mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 02:35:54 +00:00
aa57aa56f4
For failed_when result.failed should be used to make sure that the task fails if there was an error.
92 lines
2.4 KiB
YAML
92 lines
2.4 KiB
YAML
---
|
|
- name: Test hbacsvcgroup
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- name: Ensure HBAC Service Group login is absent
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
state: absent
|
|
|
|
- name: Ensure HBAC Service for sshd is present
|
|
ipahbacsvc:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
|
|
- name: Ensure HBAC Service Group login is present
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Service Group login is present again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Service sshd is present in HBAC Service Group login
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
action: member
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Service sshd is present in HBAC Service Group login again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
action: member
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Services sshd and foo are absent in HBAC Service Group login
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
- foo
|
|
action: member
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Services sshd and foo are absent in HBAC Service Group login again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
hbacsvc:
|
|
- sshd
|
|
- foo
|
|
action: member
|
|
state: absent
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Service Group login is absent
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
state: absent
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure HBAC Service Group login is absent again
|
|
ipahbacsvcgroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: login
|
|
state: absent
|
|
register: result
|
|
failed_when: result.changed or result.failed
|