|
branko
|
f176b9957d1b
|
2 months ago
|
|
MAR-218: Drop the workaround for running connectivity tests:
- Relevant PR has been long merged into testinfra, and no longer poses an issue.
|
|
branko
|
c10934519e18
|
2 months ago
|
|
MAR-218: Switch to using fully-qualified collection names for all tasks:
- Ensures there is no ambiguity when invoking a module.
|
|
branko
|
7cabc17c71c3
|
2 months ago
|
|
MAR-218: Quote all octal values in YAML files:
- Fixes linting errors, and ensures there is no ambiguity in case of YAML specification changes.
|
|
branko
|
694893c0259a
|
2 months ago
|
|
MAR-218: Fix linting errors for unnamed plays:
- All plays should be named at this point. - Improve naming of some plays. - Group some of the common tasks together to speed-up the prepare step. - Minor refactoring to make the prepare playbooks more consistent across the roles.
|
|
branko
|
750530fa9bb1
|
2 months ago
|
|
MAR-239: Dropped support for Debian 11 Bullseye from the ldap_server role:
- Debian 12 Bookworm and upwards no longer install/configure rsyslog by default, drop the related tests, tasks, and configuration files.
|
|
branko
|
c3861b9a54bb
|
8 months ago
|
|
|
|
branko
|
71be7390aa0f
|
9 months ago
|
|
|
|
branko
|
0bbda2001d43
|
11 months ago
|
|
|
|
branko
|
3a03065f2240
|
11 months ago
|
|
MAR-189: Refactored admin acocunt handling in the ldap_server role: - Get rid of the admin entry from the directory, and resort to using the directory's olcRootDN/olcRootPW attributes instead. Aligns Buster package deployment with Bullseye one, as implemented via fix for the following Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=821331- Add the helper filter plugin to deal with calculating the salted SHA1 checksum. - Drop the architecture from Molecule instance names. - Move the IPs around a tiny bit for Molecule instances.
|
|
branko
|
e081fd2bc85c
|
15 months ago
|
|
MAR-181: Drop support for Debian 9 Stretch from ldap_server role:
- Switch to using IPs from VirtualBox default allowed host-only network subnets. - Drop the workaround for unsupported TLS ciphers on Debian Stretch.
|
|
branko
|
8d272d91d3d2
|
4 years ago
|
|
MAR-165: Deploy Diffie-Helman parameters for LDAP server in the ldap_server role:
- Not relevant for Debian Strech because of a bug in the OpenLDAP version it ships with. - This should allow use of DHE ciphers with LDAP server. - Generated DH parameters only help pick one of the parameters from RFC-7919 (based on the size of generated ones). - Make the cipher test lists distro-specific due to differences between supported algorithms in respective GnuTLS versions.
|
|
branko
|
2f8747288649
|
4 years ago
|
|
MAR-151: Added support for Debian 10 Buster to ldap_server role:
- Updated role reference documentaiton. - Updated role meta information. - Updated tests.
|
|
branko
|
5a36f75bc297
|
4 years ago
|
|
MAR-161: Make the ldap_server_domain parameter in the ldap_server role mandatory:
- Updated the ldap_server role. - Removed default value for the parameter. - Updated tests. - Updated role reference documentation. - Updated release notes. - Dropped the .local from the Molecule instance names.
|
|
branko
|
75bfe558bba9
|
4 years ago
|
|
MAR-158: Refactor ldap_server TLS-related tests to use nmap:
- Updated requirements to include defusedxml for safe parsing of XML reports from nmap. - Install nmap as part of preparation step. - Refactored tests for TLS to use nmap ssl-enum-ciphers script for listing available TLS versions and ciphers.
|
|
branko
|
1b36419c4641
|
4 years ago
|
|
|
|
branko
|
bba096126140
|
4 years ago
|
|
MAR-150: Use fixtures for X.509 artefacts in the ldap_server role:
- Removed the statically generated artefacts. - Generate X.509 artefacts for tests using Gimmecert. - Updated paths to point to generated artefacts. - Introduced cleanup playbook for removing generated artefacts.
|
|
branko
|
cd0056b93cda
|
4 years ago
|
|
|
|
branko
|
e75d5d4fba3b
|
4 years ago
|
|
|
|
branko
|
7d6c3c67caee
|
4 years ago
|
|
|
|
branko
|
f1b75f1d4b5e
|
6 years ago
|
|
MAR-132: Add support for Debian 9 (Stretch) to ldap_server role:
- Updated Molecule tests to cover Debian 9 as well. - Remove the ss utility instead of renaming it when preparing for tests, and make sure the netstat utility is available. - Duplicate private key/certificate for mandatory parameters testing.
|
|
branko
|
65ad7f138939
|
6 years ago
|
|
MAR-132: Parametrise tests in ldap_server role:
- Dynamically obtain inventory hostnames (don't hard-code them). - Parametrise connectivity test, switching to using inventory hostnames along the way (instead of hard-coded IPs in tests. - Populate /etc/hosts with inventory hostnames in client machine (used for connectivity tests).
|
|
branko
|
86aefe445dcc
|
6 years ago
|
|
|
|
branko
|
c082a26b62ff
|
6 years ago
|
|
MAR-129: Updated ldap_server role for new Molecule and Ansible:
- Fixed syntax warnings. - Moved test playbook variables into group_vars. - Optimised the invocation of test playbook. - Remove the 'ss' utility from test machines in order to properly test the unix sockets. - Fixed how the hosts are being referenced in tests.
|
|
branko
|
ec4e3e91c4d3
|
7 years ago
|
|
MAR-128: Upgraded tests for ldap_server role:
- Switch to new Molecule configuration. - Updated set-up playbook to use become: yes. - Moved some preparatory steps outside of the main playbook (eases idempotence tests). - Updated tests to reference the yml inventory file. - Updated tests to use new fixture (host instead of individual ones). - Fixed some linting issues. - Use localhost as backup client server name. This should make it simpler in future to cover more platforms. - Set-up the /etc/hosts for tests with correct entries (primarily aliases towards localhost to make it less important what the hostname is). - Renamed private key/certificate files for parameters-mandatory server since server got renamed as well. - Updated IP addresses used for testing to make it easier to test new platforms in the future. - Use inventory_hostname-based parameterisation of tests where appropriate. Currently hard-coded value for this because host.ansible.get_variables() produces errors.
|