mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 18:55:53 +00:00
4b9860e1d2
There is a new hbacsvcgroup (HBAC Service Group) management module placed in the plugins folder: plugins/modules/ipahbacsvcgroup.py The hbacsvc module allows to ensure presence and absence of HBAC Service Groups. Here is the documentation for the module: README-hbacsvcgroup.md New example playbooks have been added: playbooks/hbacsvcgroup/ensure-hbacsvcgroup-absent.yml playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-absent.yml playbooks/hbacsvcgroup/ensure-hbacsvcgroup-member-present.yml playbooks/hbacsvcgroup/ensure-hbacsvcgroup-present.yml New tests added for the module: tests/hbacsvcgroup/test_hbacsvcgroup.yml
92 lines
2.2 KiB
YAML
92 lines
2.2 KiB
YAML
---
|
|
- name: Tests
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- name: Ensure HBAC Service Group login is absent
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
state: absent
|
|
|
|
- name: Ensure HBAC Service for sshd is present
|
|
ipahbacsvc:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
|
|
- name: Ensure HBAC Service Group login is present
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure HBAC Service Group login is present again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
register: result
|
|
failed_when: result.changed
|
|
|
|
- name: Ensure HBAC Service sshd is present in HBAC Service Group login
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
action: member
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure HBAC Service sshd is present in HBAC Service Group login again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
action: member
|
|
register: result
|
|
failed_when: result.changed
|
|
|
|
- name: Ensure HBAC Services sshd and foo are absent in HBAC Service Group login
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
- foo
|
|
action: member
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure HBAC Services sshd and foo are absent in HBAC Service Group login again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
- foo
|
|
action: member
|
|
state: absent
|
|
register: result
|
|
failed_when: result.changed
|
|
|
|
- name: Ensure HBAC Service Group login is absent
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed
|
|
|
|
- name: Ensure HBAC Service Group login is absent again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: MyPassword123
|
|
name: login
|
|
state: absent
|
|
register: result
|
|
failed_when: result.changed
|