mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 18:55:53 +00:00
7e0624d836
Update vault README file and add tests for executing plugin with
`ipaapi_context` set to `client`.
A new test playbook can be found at:
tests/vault/test_vault_client_context.yml
As `ipavault` only works in client context, an error is raised if it
is explicitly executed in a server context.
75 lines
1.6 KiB
YAML
75 lines
1.6 KiB
YAML
# Tasks executed to clean up test environment for Vault module.
|
|
|
|
- name: Ensure user vaults are absent
|
|
ipavault:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name:
|
|
- stdvault
|
|
- symvault
|
|
- asymvault
|
|
username: "{{username}}"
|
|
state: absent
|
|
loop:
|
|
- admin
|
|
- user01
|
|
loop_control:
|
|
loop_var: username
|
|
|
|
- name: Ensure shared vaults are absent
|
|
ipavault:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name:
|
|
- sharedvault
|
|
- svcvault
|
|
state: absent
|
|
|
|
- name: Ensure test users do not exist.
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name:
|
|
- user01
|
|
- user02
|
|
- user03
|
|
state: absent
|
|
|
|
- name: Ensure test groups do not exist.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: vaultgroup
|
|
state: absent
|
|
|
|
- name: Remove files from target host.
|
|
file:
|
|
path: "{{ ansible_facts['env'].HOME }}/{{ item }}"
|
|
state: absent
|
|
with_items:
|
|
- A_private.pem
|
|
- A_public.pem
|
|
- B_private.pem
|
|
- B_public.pem
|
|
- A_private.b64
|
|
- A_public.b64
|
|
- B_private.b64
|
|
- B_public.b64
|
|
- password.txt
|
|
- in.txt
|
|
- out.txt
|
|
|
|
- name: Remove files from controller.
|
|
file:
|
|
path: "{{ playbook_dir }}/{{ item }}"
|
|
state: absent
|
|
delegate_to: localhost
|
|
become: no
|
|
with_items:
|
|
- A_private.pem
|
|
- A_public.pem
|
|
- B_private.pem
|
|
- B_public.pem
|
|
- A_private.b64
|
|
- A_public.b64
|
|
- B_private.b64
|
|
- B_public.b64
|