mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-02 03:13:10 +00:00
14f682ad76
There are some issues using a combination of `lookup('file')` and the
`b64encode` filter in Ansible, making tests unstable. This change
removes the usage of b64encode when loading public and private keys
from files in the Vault test playbooks.
53 lines
1.3 KiB
YAML
53 lines
1.3 KiB
YAML
---
|
|
# Tasks executed to ensure a sane environment to test IPA Vault module.
|
|
- name: Ensure environment is clean.
|
|
import_tasks: env_cleanup.yml
|
|
|
|
- name: Create private/public key pair.
|
|
shell:
|
|
cmd: |
|
|
openssl genrsa -out "{{ item }}private.pem" 2048
|
|
openssl rsa -in "{{ item }}private.pem" -outform PEM -pubout -out "{{ item }}public.pem"
|
|
base64 "{{ item }}public.pem" -w5000 > "{{ item }}public.b64"
|
|
base64 "{{ item }}private.pem" -w5000 > "{{ item }}private.b64"
|
|
delegate_to: localhost
|
|
become: no
|
|
with_items:
|
|
- A_
|
|
- B_
|
|
|
|
- name: Copy files to target host.
|
|
copy:
|
|
src: "{{ playbook_dir }}/{{ item }}"
|
|
dest: "{{ ansible_env.HOME }}/{{ item }}"
|
|
with_items:
|
|
- A_private.pem
|
|
- A_public.pem
|
|
- B_private.pem
|
|
- B_public.pem
|
|
- A_private.b64
|
|
- A_public.b64
|
|
- B_private.b64
|
|
- B_public.b64
|
|
- password.txt
|
|
- in.txt
|
|
|
|
- name: Ensure vaultgroup exists.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: vaultgroup
|
|
|
|
- name: Ensure testing users exist.
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
users:
|
|
- name: user01
|
|
first: First
|
|
last: Start
|
|
- name: user02
|
|
first: Second
|
|
last: Middle
|
|
- name: user03
|
|
first: Third
|
|
last: Last
|