@ -20,142 +20,229 @@
shell : python -c 'import jinja2; print(jinja2.__version__)'
register : jinja2_version
delegate_to : localhost
- debug : var=jinja2_version
changed_when : no
- debug:
msg : "Jinja version: {{ jinja2_version.stdout }}, Python version: {{ ansible_python_version }}"
##
## user add
##
#
- name : remove the test user
user:
name : ansibulluser
state : absent
name : ansibulluser
state : absent
- name : try to create a user
user:
name : ansibulluser
state : present
name : ansibulluser
state : present
register : user_test0
- debug : var=user_test0
- debug:
var : user_test0
verbosity : 2
- name : make a list of users
script : userlist.sh "{{ ansible_distribution }}"
script : userlist.sh {{ ansible_distribution }}
register : user_names
- debug : var=user_names
- debug:
var : user_names
verbosity : 2
- name : validate results for testcase 0
assert:
that:
- 'user_test0.changed is defined'
- 'user_test0.changed '
- '"ansibulluser" in user_names.stdout_lines'
that:
- user_test0 is changed
- '"ansibulluser" in user_names.stdout_lines '
##
## user check
##
- name : run existing user check tests
user:
name : "{{ user_names.stdout_lines |random }}"
state : present
create_home : no
name : "{{ user_names.stdout_lines | random }}"
state : present
create_home : no
with_sequence : start=1 end=5
register : user_test1
- debug : var=user_test1
- debug:
var : user_test1
verbosity : 2
- name : validate results for testcase 1
assert:
that:
- 'user_test1.results is defined'
- 'user_test1.results|length == 5'
that:
- user_test1.results is defined
- user_test1.results | length == 5
- name : validate changed results for testcase 1 (jinja >= 2.6)
assert:
that:
- "user_test1.results|map(attribute='changed')|unique|list == [False]"
- "user_test1.results|map(attribute='state')|unique|list == ['present']"
when : " "
that:
- user_test1.results | map(attribute='changed') | unique | list == [False]
- user_test1.results | map(attribute='state') | unique | list == ['present']
when :
- name : validate changed results for testcase 1 (jinja >= 2.6)
- name : validate changed results for testcase 1 (jinja < 2.6)
assert:
that:
- "not user_test1.results[0]['changed'] "
- "not user_test1.results[1]['changed'] "
- "not user_test1.results[2]['changed'] "
- "not user_test1.results[3]['changed'] "
- "not user_test1.results[4]['changed'] "
- "user_test1.results[0]['state'] == 'present'"
- "user_test1.results[1]['state'] == 'present'"
- "user_test1.results[2]['state'] == 'present'"
- "user_test1.results[3]['state'] == 'present'"
- "user_test1.results[4]['state'] == 'present'"
when : " "
##
that:
- "user_test1.results[0] is not changed "
- "user_test1.results[1] is not changed "
- "user_test1.results[2] is not changed "
- "user_test1.results[3] is not changed "
- "user_test1.results[4] is not changed "
- "user_test1.results[0]['state'] == 'present'"
- "user_test1.results[1]['state'] == 'present'"
- "user_test1.results[2]['state'] == 'present'"
- "user_test1.results[3]['state'] == 'present'"
- "user_test1.results[4]['state'] == 'present'"
when :
## user remove
##
- name : try to delete the user
user:
name : ansibulluser
state : absent
force : true
name : ansibulluser
state : absent
force : true
register : user_test2
- name : make a new list of users
script : userlist.sh " {{ ansible_distribution }}"
script : userlist.sh {{ ansible_distribution }}
register : user_names2
- debug : var=user_names2
- debug:
var : user_names2
verbosity : 2
- name : validate results for testcase 2
assert:
that:
- '"ansibulluser" not in user_names2.stdout_lines'
that:
- '"ansibulluser" not in user_names2.stdout_lines'
- block:
- name : create non-system user on OSX to test the shell is set to /bin/bash
- name : create non-system user on mac OS to test the shell is set to /bin/bash
user:
name : x user
register : x user_output
name : mac osuser
register : mac osuser_output
- name : validate the shell is set to /bin/bash
assert:
that:
- ' osx user_output.shell == "/bin/bash"'
- ' mac osuser_output.shell == "/bin/bash"'
- name : cleanup
user:
name : x user
name : mac osuser
state : absent
- name : create system user on OSX to test the shell is set to /usr/bin/false
- name : create system user on macos to test the shell is set to /usr/bin/false
user:
name : x user
name : mac osuser
system : yes
register : x user_output
register : mac osuser_output
- name : validate the shell is set to /usr/bin/false
assert:
that:
- ' osx user_output.shell == "/usr/bin/false"'
- ' mac osuser_output.shell == "/usr/bin/false"'
- name : cleanup
user:
name : x user
name : mac osuser
state : absent
- name : create non-system user on OSX and set the shell to /bin/sh
- name : create non-system user on macos and set the shell to /bin/sh
user:
name : x user
name : mac osuser
shell : /bin/sh
register : x user_output
register : mac osuser_output
- name : validate the shell is set to /bin/sh
assert:
that:
- ' osx user_output.shell == "/bin/sh"'
- ' mac osuser_output.shell == "/bin/sh"'
- name : cleanup
user:
name : x user
name : mac osuser
state : absent
when : ansible_distribution == "MacOSX"
## user expires
# Date is March 3, 2050
- name : Create user with expiration
user:
name : ansibulluser
state : present
expires : 2529881062
register : user_test_expires1
- name : Create user with expiration again to ensure no change is made
user:
name : ansibulluser
state : present
expires : 2529881062
register : user_test_expires2
- name : Ensure that account with expiration was created and did not change on subsequent run
assert:
that:
- user_test_expires1 is changed
- user_test_expires2 is not changed
- name : Verify expiration date for Linux
block:
- name : LINUX | Get expiration date for ansibulluser
getent:
database : shadow
key : ansibulluser
- name : LINUX | Ensure proper expiration date was set
assert:
that:
- getent_shadow['ansibulluser'][6] == '29281'
when : ansible_os_family in ['RedHat', 'Debian', 'Suse']
- name : Verify expiration date for BSD
block:
- name : BSD | Get expiration date for ansibulluser
shell: 'grep ansibulluser /etc/master.passwd | cut -d : -f 7'
changed_when : no
register : bsd_account_expiration
- name : BSD | Ensure proper expiration date was set
assert:
that:
- bsd_account_expiration.stdout == '2529878400'
when : ansible_os_family == 'FreeBSD'
- name : Change timezone
timezone:
name : America/Denver
register : original_timezone
- name : Change system timezone to make sure expiration comparison works properly
block:
- name : Create user with expiration again to ensure no change is made in a new timezone
user:
name : ansibulluser
state : present
expires : 2529881062
register : user_test_different_tz
- name : Ensure that no change was reported
assert:
that:
- user_test_different_tz is not changed
always:
- name : Restore original timezone - {{ original_timezone.diff.before.name }}
timezone:
name : "{{ original_timezone.diff.before.name }}"
Sam Doran
8 years ago
committed by