# Test code for the vmware_local_role_manager module
# Copyright: (c) 2017-2018, Abhijeet Kasurde <akasurde@redhat.com>
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)

- name: store the vcenter container ip
  set_fact:
    vcsim: "{{ lookup('env', 'vcenter_host') }}"
- debug: var=vcsim

- name: Wait for Flask controller to come up online
  wait_for:
    host: "{{ vcsim }}"
    port: 5000
    state: started

- name: kill vcsim
  uri:
    url: http://{{ vcsim }}:5000/killall

- name: start vcsim
  uri:
    url: http://{{ vcsim }}:5000/spawn?esx=1
  register: vcsim_instance

- name: Wait for Flask controller to come up online
  wait_for:
    host: "{{ vcsim }}"
    port: 443
    state: started

- debug: var=vcsim_instance

- name: Create a role without privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    state: present
  register: role_creation_0001

- name: Verify if role is created
  assert:
    that:
      - "{{ role_creation_0001.changed == true }}"
      - "{{ role_creation_0001.role_id is defined }}"
      - "{{ role_creation_0001.local_role_name is defined }}"

- name: Again create a role without privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    state: present
  register: role_creation_0001

- name: verify if role is not created again
  assert:
    that:
      - "{{ role_creation_0001.changed == false }}"

- name: Delete a role
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    state: absent
  register: role_creation_0001

- name: Verify if role is not present
  assert:
    that:
      - "{{ role_creation_0001.changed == true }}"

- name: Delete role again
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    state: absent
  register: role_creation_0001

- name: Verify if role is absent again
  assert:
    that:
      - "{{ role_creation_0001.changed == false }}"

- name: Create a role with privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['VirtualMachine.State.RenameSnapshot']
    state: present
  register: role_creation_0001

- name: Verify if role is created with privileges
  assert:
    that:
      - "{{ role_creation_0001.changed == true }}"
      - "{{ role_creation_0001.role_id is defined }}"

- name: Add a privilege to existing privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['Folder.Create']
    action: add
    state: present
  register: role_creation_0001

- name: Verify if role is updated with updated privileges
  assert:
    that:
      - "{{ role_creation_0001.changed == true }}"
      - "{{ role_creation_0001.role_id is defined }}"
      - "{{ role_creation_0001.old_privileges is defined }}"
      - "{{ role_creation_0001.new_privileges is defined }}"

- name: Again add a privilege to existing privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['Folder.Create']
    action: add
    state: present
  register: role_creation_0001

- name: Verify if role is not updated
  assert:
    that:
      - "{{ role_creation_0001.changed == false }}"
      - "{{ role_creation_0001.role_id is defined }}"
      - "{{ role_creation_0001.old_privileges is defined }}"
      - "{{ role_creation_0001.new_privileges is defined }}"

- name: Remove a privilege from existing privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['Folder.Create']
    action: remove
  register: role_creation_0001

- name: verify if role is updated with privileges
  assert:
    that:
      - "{{ role_creation_0001.changed == true }}"
      - "{{ role_creation_0001.role_id is defined }}"
      - "{{ role_creation_0001.old_privileges is defined }}"
      - "{{ role_creation_0001.new_privileges is defined }}"
      - "{{ 'Folder.Create' not in role_creation_0001.new_privileges }}"

- name: Again remove a privilege from existing privileges
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['Folder.Create']
    action: remove
  register: role_creation_0001

- name: Verify if role is not updated
  assert:
    that:
      - "{{ role_creation_0001.changed == false }}"
      - "{{ role_creation_0001.role_id is defined }}"
      - "{{ role_creation_0001.old_privileges is defined }}"
      - "{{ role_creation_0001.new_privileges is defined }}"
      - "{{ 'Folder.Create' not in role_creation_0001.new_privileges }}"
      - "{{ 'Folder.Create' not in role_creation_0001.old_privileges }}"

- name: Set a privilege to an existing role
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['Folder.Create']
    action: set
  register: role_creation_0001

- name: Verify if role is updated with privileges
  assert:
    that:
      - "{{ role_creation_0001.changed == true }}"
      - "{{ role_creation_0001.role_id is defined }}"
      - "{{ role_creation_0001.old_privileges is defined }}"
      - "{{ role_creation_0001.new_privileges is defined }}"
      - "{{ 'Folder.Create' in role_creation_0001.new_privileges }}"
      - "{{ 'System.Anonymous' in role_creation_0001.new_privileges }}"
      - "{{ 'System.Read' in role_creation_0001.new_privileges }}"
      - "{{ 'System.View' in role_creation_0001.new_privileges }}"
      - "{{ 'System.Anonymous' in role_creation_0001.old_privileges }}"
      - "{{ 'System.Read' in role_creation_0001.old_privileges }}"
      - "{{ 'System.View' in role_creation_0001.old_privileges }}"

- name: Again set a privilege to an existing role
  vmware_local_role_manager:
    hostname: "{{ vcsim }}"
    username: "{{ vcsim_instance['json']['username'] }}"
    password: "{{ vcsim_instance['json']['password'] }}"
    local_role_name: SampleRole_0001
    validate_certs: no
    local_privilege_ids: ['Folder.Create']
    action: set
  register: role_creation_0001

- name: verify if role is not updated
  assert:
    that:
      - "{{ role_creation_0001.changed == false }}"
      - "{{ 'Folder.Create' in role_creation_0001.new_privileges }}"
      - "{{ 'System.Anonymous' in role_creation_0001.new_privileges }}"
      - "{{ 'System.Read' in role_creation_0001.new_privileges }}"
      - "{{ 'System.View' in role_creation_0001.new_privileges }}"
      - "{{ 'Folder.Create' in role_creation_0001.old_privileges }}"
      - "{{ 'System.Anonymous' in role_creation_0001.old_privileges }}"
      - "{{ 'System.Read' in role_creation_0001.old_privileges }}"
      - "{{ 'System.View' in role_creation_0001.old_privileges }}"