a/playbooks/vault/ensure-shared-vault-is-absent.yml b/playbooks/vault/ensure-shared-vault-is-absent.yml index 0191ab1c..c54506ac 100644 --- a/playbooks/vault/ensure-shared-vault-is-absent.yml +++ b/playbooks/vault/ensure-shared-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure shared vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: sharedvault shared: True diff --git a/playbooks/vault/ensure-shared-vault-is-present.yml b/playbooks/vault/ensure-shared-vault-is-present.yml index c403afcc..d47f84e1 100644 --- a/playbooks/vault/ensure-shared-vault-is-present.yml +++ b/playbooks/vault/ensure-shared-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure shared vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: sharedvault shared: True diff --git a/playbooks/vault/ensure-standard-vault-is-absent.yml b/playbooks/vault/ensure-standard-vault-is-absent.yml index 3d7cd8ab..9510eb23 100644 --- a/playbooks/vault/ensure-standard-vault-is-absent.yml +++ b/playbooks/vault/ensure-standard-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: stdvault username: admin diff --git a/playbooks/vault/ensure-standard-vault-is-present.yml b/playbooks/vault/ensure-standard-vault-is-present.yml index 64d08fec..c0e5f3da 100644 --- a/playbooks/vault/ensure-standard-vault-is-present.yml +++ b/playbooks/vault/ensure-standard-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure standard vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard diff --git a/playbooks/vault/ensure-symetric-vault-is-absent.yml b/playbooks/vault/ensure-symetric-vault-is-absent.yml index a0d5bbcd..d8c0db62 100644 --- a/playbooks/vault/ensure-symetric-vault-is-absent.yml +++ b/playbooks/vault/ensure-symetric-vault-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure symmetric vault is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-symetric-vault-is-present.yml b/playbooks/vault/ensure-symetric-vault-is-present.yml index 2418ced8..8f7e0fb4 100644 --- a/playbooks/vault/ensure-symetric-vault-is-present.yml +++ b/playbooks/vault/ensure-symetric-vault-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure symmetric vault is present. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-vault-is-present-with-members.yml b/playbooks/vault/ensure-vault-is-present-with-members.yml index ba96ad14..c837b74b 100644 --- a/playbooks/vault/ensure-vault-is-present-with-members.yml +++ b/playbooks/vault/ensure-vault-is-present-with-members.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault is present, with members. + ipavault: ipaadmin_password: SomeADMINpassword name: stdvault vault_type: standard diff --git a/playbooks/vault/ensure-vault-member-group-is-absent.yml b/playbooks/vault/ensure-vault-member-group-is-absent.yml index c5e7f7d5..2df3dc61 100644 --- a/playbooks/vault/ensure-vault-member-group-is-absent.yml +++ b/playbooks/vault/ensure-vault-member-group-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "group" is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-member-group-is-present.yml b/playbooks/vault/ensure-vault-member-group-is-present.yml index 12b52613..eb368d8a 100644 --- a/playbooks/vault/ensure-vault-member-group-is-present.yml +++ b/playbooks/vault/ensure-vault-member-group-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "group" is present. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-member-user-is-absent.yml b/playbooks/vault/ensure-vault-member-user-is-absent.yml index 7d0578a6..daf3b693 100644 --- a/playbooks/vault/ensure-vault-member-user-is-absent.yml +++ b/playbooks/vault/ensure-vault-member-user-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "user" is absent. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-member-user-is-present.yml b/playbooks/vault/ensure-vault-member-user-is-present.yml index a04e6e20..d1a6cf37 100644 --- a/playbooks/vault/ensure-vault-member-user-is-present.yml +++ b/playbooks/vault/ensure-vault-member-user-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault member "user" is present. + ipavault: ipaadmin_password: SomeADMINpassword name: keychain username: admin diff --git a/playbooks/vault/ensure-vault-owner-is-absent.yml b/playbooks/vault/ensure-vault-owner-is-absent.yml index 817a324b..2807c08c 100644 --- a/playbooks/vault/ensure-vault-owner-is-absent.yml +++ b/playbooks/vault/ensure-vault-owner-is-absent.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault owners and ownergroups are absent. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/ensure-vault-owner-is-present.yml b/playbooks/vault/ensure-vault-owner-is-present.yml index 7c4cfb20..31aba300 100644 --- a/playbooks/vault/ensure-vault-owner-is-present.yml +++ b/playbooks/vault/ensure-vault-owner-is-present.yml @@ -5,7 +5,8 @@ gather_facts: false tasks: - - ipavault: + - name: Ensure vault owners and ownergroups are present. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin diff --git a/playbooks/vault/retrive-data-asymmetric-vault.yml b/playbooks/vault/retrive-data-asymmetric-vault.yml index 0bda412d..35472d20 100644 --- a/playbooks/vault/retrive-data-asymmetric-vault.yml +++ b/playbooks/vault/retrive-data-asymmetric-vault.yml @@ -14,5 +14,6 @@ state: retrieved register: result no_log: true - - debug: - msg: "Data: {{ result.vault.data }}" + - name: Display retrieved data. + debug: + msg: "Data: {{ result.vault.data }}" diff --git a/playbooks/vault/retrive-data-symmetric-vault.yml b/playbooks/vault/retrive-data-symmetric-vault.yml index 609c5f5d..98902a1b 100644 --- a/playbooks/vault/retrive-data-symmetric-vault.yml +++ b/playbooks/vault/retrive-data-symmetric-vault.yml @@ -14,5 +14,6 @@ state: retrieved register: result no_log: true - - debug: - msg: "{{ result.vault.data }}" + - name: Display retrieved data. + debug: + msg: "Data: {{ result.vault.data }}" diff --git a/playbooks/vault/vault-is-present-with-password-file.yml b/playbooks/vault/vault-is-present-with-password-file.yml index bedb75df..c92e2a6b 100644 --- a/playbooks/vault/vault-is-present-with-password-file.yml +++ b/playbooks/vault/vault-is-present-with-password-file.yml @@ -5,18 +5,21 @@ gather_facts: True tasks: - - copy: + - name: Copy file containing password to server. + copy: src: "{{ playbook_dir }}/password.txt" dest: "{{ ansible_facts['env'].HOME }}/password.txt" owner: "{{ ansible_user }}" group: "{{ ansible_user }}" mode: 0600 - - ipavault: + - name: Ensure symmetric vault exists with password from file. + ipavault: ipaadmin_password: SomeADMINpassword name: symvault username: admin vault_type: symmetric vault_password_file: "{{ ansible_facts['env'].HOME }}/password.txt" - - file: + - name: Remove file containing password from server. + file: path: "{{ ansible_facts['env'].HOME }}/password.txt" state: absent diff --git a/playbooks/vault/vault-is-present-with-public-key-file.yml b/playbooks/vault/vault-is-present-with-public-key-file.yml index 5d7eda02..cd1e7597 100644 --- a/playbooks/vault/vault-is-present-with-public-key-file.yml +++ b/playbooks/vault/vault-is-present-with-public-key-file.yml @@ -10,18 +10,21 @@ gather_facts: True tasks: - - copy: + - name: Copy public key file to server. + copy: src: "{{ playbook_dir }}/public.pem" dest: "{{ ansible_facts['env'].HOME }}/public.pem" owner: "{{ ansible_user }}" group: "{{ ansible_user }}" mode: 0600 - - ipavault: + - name: Ensure asymmetric vault exists with public key from file. + ipavault: ipaadmin_password: SomeADMINpassword name: asymvault username: admin vault_type: asymmetric vault_public_key_file: "{{ ansible_facts['env'].HOME }}/public.pem" - - file: + - name: Remove public key file from server. + file: path: "{{ ansible_facts['env'].HOME }}/public.pem" state: absent diff --git a/plugins/modules/ipaconfig.py b/plugins/modules/ipaconfig.py index 1d40890d..1239fbc3 100644 --- a/plugins/modules/ipaconfig.py +++ b/plugins/modules/ipaconfig.py @@ -159,7 +159,7 @@ EXAMPLES = ''' register: result - name: display default login shell debug: - msg: '{{result.config.defaultshell[0] }}' + msg: '{{ result.config.defaultshell[0] }}' - name: set defaultshell and maxusername ipaconfig: diff --git a/roles/ipabackup/meta/main.yml b/roles/ipabackup/meta/main.yml index db6732af..6131e0d7 100644 --- a/roles/ipabackup/meta/main.yml +++ b/roles/ipabackup/meta/main.yml @@ -1,3 +1,4 @@ +--- dependencies: [] galaxy_info: diff --git a/roles/ipabackup/vars/Fedora.yml b/roles/ipabackup/vars/Fedora.yml index 77112041..549f32bd 100644 --- a/roles/ipabackup/vars/Fedora.yml +++ b/roles/ipabackup/vars/Fedora.yml @@ -1,3 +1,6 @@ +# defaults file for ipabackup +# vars/Fedora.yml +--- ipaserver_packages: [ "freeipa-server" ] ipaserver_packages_dns: [ "freeipa-server-dns" ] ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/roles/ipabackup/vars/RedHat-7.yml b/roles/ipabackup/vars/RedHat-7.yml index 11863757..126f0921 100644 --- a/roles/ipabackup/vars/RedHat-7.yml +++ b/roles/ipabackup/vars/RedHat-7.yml @@ -1,6 +1,7 @@ -# defaults file for ipaserver -# vars/rhel.yml +# defaults file for ipabackup +# vars/RedHat-7.yml +--- ipaserver_packages: [ "ipa-server", "libselinux-python" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "ipa-server-trust-ad" ] -ipaserver_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipaserver_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipabackup/vars/RedHat-8.yml b/roles/ipabackup/vars/RedHat-8.yml index 7f5ae464..55a154d8 100644 --- a/roles/ipabackup/vars/RedHat-8.yml +++ b/roles/ipabackup/vars/RedHat-8.yml @@ -1,5 +1,6 @@ -# defaults file for ipaserver +# defaults file for ipabackup # vars/RedHat-8.yml +--- ipaserver_packages: [ "@idm:DL1/server" ] ipaserver_packages_dns: [ "@idm:DL1/dns" ] ipaserver_packages_adtrust: [ "@idm:DL1/adtrust" ] diff --git a/roles/ipabackup/vars/Ubuntu.yml b/roles/ipabackup/vars/Ubuntu.yml index d0e01ea8..ea6ea233 100644 --- a/roles/ipabackup/vars/Ubuntu.yml +++ b/roles/ipabackup/vars/Ubuntu.yml @@ -1,4 +1,6 @@ +# defaults file for ipabackup # vars/Ubuntu.yml +--- ipaserver_packages: [ "freeipa-server" ] ipaserver_packages_dns: [ "freeipa-server-dns" ] ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/roles/ipabackup/vars/default.yml b/roles/ipabackup/vars/default.yml index 4d28ac65..0300948b 100644 --- a/roles/ipabackup/vars/default.yml +++ b/roles/ipabackup/vars/default.yml @@ -1,5 +1,6 @@ -# defaults file for ipaserver +# defaults file for ipabackup # vars/default.yml +--- ipaserver_packages: [ "ipa-server" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/roles/ipaclient/meta/main.yml b/roles/ipaclient/meta/main.yml index 5c0cb49c..356b2db0 100644 --- a/roles/ipaclient/meta/main.yml +++ b/roles/ipaclient/meta/main.yml @@ -1,3 +1,4 @@ +--- dependencies: [] galaxy_info: diff --git a/roles/ipaclient/vars/Debian.yml b/roles/ipaclient/vars/Debian.yml index 96d9c326..efa7c4d4 100644 --- a/roles/ipaclient/vars/Debian.yml +++ b/roles/ipaclient/vars/Debian.yml @@ -1,2 +1,4 @@ +# defaults file for ipaclient # vars/Debian.yml +--- ipaclient_packages: [ "freeipa-client" ] diff --git a/roles/ipaclient/vars/Fedora-25.yml b/roles/ipaclient/vars/Fedora-25.yml index 1a62ffa2..9999b331 100644 --- a/roles/ipaclient/vars/Fedora-25.yml +++ b/roles/ipaclient/vars/Fedora-25.yml @@ -1,2 +1,5 @@ +# defaults file for ipaclient +# vars/Fedora-25.yml +--- ipaclient_packages: [ "ipa-client", "libselinux-python" ] -#ansible_python_interpreter: '/usr/bin/python2' \ No newline at end of file +#ansible_python_interpreter: '/usr/bin/python2' diff --git a/roles/ipaclient/vars/Fedora-26.yml b/roles/ipaclient/vars/Fedora-26.yml index 1a62ffa2..12722c8a 100644 --- a/roles/ipaclient/vars/Fedora-26.yml +++ b/roles/ipaclient/vars/Fedora-26.yml @@ -1,2 +1,5 @@ +# defaults file for ipaclient +# vars/Fedora-26.yml +--- ipaclient_packages: [ "ipa-client", "libselinux-python" ] -#ansible_python_interpreter: '/usr/bin/python2' \ No newline at end of file +#ansible_python_interpreter: '/usr/bin/python2' diff --git a/roles/ipaclient/vars/RedHat-7.3.yml b/roles/ipaclient/vars/RedHat-7.3.yml index 2501eab5..51d2b10d 100644 --- a/roles/ipaclient/vars/RedHat-7.3.yml +++ b/roles/ipaclient/vars/RedHat-7.3.yml @@ -1,4 +1,5 @@ # defaults file for ipaclient -# vars/rhel.yml +# vars/RedHat-7.3.yml +--- ipaclient_packages: [ "ipa-client", "ipa-admintools", "libselinux-python" ] #ansible_python_interpreter: '/usr/bin/python2' diff --git a/roles/ipaclient/vars/RedHat-7.yml b/roles/ipaclient/vars/RedHat-7.yml index 51ab7bfc..c2ea3ca5 100644 --- a/roles/ipaclient/vars/RedHat-7.yml +++ b/roles/ipaclient/vars/RedHat-7.yml @@ -1,4 +1,5 @@ # defaults file for ipaclient -# vars/rhel.yml +# vars/RedHat-7 +--- ipaclient_packages: [ "ipa-client", "libselinux-python" ] #ansible_python_interpreter: '/usr/bin/python2' diff --git a/roles/ipaclient/vars/RedHat-8.yml b/roles/ipaclient/vars/RedHat-8.yml index f2b883c1..65b554e0 100644 --- a/roles/ipaclient/vars/RedHat-8.yml +++ b/roles/ipaclient/vars/RedHat-8.yml @@ -1,3 +1,4 @@ # defaults file for ipaclient # vars/RedHat-8.yml +--- ipaclient_packages: [ "@idm:DL1/client" ] diff --git a/roles/ipaclient/vars/default.yml b/roles/ipaclient/vars/default.yml index ff34748a..a28d81a1 100644 --- a/roles/ipaclient/vars/default.yml +++ b/roles/ipaclient/vars/default.yml @@ -1,4 +1,5 @@ # defaults file for ipaclient # vars/default.yml +--- ipaclient_packages: [ "ipa-client", "python3-libselinux" ] #ansible_python_interpreter: '/usr/bin/python3' diff --git a/roles/ipareplica/meta/main.yml b/roles/ipareplica/meta/main.yml index d7964820..6b1021ad 100644 --- a/roles/ipareplica/meta/main.yml +++ b/roles/ipareplica/meta/main.yml @@ -1,3 +1,4 @@ +--- dependencies: [] galaxy_info: diff --git a/roles/ipareplica/vars/Fedora-25.yml b/roles/ipareplica/vars/Fedora-25.yml index ce981ff8..3ed54d5a 100644 --- a/roles/ipareplica/vars/Fedora-25.yml +++ b/roles/ipareplica/vars/Fedora-25.yml @@ -1,6 +1,7 @@ -# Fedora-25 defaults file for ipareplica +# defaults file for ipareplica # vars/Fedora-25.yml +--- ipareplica_packages: [ "ipa-server", "libselinux-python" ] ipareplica_packages_dns: [ "ipa-server-dns" ] ipareplica_packages_adtrust: [ "ipa-server-trust-ad" ] -ipareplica_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipareplica_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipareplica/vars/Fedora-26.yml b/roles/ipareplica/vars/Fedora-26.yml index 5a65e43a..df2d7162 100644 --- a/roles/ipareplica/vars/Fedora-26.yml +++ b/roles/ipareplica/vars/Fedora-26.yml @@ -1,6 +1,7 @@ -# Fedora defaults file for ipareplica +# defaults file for ipareplica # vars/Fedora-26.yml +--- ipareplica_packages: [ "ipa-server", "libselinux-python" ] ipareplica_packages_dns: [ "ipa-server-dns" ] ipareplica_packages_adtrust: [ "ipa-server-trust-ad" ] -ipareplica_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipareplica_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipareplica/vars/Fedora-27.yml b/roles/ipareplica/vars/Fedora-27.yml index 5d6f02a1..c5ed279b 100644 --- a/roles/ipareplica/vars/Fedora-27.yml +++ b/roles/ipareplica/vars/Fedora-27.yml @@ -1,6 +1,7 @@ -# Fedora defaults file for ipareplica -# vars/Fedora.yml +# defaults file for ipareplica +# vars/Fedora-27.yml +--- ipareplica_packages: [ "ipa-server", "libselinux-python" ] ipareplica_packages_dns: [ "ipa-server-dns" ] ipareplica_packages_adtrust: [ "ipa-server-trust-ad" ] -ipareplica_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipareplica_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipareplica/vars/Fedora.yml b/roles/ipareplica/vars/Fedora.yml index f19fb996..ffbdaeec 100644 --- a/roles/ipareplica/vars/Fedora.yml +++ b/roles/ipareplica/vars/Fedora.yml @@ -1,6 +1,7 @@ -# Fedora defaults file for ipareplica +# defaults file for ipareplica # vars/Fedora.yml +--- ipareplica_packages: [ "freeipa-server", "python3-libselinux" ] ipareplica_packages_dns: [ "freeipa-server-dns" ] ipareplica_packages_adtrust: [ "freeipa-server-trust-ad" ] -ipareplica_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipareplica_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipareplica/vars/RedHat-7.yml b/roles/ipareplica/vars/RedHat-7.yml index 614de3e5..34843523 100644 --- a/roles/ipareplica/vars/RedHat-7.yml +++ b/roles/ipareplica/vars/RedHat-7.yml @@ -1,6 +1,7 @@ # defaults file for ipareplica # vars/RedHat-7.yml +--- ipareplica_packages: [ "ipa-server", "libselinux-python" ] ipareplica_packages_dns: [ "ipa-server-dns" ] ipareplica_packages_adtrust: [ "ipa-server-trust-ad" ] -ipareplica_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipareplica_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipareplica/vars/RedHat-8.yml b/roles/ipareplica/vars/RedHat-8.yml index 02573025..a1b52994 100644 --- a/roles/ipareplica/vars/RedHat-8.yml +++ b/roles/ipareplica/vars/RedHat-8.yml @@ -1,5 +1,6 @@ # defaults file for ipareplica # vars/RedHat-8.yml +--- ipareplica_packages: [ "@idm:DL1/server" ] ipareplica_packages_dns: [ "@idm:DL1/dns" ] ipareplica_packages_adtrust: [ "@idm:DL1/adtrust" ] diff --git a/roles/ipareplica/vars/Ubuntu.yml b/roles/ipareplica/vars/Ubuntu.yml index 7cdabbfb..23c2e89d 100644 --- a/roles/ipareplica/vars/Ubuntu.yml +++ b/roles/ipareplica/vars/Ubuntu.yml @@ -1,4 +1,6 @@ +# defaults file for ipareplica # vars/Ubuntu.yml +--- ipareplica_packages: [ "freeipa-server" ] ipareplica_packages_dns: [ "freeipa-server-dns" ] ipareplica_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/roles/ipareplica/vars/default.yml b/roles/ipareplica/vars/default.yml index ce7393a1..0afedeb3 100644 --- a/roles/ipareplica/vars/default.yml +++ b/roles/ipareplica/vars/default.yml @@ -1,5 +1,6 @@ # defaults file for ipareplica # vars/default.yml +--- ipareplica_packages: [ "freeipa-server", "python3-libselinux" ] ipareplica_packages_dns: [ "freeipa-server-dns" ] ipareplica_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/roles/ipaserver/meta/main.yml b/roles/ipaserver/meta/main.yml index 99abca34..86a05f9b 100644 --- a/roles/ipaserver/meta/main.yml +++ b/roles/ipaserver/meta/main.yml @@ -1,3 +1,4 @@ +--- dependencies: [] galaxy_info: diff --git a/roles/ipaserver/tasks/copy_external_cert.yml b/roles/ipaserver/tasks/copy_external_cert.yml index 2d394a96..7352f835 100644 --- a/roles/ipaserver/tasks/copy_external_cert.yml +++ b/roles/ipaserver/tasks/copy_external_cert.yml @@ -1,3 +1,4 @@ +--- - name: Install - Initialize ipaserver_external_cert_files set_fact: ipaserver_external_cert_files: [] @@ -6,6 +7,7 @@ copy: src: "{{ item }}" dest: "/root/{{ item | basename }}" + mode: preserve force: yes - name: Install - Extend ipaserver_external_cert_files with "/root/{{ item | basename }}" set_fact: diff --git a/roles/ipaserver/tasks/uninstall.yml b/roles/ipaserver/tasks/uninstall.yml index 71de9faf..27d8356a 100644 --- a/roles/ipaserver/tasks/uninstall.yml +++ b/roles/ipaserver/tasks/uninstall.yml @@ -8,7 +8,7 @@ -U {{ '--ignore-topology-disconnect' if ipaserver_ignore_topology_disconnect | bool else '' }} - {{ '--ignore-last-of-role' if ipaserver_ignore_last_of_role | bool else ''}} + {{ '--ignore-last-of-role' if ipaserver_ignore_last_of_role | bool else '' }} register: uninstall # 1 means that uninstall failed because IPA server was not configured failed_when: uninstall.rc != 0 and uninstall.rc != 1 diff --git a/roles/ipaserver/vars/Fedora-25.yml b/roles/ipaserver/vars/Fedora-25.yml index 374056c0..eaf249d9 100644 --- a/roles/ipaserver/vars/Fedora-25.yml +++ b/roles/ipaserver/vars/Fedora-25.yml @@ -1,4 +1,7 @@ +# defaults file for ipaserver +# vars/Fedora-25.yml +--- ipaserver_packages: [ "ipa-server", "libselinux-python" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "ipa-server-trust-ad" ] -ipaserver_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipaserver_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipaserver/vars/Fedora-26.yml b/roles/ipaserver/vars/Fedora-26.yml index 374056c0..9e9a4d68 100644 --- a/roles/ipaserver/vars/Fedora-26.yml +++ b/roles/ipaserver/vars/Fedora-26.yml @@ -1,4 +1,7 @@ +# defaults file for ipaserver +# vars/Fedora-26.yml +--- ipaserver_packages: [ "ipa-server", "libselinux-python" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "ipa-server-trust-ad" ] -ipaserver_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipaserver_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipaserver/vars/Fedora-27.yml b/roles/ipaserver/vars/Fedora-27.yml index b8bfb577..ffa2f0da 100644 --- a/roles/ipaserver/vars/Fedora-27.yml +++ b/roles/ipaserver/vars/Fedora-27.yml @@ -1,3 +1,6 @@ +# defaults file for ipaserver +# vars/Fedora-27.yml +--- ipaserver_packages: [ "ipa-server", "libselinux-python" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "ipa-server-trust-ad" ] diff --git a/roles/ipaserver/vars/Fedora.yml b/roles/ipaserver/vars/Fedora.yml index 55a38382..14701340 100644 --- a/roles/ipaserver/vars/Fedora.yml +++ b/roles/ipaserver/vars/Fedora.yml @@ -1,4 +1,7 @@ +# defaults file for ipaserver +# vars/Fedora.yml +--- ipaserver_packages: [ "freeipa-server", "python3-libselinux" ] ipaserver_packages_dns: [ "freeipa-server-dns" ] ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ] -ipaserver_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipaserver_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipaserver/vars/RedHat-7.yml b/roles/ipaserver/vars/RedHat-7.yml index 11863757..3c524898 100644 --- a/roles/ipaserver/vars/RedHat-7.yml +++ b/roles/ipaserver/vars/RedHat-7.yml @@ -1,6 +1,7 @@ # defaults file for ipaserver -# vars/rhel.yml +# vars/RedHat-7.yml +--- ipaserver_packages: [ "ipa-server", "libselinux-python" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "ipa-server-trust-ad" ] -ipaserver_packages_firewalld: [ "firewalld" ] \ No newline at end of file +ipaserver_packages_firewalld: [ "firewalld" ] diff --git a/roles/ipaserver/vars/RedHat-8.yml b/roles/ipaserver/vars/RedHat-8.yml index 7f5ae464..9efe0cff 100644 --- a/roles/ipaserver/vars/RedHat-8.yml +++ b/roles/ipaserver/vars/RedHat-8.yml @@ -1,5 +1,6 @@ # defaults file for ipaserver # vars/RedHat-8.yml +--- ipaserver_packages: [ "@idm:DL1/server" ] ipaserver_packages_dns: [ "@idm:DL1/dns" ] ipaserver_packages_adtrust: [ "@idm:DL1/adtrust" ] diff --git a/roles/ipaserver/vars/Ubuntu.yml b/roles/ipaserver/vars/Ubuntu.yml index d0e01ea8..2d58f471 100644 --- a/roles/ipaserver/vars/Ubuntu.yml +++ b/roles/ipaserver/vars/Ubuntu.yml @@ -1,4 +1,6 @@ +# defaults file for ipaserver # vars/Ubuntu.yml +--- ipaserver_packages: [ "freeipa-server" ] ipaserver_packages_dns: [ "freeipa-server-dns" ] ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/roles/ipaserver/vars/default.yml b/roles/ipaserver/vars/default.yml index 9f6d58a4..395bb075 100644 --- a/roles/ipaserver/vars/default.yml +++ b/roles/ipaserver/vars/default.yml @@ -1,5 +1,6 @@ # defaults file for ipaserver # vars/default.yml +--- ipaserver_packages: [ "ipa-server", "python3-libselinux" ] ipaserver_packages_dns: [ "ipa-server-dns" ] ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ] diff --git a/setup.cfg b/setup.cfg index f4462241..15acf377 100644 --- a/setup.cfg +++ b/setup.cfg @@ -23,7 +23,7 @@ data_files = [flake8] extend-ignore = E203, D1, D212, D203, D400, D401 -exclude = .git,__pycache__,.tox,.venv +exclude = .git,__pycache__,.tox,.venv,.cache,.ansible-freeipa-tests per-file-ignores = plugins/*:E402 roles/*:E402 diff --git a/tests/azure/templates/build_container.yml b/tests/azure/templates/build_container.yml index c77e2745..b474c964 100644 --- a/tests/azure/templates/build_container.yml +++ b/tests/azure/templates/build_container.yml @@ -1,4 +1,4 @@ - +--- parameters: - name: job_name_suffix type: string diff --git a/tests/azure/templates/group_tests.yml b/tests/azure/templates/group_tests.yml index f0f11acc..4cabeab1 100644 --- a/tests/azure/templates/group_tests.yml +++ b/tests/azure/templates/group_tests.yml @@ -1,4 +1,4 @@ - +--- parameters: - name: scenario type: string diff --git a/tests/azure/templates/playbook_tests.yml b/tests/azure/templates/playbook_tests.yml index 6a8ac787..c5f2d160 100644 --- a/tests/azure/templates/playbook_tests.yml +++ b/tests/azure/templates/playbook_tests.yml @@ -1,4 +1,4 @@ - +--- parameters: - name: group_number type: number diff --git a/tests/azure/templates/pytest_tests.yml b/tests/azure/templates/pytest_tests.yml index 80db74f5..265a9191 100644 --- a/tests/azure/templates/pytest_tests.yml +++ b/tests/azure/templates/pytest_tests.yml @@ -1,4 +1,4 @@ - +--- parameters: - name: build_number type: string diff --git a/tests/ca-less/install_replica_without_ca.yml b/tests/ca-less/install_replica_without_ca.yml index 83398b24..dc026220 100644 --- a/tests/ca-less/install_replica_without_ca.yml +++ b/tests/ca-less/install_replica_without_ca.yml @@ -48,6 +48,7 @@ file: path: "/root/ca-less-test" state: directory + mode: 0775 - name: Copy CA certificate copy: diff --git a/tests/ca-less/install_server_without_ca.yml b/tests/ca-less/install_server_without_ca.yml index ecb609c4..add0f622 100644 --- a/tests/ca-less/install_server_without_ca.yml +++ b/tests/ca-less/install_server_without_ca.yml @@ -48,6 +48,7 @@ file: path: "/root/ca-less-test" state: directory + mode: 0775 - name: Copy CA certificate copy: diff --git a/tests/config/test_config.yml b/tests/config/test_config.yml index 01c1913f..c3f26872 100644 --- a/tests/config/test_config.yml +++ b/tests/config/test_config.yml @@ -15,7 +15,8 @@ ipaapi_context: "{{ ipa_context | default(omit) }}" register: previousconfig - - debug: + - name: Display current configuration. + debug: var: previousconfig # setup environment. @@ -478,7 +479,8 @@ ca_renewal_master_server: '{{ previousconfig.config.ca_renewal_master_server | default(omit) }}' register: result - - debug: + - name: "CA-Renewal server warning." + debug: msg: "Due to a test failure, IPA CA-Renewal Server might not be correctly be set. Check your configuration." always: diff --git a/tests/dnsrecord/test_compatibility_with_ansible_module.yml b/tests/dnsrecord/test_compatibility_with_ansible_module.yml index 8de18c15..0940f9a8 100644 --- a/tests/dnsrecord/test_compatibility_with_ansible_module.yml +++ b/tests/dnsrecord/test_compatibility_with_ansible_module.yml @@ -197,7 +197,7 @@ register: result failed_when: not result.changed or result.failed - # cleanup + # cleanup - name: Ensure that dns record 'host01' is absent ipadnsrecord: ipaadmin_password: SomeADMINpassword diff --git a/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml b/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml index 19cea6b8..9ab763bd 100644 --- a/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml +++ b/tests/external-signed-ca-with-manual-copy/install-server-with-external-ca-with-manual-copy.yml @@ -42,6 +42,7 @@ src: "{{ groups.ipaserver[0] + '-chain.crt' }}" dest: "/root/chain.crt" force: yes + mode: preserve roles: - role: ipaserver diff --git a/tests/host/certificate/test_hosts_certificate.yml b/tests/host/certificate/test_hosts_certificate.yml index a2b7eca0..a55c8988 100644 --- a/tests/host/certificate/test_hosts_certificate.yml +++ b/tests/host/certificate/test_hosts_certificate.yml @@ -72,8 +72,8 @@ - "{{ lookup('file', 'cert3.b64', rstrip=False) }}" state: absent action: member - #register: result - #failed_when: not result.changed or result.failed + register: result + failed_when: not result.changed or result.failed - name: Host test cert members absent again ipahost: diff --git a/tests/host/test_host_principal.yml b/tests/host/test_host_principal.yml index 6c3e7c90..7dcbc42c 100644 --- a/tests/host/test_host_principal.yml +++ b/tests/host/test_host_principal.yml @@ -31,7 +31,7 @@ ipaadmin_password: SomeADMINpassword name: "{{ host1_fqdn }}" principal: - - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" + - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" force: yes register: result failed_when: not result.changed or result.failed diff --git a/tests/host/test_host_random.yml b/tests/host/test_host_random.yml index b5b7a13a..8b9a2c08 100644 --- a/tests/host/test_host_random.yml +++ b/tests/host/test_host_random.yml @@ -33,7 +33,8 @@ register: ipahost failed_when: not ipahost.changed or ipahost.failed - - assert: + - name: Assert ipahost.host.randompassword is defined. + assert: that: - ipahost.host.randompassword is defined @@ -62,20 +63,21 @@ register: ipahost failed_when: not ipahost.changed or ipahost.failed - - assert: + - name: Assert randompassword is defined for host1 and host2. + assert: that: - - ipahost.host["{{host1_fqdn }}"].randompassword is + - ipahost.host["{{ host1_fqdn }}"].randompassword is defined - - ipahost.host["{{host2_fqdn }}"].randompassword is + - ipahost.host["{{ host2_fqdn }}"].randompassword is defined - - name: Print generated random password for "{{host1_fqdn }}" + - name: Print generated random password for "{{ host1_fqdn }}" debug: - var: ipahost.host["{{host1_fqdn }}"].randompassword + var: ipahost.host["{{ host1_fqdn }}"].randompassword - - name: Print generated random password for "{{host2_fqdn }}" + - name: Print generated random password for "{{ host2_fqdn }}" debug: - var: ipahost.host["{{host2_fqdn }}"].randompassword + var: ipahost.host["{{ host2_fqdn }}"].randompassword - name: Enrolled host "{{ ansible_facts['fqdn'] }}" fails to set random password with update_password always ipahost: @@ -87,7 +89,8 @@ register: ipahost failed_when: ipahost.changed or not ipahost.failed - - assert: + - name: Assert randompassword is not defined for 'ansible_fqdn'. + assert: that: - ipahost.host["{{ ansible_facts['fqdn'] }}"].randompassword is not defined diff --git a/tests/host/test_hosts_principal.yml b/tests/host/test_hosts_principal.yml index 4276da61..973afdc4 100644 --- a/tests/host/test_hosts_principal.yml +++ b/tests/host/test_hosts_principal.yml @@ -34,11 +34,11 @@ hosts: - name: "{{ host1_fqdn }}" principal: - - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" + - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" force: yes - name: "{{ host2_fqdn }}" principal: - - "{{ 'host/testhost2.' + ipaserver_domain + '@' + ipaserver_realm }}" + - "{{ 'host/testhost2.' + ipaserver_domain + '@' + ipaserver_realm }}" force: yes register: result failed_when: not result.changed or result.failed diff --git a/tests/privilege/test_privilege_client_context.yml b/tests/privilege/test_privilege_client_context.yml index cd125f75..4970caf6 100644 --- a/tests/privilege/test_privilege_client_context.yml +++ b/tests/privilege/test_privilege_client_context.yml @@ -35,4 +35,3 @@ - name: Test privilege using client context, in server host. import_playbook: test_privilege.yml when: groups['ipaclients'] is not defined or not groups['ipaclients'] - diff --git a/tests/pwpolicy/test_pwpolicy_client_context.yml b/tests/pwpolicy/test_pwpolicy_client_context.yml index 362f567f..c6d90fff 100644 --- a/tests/pwpolicy/test_pwpolicy_client_context.yml +++ b/tests/pwpolicy/test_pwpolicy_client_context.yml @@ -35,4 +35,3 @@ - name: Test pwpolicy using client context, in server host. import_playbook: test_pwpolicy.yml when: groups['ipaclients'] is not defined or not groups['ipaclients'] - diff --git a/tests/pytests/dnszone/playbooks/dnszone_add_multiple_ipv4_ipv6_forwarders.yaml b/tests/pytests/dnszone/playbooks/dnszone_add_multiple_ipv4_ipv6_forwarders.yaml index 6f42ded5..3607d440 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_add_multiple_ipv4_ipv6_forwarders.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_add_multiple_ipv4_ipv6_forwarders.yaml @@ -3,7 +3,8 @@ hosts: ipaserver tasks: - - ipadnszone: + - name: Ensure DNS zone is present with multiple forwarders + ipadnszone: ipaadmin_password: SomeADMINpassword name: 04testzone.test forwarders: diff --git a/tests/pytests/dnszone/playbooks/dnszone_add_without_forwarder.yaml b/tests/pytests/dnszone/playbooks/dnszone_add_without_forwarder.yaml index d6ad54de..2446c576 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_add_without_forwarder.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_add_without_forwarder.yaml @@ -3,7 +3,8 @@ hosts: ipaserver tasks: - - ipadnszone: + - name: Ensure DNS zone is present without forwarders + ipadnszone: ipaadmin_password: SomeADMINpassword name: 01testzone.test forwarders: [] diff --git a/tests/pytests/dnszone/playbooks/dnszone_del_multiple.yaml b/tests/pytests/dnszone/playbooks/dnszone_del_multiple.yaml index 2b631e1d..0de57cc9 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_del_multiple.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_del_multiple.yaml @@ -4,7 +4,8 @@ become: true tasks: - - ipadnszone: + - name: Ensure multiple DNS are absent + ipadnszone: ipaadmin_password: SomeADMINpassword name: delzone1.com,delzone2.com,delzone3.com state: absent diff --git a/tests/pytests/dnszone/playbooks/dnszone_disable.yaml b/tests/pytests/dnszone/playbooks/dnszone_disable.yaml index c10a2497..a97674a2 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_disable.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_disable.yaml @@ -3,7 +3,8 @@ hosts: ipaserver tasks: - - ipadnszone: + - name: Ensure DNS zone is disabled + ipadnszone: ipaadmin_password: SomeADMINpassword name: 26testzone.test state: disabled diff --git a/tests/pytests/dnszone/playbooks/dnszone_enable.yaml b/tests/pytests/dnszone/playbooks/dnszone_enable.yaml index 47783a54..8f6a3a98 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_enable.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_enable.yaml @@ -3,7 +3,8 @@ hosts: ipaserver tasks: - - ipadnszone: + - name: Ensure DNS zone is enabled + ipadnszone: ipaadmin_password: SomeADMINpassword name: 26testzone.test state: enabled diff --git a/tests/pytests/dnszone/playbooks/dnszone_invalid_ip.yaml b/tests/pytests/dnszone/playbooks/dnszone_invalid_ip.yaml index 59142bfd..d16cff75 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_invalid_ip.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_invalid_ip.yaml @@ -4,7 +4,8 @@ become: true tasks: - - ipadnszone: + - name: Test adding a DNS zone with an invalid forwarder + ipadnszone: ipaadmin_password: SomeADMINpassword name: invalidzone.test forwarders: diff --git a/tests/pytests/dnszone/playbooks/dnszone_invalid_serial.yaml b/tests/pytests/dnszone/playbooks/dnszone_invalid_serial.yaml index 32c87695..1611035a 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_invalid_serial.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_invalid_serial.yaml @@ -4,7 +4,8 @@ become: true tasks: - - ipadnszone: + - name: Test adding a DNS zone with an invalid serial + ipadnszone: ipaadmin_password: SomeADMINpassword name: invalidserialzone.test serial: 429496729599 diff --git a/tests/pytests/dnszone/playbooks/dnszone_name_from_ip.yaml b/tests/pytests/dnszone/playbooks/dnszone_name_from_ip.yaml index df8498a6..c8fb026e 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_name_from_ip.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_name_from_ip.yaml @@ -3,6 +3,7 @@ hosts: ipaserver tasks: - - ipadnszone: + - name: Ensure a reverse DNS Zone with name inferred form an IP address + ipadnszone: ipaadmin_password: SomeADMINpassword name_from_ip: 192.8.2.0/22 diff --git a/tests/pytests/dnszone/playbooks/dnszone_with_forward_policy_only.yaml b/tests/pytests/dnszone/playbooks/dnszone_with_forward_policy_only.yaml index d71c3904..a32d0bb5 100644 --- a/tests/pytests/dnszone/playbooks/dnszone_with_forward_policy_only.yaml +++ b/tests/pytests/dnszone/playbooks/dnszone_with_forward_policy_only.yaml @@ -3,7 +3,8 @@ hosts: ipaserver tasks: - - ipadnszone: + - name: Ensure DNS Zone is present with forward policy `only` + ipadnszone: ipaadmin_password: SomeADMINpassword name: 26testzone.test forward_policy: only diff --git a/tests/server/test_server.yml b/tests/server/test_server.yml index 0f97b2ac..d5ec0d89 100644 --- a/tests/server/test_server.yml +++ b/tests/server/test_server.yml @@ -48,7 +48,7 @@ name: mylocation state: absent -# CREATE TEST ITEMS + # CREATE TEST ITEMS - name: Ensure location "mylocation" is present ipalocation: diff --git a/tests/sudorule/test_sudorule.yml b/tests/sudorule/test_sudorule.yml index dc37e77a..92ea773f 100644 --- a/tests/sudorule/test_sudorule.yml +++ b/tests/sudorule/test_sudorule.yml @@ -756,7 +756,7 @@ failed_when: result.changed or result.failed # cleanup - - name : Ensure sudocmdgroup is absent + - name: Ensure sudocmdgroup is absent ipasudocmdgroup: ipaadmin_password: SomeADMINpassword ipaapi_context: "{{ ipa_context | default(omit) }}" diff --git a/tests/trust/test_trust_client_context.yml b/tests/trust/test_trust_client_context.yml index 0b53cc53..e6ed7726 100644 --- a/tests/trust/test_trust_client_context.yml +++ b/tests/trust/test_trust_client_context.yml @@ -35,4 +35,3 @@ - name: Test trust using client context, in server host. import_playbook: test_trust.yml when: groups['ipaclients'] is not defined or not groups['ipaclients'] - diff --git a/tests/user/certificate/test_users_certificate.yml b/tests/user/certificate/test_users_certificate.yml index 406e6030..313a826f 100644 --- a/tests/user/certificate/test_users_certificate.yml +++ b/tests/user/certificate/test_users_certificate.yml @@ -67,8 +67,8 @@ - "{{ lookup('file', 'cert3.b64', rstrip=False) }}" state: absent action: member - #register: result - #failed_when: not result.changed or result.failed + register: result + failed_when: not result.changed or result.failed - name: User test cert members absent again ipauser: diff --git a/tests/user/test_user.yml b/tests/user/test_user.yml index 571a7bab..e9eaaa3f 100644 --- a/tests/user/test_user.yml +++ b/tests/user/test_user.yml @@ -96,8 +96,10 @@ manager: [] principal: [] sshpubkey: - - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCqmVDpEX5gnSjKuv97AyzOhaUMMKz8ahOA3GY77tVC4o68KNgMCmDSEG1/kOIaElngNLaCha3p/2iAcU9Bi1tLKUlm2bbO5NHNwHfRxY/3cJtq+/7D1vxJzqThYwI4F9vr1WxyY2+mMTv3pXbfAJoR8Mu06XaEY5PDetlDKjHLuNWF+/O7ZU8PsULTa1dJZFrtXeFpmUoLoGxQBvlrlcPI1zDciCSU24t27Zan5Py2l5QchyI7yhCyMM77KDtj5+AFVpmkb9+zq50rYJAyFVeyUvwjzErvQrKJzYpA0NyBp7vskWbt36M16/M/LxEK7HA6mkcakO3ESWx5MT1LAjvdlnxbWG3787MxweHXuB8CZU+9bZPFBaJ+VQtOfJ7I8eH0S16moPC4ak8FlcFvOH8ERDPWLFDqfy09yaZ7bVIF0//5ZI7Nf3YDe3S7GrBX5ieYuECyP6UNkTx9BRsAQeVvXEc6otzB7iCSnYBMGUGzCqeigoAWaVQUONsSR3Uatks= pinky@ipaserver.el81.local - - ssh-rsa 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 pinky@ipaserver.el81.local + # yamllint disable-line rule:line-length + - ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204 + # yamllint disable-line rule:line-length + - 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 pinky@ipaserver.el81.local # noqa 204 register: result failed_when: not result.changed or result.failed diff --git a/tests/user/test_users.yml b/tests/user/test_users.yml index 65713931..3b457d42 100644 --- a/tests/user/test_users.yml +++ b/tests/user/test_users.yml @@ -230,8 +230,10 @@ manager: [] principal: [] sshpubkey: - - ssh-rsa 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 pinky@ipaserver.el81.local - - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDc8MIjaSrxLYHvu+hduoF4m6NUFSlXZWzYbd3BK4L47/U4eiXoOS6dcfuZJDjmLfOipc7XVp7NADwAgA1yBOAjbeVpXr2tC8w8saZibl75WBOEjDfNroiOh/f/ojrwwHg05QTVSZHs27sU1HBPyCQM/FHVM6EnRfmyiBkEBA/3ca0PJ9UJhWb2XisCaz6y6QcTh4gQnvHzgmEmK31GwiKnmBSEQuj8P5NGCO8RlN3cq3zpRpMDEoBRCjQYicllf/5P43r5OGvS1LhTiAMfyqE37URezNQa7aozBpH1GhIwAmjAtm84jXQjxUgZPYC0aSLuADYErScOP4792r6koH9t/DM5/M+jG2c4PNWynDczUw6Eaxl5E3hU0Ee9UN0Oee7iBnVenS/QMeZNyo5lMA/HXT5lrYiJGTYM0shRjGXXYBbJZhWerguSWDAdUd1gvuGP1nb7/+/Cvb46+HX7zYouS5Ojo0yPzMZ07X142jnKAfx9LnKdMUCwBJzbtoJ91Zc= pinky@ipaserver.el81.local + # yamllint disable-line rule:line-length + - ssh-rsa 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 pinky@ipaserver.el81.local # noqa 204 + # yamllint disable-line rule:line-length + - AAAAB3NzaC1yc2EAAAADAQABAAABgQDc8MIjaSrxLYHvu+hduoF4m6NUFSlXZWzYbd3BK4L47/U4eiXoOS6dcfuZJDjmLfOipc7XVp7NADwAgA1yBOAjbeVpXr2tC8w8saZibl75WBOEjDfNroiOh/f/ojrwwHg05QTVSZHs27sU1HBPyCQM/FHVM6EnRfmyiBkEBA/3ca0PJ9UJhWb2XisCaz6y6QcTh4gQnvHzgmEmK31GwiKnmBSEQuj8P5NGCO8RlN3cq3zpRpMDEoBRCjQYicllf/5P43r5OGvS1LhTiAMfyqE37URezNQa7aozBpH1GhIwAmjAtm84jXQjxUgZPYC0aSLuADYErScOP4792r6koH9t/DM5/M+jG2c4PNWynDczUw6Eaxl5E3hU0Ee9UN0Oee7iBnVenS/QMeZNyo5lMA/HXT5lrYiJGTYM0shRjGXXYBbJZhWerguSWDAdUd1gvuGP1nb7/+/Cvb46+HX7zYouS5Ojo0yPzMZ07X142jnKAfx9LnKdMUCwBJzbtoJ91Zc= pinky@ipaserver.el81.local # noqa 204 register: result failed_when: not result.changed or result.failed diff --git a/tests/user/test_users_absent.yml b/tests/user/test_users_absent.yml index d211816c..6195374d 100644 --- a/tests/user/test_users_absent.yml +++ b/tests/user/test_users_absent.yml @@ -10,7 +10,7 @@ tasks: - name: Include users.json include_vars: - file: users.json + file: users.json # noqa 505 - name: Create dict with user names set_fact: diff --git a/tests/user/test_users_invalid_cert.yml b/tests/user/test_users_invalid_cert.yml index 9139a54c..0d75159a 100644 --- a/tests/user/test_users_invalid_cert.yml +++ b/tests/user/test_users_invalid_cert.yml @@ -51,8 +51,8 @@ - "{{ lookup('file', 'cert2.b64', rstrip=False) }}" state: absent action: member - #register: result - #failed_when: not result.changed or result.failed + register: result + failed_when: not result.changed or result.failed - name: Remove certificate files. shell: diff --git a/tests/user/test_users_present.yml b/tests/user/test_users_present.yml index e63ea1ee..75dfdbfd 100644 --- a/tests/user/test_users_present.yml +++ b/tests/user/test_users_present.yml @@ -10,7 +10,7 @@ tasks: - name: Include users.json include_vars: - file: users.json + file: users.json # noqa 505 - name: Users present len:{{ users | length }} ipauser: diff --git a/tests/user/test_users_present_slice.yml b/tests/user/test_users_present_slice.yml index 90f08c5c..8f1c6dd4 100644 --- a/tests/user/test_users_present_slice.yml +++ b/tests/user/test_users_present_slice.yml @@ -12,8 +12,9 @@ tasks: - name: Include users.json include_vars: - file: users.json - - debug: + file: users.json # noqa 505 + - name: Size of users slice. + debug: msg: "{{ users | length }}" - name: Users present ipauser: diff --git a/tests/vault/env_cleanup.yml b/tests/vault/env_cleanup.yml index e545e791..85f4d10c 100644 --- a/tests/vault/env_cleanup.yml +++ b/tests/vault/env_cleanup.yml @@ -1,5 +1,5 @@ -# Tasks executed to clean up test environment for Vault module. - +--- + # Tasks executed to clean up test environment for Vault module. - name: Ensure user vaults are absent ipavault: ipaadmin_password: SomeADMINpassword @@ -7,7 +7,7 @@ - stdvault - symvault - asymvault - username: "{{username}}" + username: "{{ username }}" state: absent loop: - admin diff --git a/tests/vault/env_setup.yml b/tests/vault/env_setup.yml index 4e2d40e8..69e9cb71 100644 --- a/tests/vault/env_setup.yml +++ b/tests/vault/env_setup.yml @@ -20,6 +20,7 @@ copy: src: "{{ playbook_dir }}/{{ item }}" dest: "{{ ansible_facts['env'].HOME }}/{{ item }}" + mode: 0644 with_items: - A_private.pem - A_public.pem diff --git a/tests/vault/tasks_vault_members.yml b/tests/vault/tasks_vault_members.yml index b293713c..d3af9347 100644 --- a/tests/vault/tasks_vault_members.yml +++ b/tests/vault/tasks_vault_members.yml @@ -1,13 +1,13 @@ --- -# Tasks to test member management for Vault module. + # Tasks to test member management for Vault module. - name: Setup testing environment. import_tasks: env_setup.yml - name: Ensure vault is present ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" - vault_type: "{{vault.vault_type}}" + name: "{{ vault.name }}" + vault_type: "{{ vault.vault_type }}" register: result failed_when: not result.changed or result.failed when: vault.vault_type == 'standard' @@ -15,9 +15,9 @@ - name: Ensure vault is present ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" vault_password: SomeVAULTpassword - vault_type: "{{vault.vault_type}}" + vault_type: "{{ vault.vault_type }}" register: result failed_when: not result.changed or result.failed when: vault.vault_type == 'symmetric' @@ -27,7 +27,7 @@ ipaadmin_password: SomeADMINpassword name: "{{ vault.name }}" vault_type: "{{ vault.vault_type }}" - public_key: "{{lookup('file', 'A_private.b64')}}" + public_key: "{{ lookup('file', 'A_private.b64') }}" register: result failed_when: not result.changed or result.failed when: vault.vault_type == 'asymmetric' @@ -35,7 +35,7 @@ - name: Ensure vault member user is present. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - user02 @@ -45,7 +45,7 @@ - name: Ensure vault member user is present, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - user02 @@ -55,7 +55,7 @@ - name: Ensure more vault member users are present. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - admin @@ -66,7 +66,7 @@ - name: Ensure vault member user is still present. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - user02 @@ -76,7 +76,7 @@ - name: Ensure vault users are absent. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - admin @@ -88,7 +88,7 @@ - name: Ensure vault users are absent, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - admin @@ -100,7 +100,7 @@ - name: Ensure vault user is absent, once more. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member users: - admin @@ -111,7 +111,7 @@ - name: Ensure vault member group is present. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member groups: vaultgroup register: result @@ -120,7 +120,7 @@ - name: Ensure vault member group is present, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member groups: vaultgroup register: result @@ -129,7 +129,7 @@ - name: Ensure vault member group is absent. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member groups: vaultgroup state: absent @@ -139,7 +139,7 @@ - name: Ensure vault member group is absent, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member groups: vaultgroup state: absent @@ -149,7 +149,7 @@ - name: Ensure vault member service is present. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member services: "HTTP/{{ ansible_facts['fqdn'] }}" register: result @@ -158,7 +158,7 @@ - name: Ensure vault member service is present, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member services: "HTTP/{{ ansible_facts['fqdn'] }}" register: result @@ -167,7 +167,7 @@ - name: Ensure vault member service is absent. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member services: "HTTP/{{ ansible_facts['fqdn'] }}" state: absent @@ -177,7 +177,7 @@ - name: Ensure vault member service is absent, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" action: member services: "HTTP/{{ ansible_facts['fqdn'] }}" state: absent @@ -187,7 +187,7 @@ - name: Ensure user03 is an owner of vault. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" owners: user03 action: member register: result @@ -196,7 +196,7 @@ - name: Ensure user03 is an owner of vault, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" owners: user03 action: member register: result @@ -205,7 +205,7 @@ - name: Ensure user03 is not owner of vault. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" owners: user03 state: absent action: member @@ -215,7 +215,7 @@ - name: Ensure user03 is not owner of vault, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" owners: user03 state: absent action: member @@ -225,7 +225,7 @@ - name: Ensure vaultgroup is an ownergroup of vault. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownergroups: vaultgroup action: member register: result @@ -234,7 +234,7 @@ - name: Ensure vaultgroup is an ownergroup of vault, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownergroups: vaultgroup action: member register: result @@ -243,7 +243,7 @@ - name: Ensure vaultgroup is not ownergroup of vault. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownergroups: vaultgroup state: absent action: member @@ -253,7 +253,7 @@ - name: Ensure vaultgroup is not ownergroup of vault, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownergroups: vaultgroup state: absent action: member @@ -263,7 +263,7 @@ - name: Ensure service is an owner of vault. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownerservices: "HTTP/{{ ansible_facts['fqdn'] }}" action: member register: result @@ -272,7 +272,7 @@ - name: Ensure service is an owner of vault, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownerservices: "HTTP/{{ ansible_facts['fqdn'] }}" action: member register: result @@ -281,7 +281,7 @@ - name: Ensure service is not owner of vault. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownerservices: "HTTP/{{ ansible_facts['fqdn'] }}" state: absent action: member @@ -291,25 +291,25 @@ - name: Ensure service is not owner of vault, again. ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" ownerservices: "HTTP/{{ ansible_facts['fqdn'] }}" state: absent action: member register: result failed_when: result.changed or result.failed - - name: Ensure {{vault.vault_type}} vault is absent + - name: Ensure {{ vault.vault_type }} vault is absent ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" state: absent register: result failed_when: not result.changed or result.failed - - name: Ensure {{vault.vault_type}} vault is absent, again + - name: Ensure {{ vault.vault_type }} vault is absent, again ipavault: ipaadmin_password: SomeADMINpassword - name: "{{vault.name}}" + name: "{{ vault.name }}" state: absent register: result failed_when: result.changed or result.failed diff --git a/utils/lint_check.sh b/utils/lint_check.sh index d7bfadc3..27060b27 100755 --- a/utils/lint_check.sh +++ b/utils/lint_check.sh @@ -1,29 +1,41 @@ #!/bin/bash -topdir="`dirname $(dirname $0)`" +INFO="\033[37;1m" +WARN="\033[33;1m" +RST="\033[0m" -flake8 . -pydocstyle . -pylint plugins +pushd "`dirname $0`/.." >/dev/null 2>&1 -ANSIBLE_LIBRARY=${ANSIBLE_LIBRARY:-"${topdir}/plugins/modules"} -ANSIBLE_MODULE_UTILS=${ANSIBLE_MODULE_UTILS:-"${topdir}/plugins/module_utils"} +echo -e "${INFO}Running 'flake8'...${RST}" +flake8 plugins utils roles *.py +echo -e "${INFO}Running 'pydocstyle'...${RST}" +pydocstyle plugins utils roles *.py +echo -e "${INFO}Running 'pylint'...${RST}" +pylint plugins *.py -export ANSIBLE_LIBRARY ANSIBLE_MODULE_UTILS +ANSIBLE_LIBRARY="${ANSIBLE_LIBRARY:-plugins/modules}" +ANSIBLE_MODULE_UTILS="${ANSIBLE_MODULE_UTILS:-plugins/module_utils}" +ANSIBLE_DOC_FRAGMENT_PLUGINS="${ANSIBLE_DOC_FRAGMENT_PLUGINS:-plugins/doc_fragments}" +export ANSIBLE_LIBRARY ANSIBLE_MODULE_UTILS ANSIBLE_DOC_FRAGMENT_PLUGINS -yaml_dirs=( - "${topdir}/tests" - "${topdir}/playbooks" - "${topdir}/molecule" +echo -e "${WARN}Missing file warnings are expected and can be ignored.${RST}" +echo -e "${INFO}Running 'ansible-lint'...${RST}" +playbook_dirs=( + "tests" + "playbooks" ) +ansible-lint --force-color "${playbook_dirs[@]}" -for dir in "${yaml_dirs[@]}" -do - find "${dir}" -type f -name "*.yml" | xargs ansible-lint --force-color -done +echo -e "${INFO}Running 'ansible-doc-test'...${RST}" +python "`dirname $0`/ansible-doc-test" -v roles plugins +echo -e "${INFO}Running 'yamllint'...${RST}" +yaml_dirs=( + "tests" + "playbooks" + "molecule" + "roles" +) +yamllint -f colored "${yaml_dirs[@]}" -for dir in "${yaml_dirs[@]}" -do - find "${dir}" -type f -name "*.yml" | xargs yamllint -done +popd >/dev/null 2>&1