mirror of https://github.com/ansible/ansible.git
adds apm module to manage network access components for APM (#59993)
parent
47e3ed8100
commit
7b97abf6a2
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,98 @@
|
|||||||
|
{
|
||||||
|
"kind": "tm:apm:resource:network-access:network-accessstate",
|
||||||
|
"name": "test",
|
||||||
|
"partition": "Common",
|
||||||
|
"fullPath": "/Common/test",
|
||||||
|
"generation": 1140,
|
||||||
|
"selfLink": "https://localhost/mgmt/tm/apm/resource/network-access/~Common~test?ver=12.1.4",
|
||||||
|
"addressSpaceDhcpRequestsExcluded": "true",
|
||||||
|
"addressSpaceExcludeDnsName": [
|
||||||
|
"baz.com",
|
||||||
|
"bazfoo.com"
|
||||||
|
],
|
||||||
|
"addressSpaceIncludeDnsName": [
|
||||||
|
"foo.com",
|
||||||
|
"bar.com"
|
||||||
|
],
|
||||||
|
"addressSpaceLocDnsServersExcluded": "true",
|
||||||
|
"addressSpaceLocalSubnetsExcluded": "true",
|
||||||
|
"addressSpaceProtect": "false",
|
||||||
|
"applicationLaunchWarning": "true",
|
||||||
|
"autoLaunch": "false",
|
||||||
|
"clientInterfaceSpeed": 100000000,
|
||||||
|
"clientIpFilterEngine": "false",
|
||||||
|
"clientPowerManagement": "ignore",
|
||||||
|
"clientProxy": "false",
|
||||||
|
"clientProxyAddress": "any6",
|
||||||
|
"clientProxyEnforceSubnets": "true",
|
||||||
|
"clientProxyIgnoreAutoConfigError": "false",
|
||||||
|
"clientProxyLocalBypass": "false",
|
||||||
|
"clientProxyPort": 0,
|
||||||
|
"clientProxyUseHttpPac": "false",
|
||||||
|
"clientProxyUseLocalProxy": "false",
|
||||||
|
"clientTrayIcon": "true",
|
||||||
|
"compression": "none",
|
||||||
|
"customizationGroup": "/Common/test_resource_network_access_customization",
|
||||||
|
"customizationGroupReference": {
|
||||||
|
"link": "https://localhost/mgmt/tm/apm/policy/customization-group/~Common~test_resource_network_access_customization?ver=12.1.4"
|
||||||
|
},
|
||||||
|
"dnsEnforceSearchOrder": "true",
|
||||||
|
"dnsPrimary": "any6",
|
||||||
|
"dnsRegisterConnection": "false",
|
||||||
|
"dnsSecondary": "any6",
|
||||||
|
"dnsUseDnsSuffixForRegistration": "false",
|
||||||
|
"dtls": "false",
|
||||||
|
"dtlsPort": 4433,
|
||||||
|
"executeLogoffScripts": "false",
|
||||||
|
"idleTimeoutThreshold": 0,
|
||||||
|
"idleTimeoutWindow": 0,
|
||||||
|
"ipv6DnsPrimary": "any6",
|
||||||
|
"ipv6DnsSecondary": "any6",
|
||||||
|
"ipv6LeasepoolName": "/Common/ipv6lease",
|
||||||
|
"ipv6LeasepoolNameReference": {
|
||||||
|
"link": "https://localhost/mgmt/tm/apm/resource/ipv6-leasepool/~Common~ipv6lease?ver=12.1.4"
|
||||||
|
},
|
||||||
|
"leasepoolName": "/Common/ipv4lease",
|
||||||
|
"leasepoolNameReference": {
|
||||||
|
"link": "https://localhost/mgmt/tm/apm/resource/leasepool/~Common~ipv4lease?ver=12.1.4"
|
||||||
|
},
|
||||||
|
"locationSpecific": "true",
|
||||||
|
"microsoftNetworkClient": "true",
|
||||||
|
"microsoftNetworkServer": "false",
|
||||||
|
"networkTunnel": "enabled",
|
||||||
|
"preserveSourcePortStrict": "none",
|
||||||
|
"provideClientCert": "true",
|
||||||
|
"proxyArp": "false",
|
||||||
|
"snat": "automap",
|
||||||
|
"splitTunneling": "true",
|
||||||
|
"supportedIpVersion": "ipv4-ipv6",
|
||||||
|
"syncWithActiveDirectory": "false",
|
||||||
|
"type": "network-access",
|
||||||
|
"winsPrimary": "any6",
|
||||||
|
"winsSecondary": "any6",
|
||||||
|
"addressSpaceExcludeSubnet": [
|
||||||
|
{
|
||||||
|
"subnet": "192.168.1.0/24"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"subnet": "192.168.2.1/32"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"addressSpaceIncludeSubnet": [
|
||||||
|
{
|
||||||
|
"subnet": "10.10.10.1/32"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"subnet": "10.11.11.0/24"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"ipv6AddressSpaceIncludeSubnet": [
|
||||||
|
{
|
||||||
|
"subnet": "2607:f0d0:1002:51::4/128"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"optimizedAppReference": {
|
||||||
|
"link": "https://localhost/mgmt/tm/apm/resource/network-access/~Common~test/optimized-app?ver=12.1.4",
|
||||||
|
"isSubcollection": true
|
||||||
|
}
|
||||||
|
}
|
@ -0,0 +1,211 @@
|
|||||||
|
# -*- coding: utf-8 -*-
|
||||||
|
#
|
||||||
|
# Copyright: (c) 2019, F5 Networks Inc.
|
||||||
|
# GNU General Public License v3.0 (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
||||||
|
|
||||||
|
from __future__ import (absolute_import, division, print_function)
|
||||||
|
__metaclass__ = type
|
||||||
|
|
||||||
|
import os
|
||||||
|
import json
|
||||||
|
import pytest
|
||||||
|
import sys
|
||||||
|
|
||||||
|
if sys.version_info < (2, 7):
|
||||||
|
pytestmark = pytest.mark.skip("F5 Ansible modules require Python >= 2.7")
|
||||||
|
|
||||||
|
from ansible.module_utils.basic import AnsibleModule
|
||||||
|
|
||||||
|
try:
|
||||||
|
from library.modules.bigip_apm_network_access import ApiParameters
|
||||||
|
from library.modules.bigip_apm_network_access import ModuleParameters
|
||||||
|
from library.modules.bigip_apm_network_access import ModuleManager
|
||||||
|
from library.modules.bigip_apm_network_access import ArgumentSpec
|
||||||
|
|
||||||
|
# In Ansible 2.8, Ansible changed import paths.
|
||||||
|
from test.units.compat import unittest
|
||||||
|
from test.units.compat.mock import Mock
|
||||||
|
from test.units.compat.mock import patch
|
||||||
|
|
||||||
|
from test.units.modules.utils import set_module_args
|
||||||
|
except ImportError:
|
||||||
|
from ansible.modules.network.f5.bigip_apm_network_access import ApiParameters
|
||||||
|
from ansible.modules.network.f5.bigip_apm_network_access import ModuleParameters
|
||||||
|
from ansible.modules.network.f5.bigip_apm_network_access import ModuleManager
|
||||||
|
from ansible.modules.network.f5.bigip_apm_network_access import ArgumentSpec
|
||||||
|
|
||||||
|
# Ansible 2.8 imports
|
||||||
|
from units.compat import unittest
|
||||||
|
from units.compat.mock import Mock
|
||||||
|
from units.compat.mock import patch
|
||||||
|
|
||||||
|
from units.modules.utils import set_module_args
|
||||||
|
|
||||||
|
|
||||||
|
fixture_path = os.path.join(os.path.dirname(__file__), 'fixtures')
|
||||||
|
fixture_data = {}
|
||||||
|
|
||||||
|
|
||||||
|
def load_fixture(name):
|
||||||
|
path = os.path.join(fixture_path, name)
|
||||||
|
|
||||||
|
if path in fixture_data:
|
||||||
|
return fixture_data[path]
|
||||||
|
|
||||||
|
with open(path) as f:
|
||||||
|
data = f.read()
|
||||||
|
|
||||||
|
try:
|
||||||
|
data = json.loads(data)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
|
||||||
|
fixture_data[path] = data
|
||||||
|
return data
|
||||||
|
|
||||||
|
|
||||||
|
class TestParameters(unittest.TestCase):
|
||||||
|
def test_module_parameters(self):
|
||||||
|
args = dict(
|
||||||
|
name='foo',
|
||||||
|
ip_version='ipv4',
|
||||||
|
split_tunnel=True,
|
||||||
|
description='foobar',
|
||||||
|
allow_local_subnet=True,
|
||||||
|
allow_local_dns=True,
|
||||||
|
snat_pool='foo_pool',
|
||||||
|
dtls=True,
|
||||||
|
dtls_port=4443,
|
||||||
|
ipv4_lease_pool='ipv4lease',
|
||||||
|
excluded_ipv4_adresses=[dict(subnet='10.10.10.1')],
|
||||||
|
ipv4_address_space=[dict(subnet='192.168.1.0/24')],
|
||||||
|
dns_address_space=['foobar.com'],
|
||||||
|
excluded_dns_addresses=['bar-foo.org']
|
||||||
|
)
|
||||||
|
|
||||||
|
p = ModuleParameters(params=args)
|
||||||
|
assert p.name == 'foo'
|
||||||
|
assert p.ip_version == 'ipv4'
|
||||||
|
assert p.split_tunnel == 'true'
|
||||||
|
assert p.allow_local_subnet == 'true'
|
||||||
|
assert p.allow_local_dns == 'true'
|
||||||
|
assert p.snat_pool == '/Common/foo_pool'
|
||||||
|
assert p.description == 'foobar'
|
||||||
|
assert p.dtls == 'true'
|
||||||
|
assert p.dtls_port == 4443
|
||||||
|
assert p.ipv4_lease_pool == '/Common/ipv4lease'
|
||||||
|
assert p.excluded_ipv4_adresses == [dict(subnet='10.10.10.1/32')]
|
||||||
|
assert p.ipv4_address_space == [dict(subnet='192.168.1.0/24')]
|
||||||
|
assert p.dns_address_space == ['foobar.com']
|
||||||
|
assert p.excluded_dns_addresses == ['bar-foo.org']
|
||||||
|
|
||||||
|
def test_api_parameters(self):
|
||||||
|
args = load_fixture('load_apm_network_access.json')
|
||||||
|
|
||||||
|
p = ApiParameters(params=args)
|
||||||
|
assert p.name == 'test'
|
||||||
|
assert p.ip_version == 'ipv4-ipv6'
|
||||||
|
assert p.split_tunnel == 'true'
|
||||||
|
assert p.allow_local_subnet == 'true'
|
||||||
|
assert p.allow_local_dns == 'true'
|
||||||
|
assert p.snat_pool == 'automap'
|
||||||
|
assert p.dtls == 'false'
|
||||||
|
assert p.dtls_port == 4433
|
||||||
|
assert p.ipv4_lease_pool == '/Common/ipv4lease'
|
||||||
|
assert p.excluded_ipv4_adresses == [
|
||||||
|
dict(subnet='192.168.1.0/24'),
|
||||||
|
dict(subnet='192.168.2.1/32')
|
||||||
|
]
|
||||||
|
assert p.ipv4_address_space == [
|
||||||
|
dict(subnet='10.10.10.1/32'),
|
||||||
|
dict(subnet='10.11.11.0/24')
|
||||||
|
]
|
||||||
|
assert p.dns_address_space == ['foo.com', 'bar.com']
|
||||||
|
assert p.excluded_dns_addresses == ['baz.com', 'bazfoo.com']
|
||||||
|
assert p.ipv6_address_space == [dict(subnet="2607:f0d0:1002:51::4/128")]
|
||||||
|
|
||||||
|
|
||||||
|
class TestManager(unittest.TestCase):
|
||||||
|
def setUp(self):
|
||||||
|
self.spec = ArgumentSpec()
|
||||||
|
|
||||||
|
def test_create_ipv4_net_access(self, *args):
|
||||||
|
set_module_args(dict(
|
||||||
|
name='foo',
|
||||||
|
ip_version='ipv4',
|
||||||
|
split_tunnel=True,
|
||||||
|
description='foobar',
|
||||||
|
allow_local_subnet=True,
|
||||||
|
allow_local_dns=True,
|
||||||
|
snat_pool='foo_pool',
|
||||||
|
dtls=True,
|
||||||
|
dtls_port=4443,
|
||||||
|
ipv4_lease_pool='ipv4lease',
|
||||||
|
excluded_ipv4_adresses=[dict(subnet='10.10.10.1')],
|
||||||
|
ipv4_address_space=[dict(subnet='192.168.1.0/24')],
|
||||||
|
dns_address_space=['foobar.com'],
|
||||||
|
excluded_dns_addresses=['bar-foo.org'],
|
||||||
|
provider=dict(
|
||||||
|
server='localhost',
|
||||||
|
password='password',
|
||||||
|
user='admin'
|
||||||
|
)
|
||||||
|
))
|
||||||
|
|
||||||
|
module = AnsibleModule(
|
||||||
|
argument_spec=self.spec.argument_spec,
|
||||||
|
supports_check_mode=self.spec.supports_check_mode,
|
||||||
|
)
|
||||||
|
|
||||||
|
# Override methods in the specific type of manager
|
||||||
|
mm = ModuleManager(module=module)
|
||||||
|
mm.exists = Mock(return_value=False)
|
||||||
|
mm.create_on_device = Mock(return_value=True)
|
||||||
|
|
||||||
|
results = mm.exec_module()
|
||||||
|
|
||||||
|
assert results['changed'] is True
|
||||||
|
assert results['ip_version'] == 'ipv4'
|
||||||
|
assert results['split_tunnel'] == 'yes'
|
||||||
|
assert results['allow_local_subnet'] == 'yes'
|
||||||
|
assert results['allow_local_dns'] == 'yes'
|
||||||
|
assert results['snat_pool'] == '/Common/foo_pool'
|
||||||
|
assert results['description'] == 'foobar'
|
||||||
|
assert results['dtls'] == 'yes'
|
||||||
|
assert results['dtls_port'] == 4443
|
||||||
|
assert results['ipv4_lease_pool'] == '/Common/ipv4lease'
|
||||||
|
assert results['excluded_ipv4_adresses'] == [dict(subnet='10.10.10.1')]
|
||||||
|
assert results['ipv4_address_space'] == [dict(subnet='192.168.1.0/24')]
|
||||||
|
assert results['dns_address_space'] == ['foobar.com']
|
||||||
|
assert results['excluded_dns_addresses'] == ['bar-foo.org']
|
||||||
|
|
||||||
|
def test_update_ipv4_net_access(self, *args):
|
||||||
|
set_module_args(dict(
|
||||||
|
name='test',
|
||||||
|
excluded_ipv4_adresses=[dict(subnet='10.10.10.1')],
|
||||||
|
ipv4_address_space=[dict(subnet='192.168.1.0/24')],
|
||||||
|
provider=dict(
|
||||||
|
server='localhost',
|
||||||
|
password='password',
|
||||||
|
user='admin'
|
||||||
|
)
|
||||||
|
))
|
||||||
|
|
||||||
|
current = ApiParameters(params=load_fixture('load_apm_network_access.json'))
|
||||||
|
|
||||||
|
module = AnsibleModule(
|
||||||
|
argument_spec=self.spec.argument_spec,
|
||||||
|
supports_check_mode=self.spec.supports_check_mode,
|
||||||
|
)
|
||||||
|
|
||||||
|
# Override methods in the specific type of manager
|
||||||
|
mm = ModuleManager(module=module)
|
||||||
|
mm.exists = Mock(return_value=True)
|
||||||
|
mm.update_on_device = Mock(return_value=True)
|
||||||
|
mm.read_current_from_device = Mock(return_value=current)
|
||||||
|
|
||||||
|
results = mm.exec_module()
|
||||||
|
|
||||||
|
assert results['changed'] is True
|
||||||
|
assert results['excluded_ipv4_adresses'] == [dict(subnet='10.10.10.1')]
|
||||||
|
assert results['ipv4_address_space'] == [dict(subnet='192.168.1.0/24')]
|
Loading…
Reference in New Issue