You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible/test/integration/targets/aci_aaa_user_certificate/tasks/main.yml

143 lines
4.3 KiB
YAML

# Test code for the ACI modules
# Copyright: (c) 2017, Dag Wieers (dagwieers) <dag@wieers.com>
#
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
- name: Test that we have an ACI APIC host, ACI username and ACI password
fail:
msg: 'Please define the following variables: aci_hostname, aci_username and aci_password.'
when: aci_hostname is not defined or aci_username is not defined or aci_password is not defined
# CLEAN ENVIRONMENT
- name: Remove any pre-existing certificate
aci_aaa_user_certificate: &cert_absent
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
password: '{{ aci_password }}'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: admin
certificate_name: admin
state: absent
# ADD USER CERTIFICATE
- name: Add user certificate (check_mode)
aci_aaa_user_certificate: &cert_present
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
password: '{{ aci_password }}'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: admin
certificate_name: admin
certificate: "{{ lookup('file', 'pki/admin.crt') }}"
state: present
check_mode: yes
register: cm_add_cert
- name: Add user certificate (normal mode)
aci_aaa_user_certificate: *cert_present
register: nm_add_cert
- name: Add user certificate again (check mode)
aci_aaa_user_certificate: *cert_present
check_mode: yes
register: cm_add_cert_again
- name: Add user certificate again (normal mode)
aci_aaa_user_certificate: *cert_present
register: nm_add_cert_again
- name: Verify add_cert
assert:
that:
- cm_add_cert is changed
- nm_add_cert is change
- cm_add_cert_again is not changed
- nm_add_cert_again is not changed
# QUERY ALL USER CERTIFICATES
- name: Query all user certificates using signature-based authentication (check_mode)
aci_aaa_user_certificate: &cert_query
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
#password: '{{ aci_password }}'
private_key: '{{ role_path }}/pki/admin.key'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: admin
state: query
check_mode: yes
register: cm_query_all_certs
- name: Query all user certificates using signature-based authentication (normal mode)
aci_aaa_user_certificate: *cert_query
register: nm_query_all_certs
- name: Verify query_all_certs
assert:
that:
- cm_query_all_certs is not changed
- nm_query_all_certs is not changed
# NOTE: Order of certs is not stable between calls
#- cm_query_all_certs == nm_query_all_certs
# QUERY OUR USER CERTIFICATE
- name: Query our certificate using signature-based authentication (check_mode)
aci_aaa_user_certificate:
<<: *cert_query
certificate_name: admin
check_mode: yes
register: cm_query_cert
- name: Query our certificate using signature-based authentication (normal mode)
aci_aaa_user_certificate:
<<: *cert_query
certificate_name: admin
register: nm_query_cert
- name: Verify query_cert
assert:
that:
- cm_query_cert is not changed
- nm_query_cert is not changed
- cm_query_cert == nm_query_cert
# REMOVE CERTIFICATE
- name: Remove certificate (check_mode)
aci_aaa_user_certificate: *cert_absent
check_mode: yes
register: cm_remove_cert
- name: Remove certificate (normal mode)
aci_aaa_user_certificate: *cert_absent
register: nm_remove_cert
- name: Remove certificate again (check_mode)
aci_aaa_user_certificate: *cert_absent
check_mode: yes
register: cm_remove_cert_again
- name: Remove certificate again (normal mode)
aci_aaa_user_certificate: *cert_absent
register: nm_remove_cert_again
- name: Verify remove_cert
assert:
that:
- cm_remove_cert is changed
- nm_remove_cert is changed
- cm_remove_cert_again is not changed
- nm_remove_cert_again is not changed