Files @ 770551dc8c6f
Branch filter:

Location: majic-ansible-roles/roles/ldap_client/molecule/default/tests/test_optional.py - annotation

branko
MAR-148: Improve the SSH connectivity tests in backup_server role to be more reliable:

- Introduce a session-level fixture for setting permissions for client
SSH private keys (fixes errors related to SSH requesting tighter
permissions).
- Add assertions for the tests that verify the backup clients cannot
connect to the regular SSH server in case the SSH private keys do
not have correct permissions (just in case).
import os

import testinfra.utils.ansible_runner


testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
    os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('parameters-optional')


def test_ldap_configuration_file_content(host):
    """
    Tests if LDAP configuration file has correct content
    """

    expected_content = """# CA truststore
TLS_CACERT /etc/ssl/certs/testca.cert.pem
# Ensure TLS is enforced
TLS_REQCERT demand
# Default URI to connect to
URI ldaps://ldap-server/
# Base entry
BASE dc=local
"""

    config = host.file('/etc/ldap/ldap.conf')

    assert config.content == expected_content