Files
@ c2f446ec7e2a
Branch filter:
Location: majic-ansible-roles/roles/bootstrap/molecule/default/tests/test_parameters_mandatory.py - annotation
c2f446ec7e2a
906 B
text/x-python
MAR-158: Update default TLS ciphers configuration in the mail_server role:
- Updated the default value for parameter mail_server_tls_ciphers.
- Updated tests, making them explicitly test for enabled and disabled
ciphers.
- Refactored tests for TLS to use nmap ssl-enum-ciphers script for
listing available TLS versions and ciphers.
- Install nmap as part of preparation step.
- Updated role reference documentation.
- Updated the default value for parameter mail_server_tls_ciphers.
- Updated tests, making them explicitly test for enabled and disabled
ciphers.
- Refactored tests for TLS to use nmap ssl-enum-ciphers script for
listing available TLS versions and ciphers.
- Install nmap as part of preparation step.
- Updated role reference documentation.
0388df2571ca 0388df2571ca 0388df2571ca 0388df2571ca 0388df2571ca 0388df2571ca d62b3adec462 0388df2571ca 0388df2571ca 3c03c2ea9d2a 0388df2571ca 0388df2571ca 0388df2571ca 0388df2571ca 3c03c2ea9d2a 0388df2571ca 360abd191aaf 3c03c2ea9d2a 0388df2571ca 0388df2571ca d752715bb533 0388df2571ca 0388df2571ca 3c03c2ea9d2a 0388df2571ca 0388df2571ca 0388df2571ca 0388df2571ca 3c03c2ea9d2a 0388df2571ca 360abd191aaf 0388df2571ca d752715bb533 | import os
import testinfra.utils.ansible_runner
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('parameters-mandatory')
def test_authorized_keys(host):
"""
Tests if Ansible user authorized_keys has been set-up correctly.
"""
with host.sudo():
ssh_key = open(os.path.expanduser('~/.ssh/id_rsa.pub'), 'r').read().strip()
authorized_keys = host.file('/home/ansible/.ssh/authorized_keys')
assert authorized_keys.is_file
assert ssh_key in authorized_keys.content_string
def test_root_authorized_keys(host):
"""
Tests if Ansible key been removed from root's authorized keys.
"""
with host.sudo():
ssh_key = open(os.path.expanduser('~/.ssh/id_rsa.pub'), 'r').read().strip()
assert ssh_key not in host.file('/root/.ssh/authorized_keys').content_string
|