Files @ 2d15529786b7
Branch filter:

Location: majic-ansible-roles/roles/web_server/molecule/default/prepare.yml - annotation

branko
MAR-218: Fix linting errors related to commands doing unconditional changes:

- Tasks run during the prepare stage of test runs do not matter.
- Some of the role tasks are already effectively running only when
change _will_ happen (when it is detected via variable registered by
a previous task).
eee778bc2d7c
eee778bc2d7c
694893c0259a
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
70ed9e45e116
eee778bc2d7c
eee778bc2d7c
694893c0259a
a5f4c1ec6853
eee778bc2d7c
694893c0259a
eee778bc2d7c
e75d5d4fba3b
a5f4c1ec6853
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
a5f4c1ec6853
a5f4c1ec6853
eee778bc2d7c
a8ad1fdf6f60
a8ad1fdf6f60
f7c1f4c841f8
f7c1f4c841f8
f7c1f4c841f8
a8ad1fdf6f60
a8ad1fdf6f60
694893c0259a
694893c0259a
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
ab20d5b216c4
694893c0259a
694893c0259a
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
fc2c40c98e0c
ab20d5b216c4
ab20d5b216c4
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
34dffc4a5ea3
694893c0259a
694893c0259a
a5f4c1ec6853
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
a5f4c1ec6853
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
a5f4c1ec6853
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
70ed9e45e116
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
eee778bc2d7c
2d15529786b7
eee778bc2d7c
2d15529786b7
2d15529786b7
---

- name: Prepare, test fixtures
  hosts: localhost
  connection: local
  gather_facts: false
  tasks:

    - name: Initialise CA hierarchy
      command: "gimmecert init"
      args:
        creates: ".gimmecert/ca/level1.cert.pem"
        chdir: "tests/data/"

    - name: Generate server private keys and certificates
      command:
      args:
        chdir: "tests/data/"
        creates: ".gimmecert/server/{{ item.name }}.cert.pem"
        argv:
          - "gimmecert"
          - "server"
          - "{{ item.name }}"
          - "{{ item.fqdn }}"
      with_items:
        - name: parameters-mandatory-bookworm_https
          fqdn: parameters-mandatory-bookworm
        - name: parameters-optional-bookworm_https
          fqdn: parameters-optional-bookworm

    - name: Set-up link to generated X.509 material
      file:
        src: ".gimmecert"
        dest: "tests/data/x509"
        state: link

- name: Prepare
  hosts: all
  become: true
  gather_facts: false
  tasks:

    - name: Install python for Ansible
      raw: test -e /usr/bin/python3 || (apt -y update && apt install -y python3-minimal)
      changed_when: false

    - name: Update all caches to avoid errors due to missing remote archives
      apt:
        update_cache: true
      changed_when: false

    - name: Install tools for testing
      apt:
        name:
          - gnutls-bin
          - nmap
        state: present

- name: Prepare, test fixtures
  hosts: bookworm
  become: true
  tasks:

    - name: Enable TLSv1.0+ in global OpenSSL configuration file in order to be able to test the web_server_tls_protocols parameter
      blockinfile:
        path: "/etc/ssl/openssl.cnf"
        block: |
          [openssl_init]
          ssl_conf = ssl_sect

          [ssl_sect]
          system_default = system_default_sect

          [system_default_sect]
          MinProtocol = TLSv1.1
          CipherString = DEFAULT@SECLEVEL=0
        owner: root
        group: root
        mode: 0644
        state: present

- name: Prepare, test fixtures
  hosts: all
  become: true
  tasks:

    - name: Set-up the hosts file
      lineinfile:
        path: /etc/hosts
        regexp: "^{{ item.key }}"
        line: "{{ item.key }} {{ item.value }}"
        owner: root
        group: root
        mode: 0644
        state: present
      with_dict:
        192.168.56.11: "client"
        192.168.56.21: "parameters-mandatory-bookworm"
        192.168.56.22: "parameters-optional-bookworm"

    - name: Install curl for testing redirects and webpage content
      apt:
        name: curl
        state: present

- name: Prepare, helpers
  hosts: client
  become: true
  tasks:

    - name: Install tool for testing TCP connectivity
      apt:
        name: hping3
        state: present

    - name: Install console-based web browser for interactive testing
      apt:
        name: lynx
        state: present

    - name: Deploy CA certificate
      copy:
        src: tests/data/x509/ca/level1.cert.pem
        dest: /usr/local/share/ca-certificates/testca.crt
        owner: root
        group: root
        mode: 0644
      notify:
        - Update CA certificate cache

  handlers:

    - name: Update CA certificate cache  # noqa no-changed-when
      command: /usr/sbin/update-ca-certificates --fresh
      # [no-changed-when] Commands should not change things if nothing needs doing
      #   Does not matter in test prepare stage.