MAR-129: Updated Molecule to version 2.12.0:

- Updated Molecule to version 2.12.0, alongside its requirements.
- Fixed tests for preseed role to account for new paths on destination
servers (change in Molecule).
- Updated wsgi_website test for pacakges installed in Python virtual
environment.

MAR-129: Minor preparation for updating Ansible version:

- Ignore the pytest_cache directory in Git.
- Updated Ansible to latest 2.3.x version in requirements file.
- Make sure the SSH client private keys have correct permissions when
testing the backup_server role (must be 0600), otherwise we get
errors from SSH due to insecure permissions during testing.
- Updated test for testing installed packages in the wsgi_website
Python virtual environment to test against up-to-date
packages. Might be nice to fix this one with something less hacky in
the long run.

MAR-128: Updated script for running tests and documentation:

- Updated script, removing parts related to separate platform testing
from old version of Molecule.
- Updated instructions for running the test script.

MAR-128: Upgraded tests for xmpp_server role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Renamed hosts to include the Debian version.
- Updated names for some of the test data to cater to change in host
names.
- Switched to using more robust task for populating /etc/hosts.

MAR-128: Upgraded tests for ROLE_NAME role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Fixed some linting issues.
- Updated one of the tests that depend on output of pip freeze due to
new versions of packages coming out.
- Updated hostname to include Debian version (for future expansion).
- Renamded some test data to match new hostname.

MAR-128: Upgraded tests for ROLE_NAME role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Renamed hosts instances to include Debian version in their
hostnames.
- Fixed some linting issues.

MAR-128: Upgraded tests for preseed role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Introduced additional hosts for testing on different Debian
versions.

MAR-128: Upgraded tests for php_website role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Fixed some linting issues.
- Updated hostname to include Debian version.

MAR-128: Upgraded tests for mail_server role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Fixed some linting issues.
- Renamed the hosts to make it easier to extend in future.
- Renamed some data files to ensure they correspond correctly to new
hostnames.
- Rewrote logic behind setting-up the /etc/hosts a bit, and expanded
the names to include the new hostnames.
- Updated a couple of tests to correspond to correct filenames (that
have been renamed).
- Updated a couple of tests to address the new server naming.
- Set explicitly the backup client username to avoid 32-charactr
limitation on Linux usernames.

MAR-128: Upgraded tests for mail_forwarder role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Fixed some linting issues.
- Rearranged IP addresses for test instances a bit.
- Expanded on available hosts for testing all OS/paramter
combinations.
- Switched to using a more resilient way to populate /etc/hosts during
prepartion phase.
- Expanded connectivity tests to include all the introduced hosts.

MAR-128: Upgraded tests for ldap_server role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Fixed some linting issues.
- Use localhost as backup client server name. This should make it
simpler in future to cover more platforms.
- Set-up the /etc/hosts for tests with correct entries (primarily
aliases towards localhost to make it less important what the
hostname is).
- Renamed private key/certificate files for parameters-mandatory
server since server got renamed as well.
- Updated IP addresses used for testing to make it easier to test new
platforms in the future.
- Use inventory_hostname-based parameterisation of tests where
appropriate. Currently hard-coded value for this because
host.ansible.get_variables() produces errors.

MAR-128: Upgraded tests for ROLE_NAME role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).

MAR-128: Upgraded tests for bootstrap role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Fixed some linting issues.

MAR-128: Upgraded tests for database role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Updated backup_server and backup_client configuration in order to
make the backup testing more generic (and easier to update for
future).

MAR-128: Upgraded tests for database_server role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).

MAR-128: Upgraded tests for ROLE_NAME role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).

MAR-128: Upgraded tests for backup_client role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Updated backup server SSH deployment to have chroot the users for a
bit easier set-up, and updated relevants playbooks/tests for this
purpose.

MAR-128: Fixed test for login mechanisms on backup_server role:

- Moved test back into test_default.py to be run against all servers.
- Switch to using local ssh command that would reveal available
mechanisms instead of using paramiko from the test host.

MAR-128: Upgraded tests for backup_server role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting IP address instead of hard-coding it in a
couple of tests.
- Moved test for checking available authentication mechanisms for
backup SSH server to be part of testing of parameters_optional only
for now (it was hard coded to that IP, and fails on
parameters-mandatory due to iptables not opening correct ports).

MAR-128: Upgraded tests for common role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (easies
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting IP address instead of hard-coding it in a
couple of tests.
- Fixed invalid indentation on task responsible for creating the
pipreqcheck Python virtual environment.

MAR-128: Starting to move towards Molecule 2.x:

- Updated requirements and its input file, primarily for use of
Molecule 2.4.x.
- Updated gitignore to exclude some additional artefacts produced by
Molecule 2.x.

MAR-127: Updated documentation and testsite configuration for NTP:

- Updated role reference documentation for common role to list the new
functionality and documented the new parameter.
- Updated usage instructions to mention NTP time synchronisation
configuration.
- Updated testsite configuration to set-up the NTP time
synchronisation.

MAR-127: Implemented time synchronisation set-up in common role:

- Added new parameter ntp_servers for defining list of servers to use.
- Deploy ntp and ntpdate packages and relevant configuration files.
- Updated tests, fixing expected restriction lines in ntp
configuration, and adding an additional test to make sure the ntp
daemon has reread its configuration.

MAR-127: Added tests for time synchronisation (NTP) implementation:

- Updated test playbook.
- Added tests related to time synchronisation.

MAR-125: Updated usage instructions:

- Point to specific Debian release instructions for preseed file usage.
- Use python-pexpect for installing The Bug Genie.
- Added instructions for creating the handlers directory for wiki sample role.

MAR-125: Eliminated a couple of warnings:

- Use the file module when cleaning-up the /etc/duply/main/gnupg directory.
- Mark the bind_password in m_ldap_entry and m_ldap_permissions as no_log
parameters.

MAR-125: Switching to Ansible 2.3.x:

- Updated documentation to reference only Ansible 2.3.x, removing mentions of
Ansible 1.9.x, and removing comments related to delayed switch to Ansible 2.x.
- Updated usage instructions to use Ansible 2.3.x.
- Updated pip requirements and its input file to use up-to-date versions of
Ansible and Molecule.
- Updated test site Ansible configuration to use pipelining.
- Fixed missing brackets in test site tls.yml playbook for "with_items.

MAR-122: Fixed handling of complex package versions for pip with Ansible 2.x:

- Use list for installing specific version of pip in the "pipreqcheck" virtual
environment in common role.
- Removed superficious (and incorrect) definition for application admin username
in wsgi_website role.
- Updated test playbook for wsgi_website role to test the fix.
- Switched to passing-in package list for installing packages in virtual
environment instead of using "with_items" in wsgi_website role.

MAR-118: Replaced handler with parametrised name in wsgi_website:

- Updated wsgi_website role.
- Replaced handler with parametrised name used for restarting a single service
with a generic handler that will restart zero or more services.
- Updated test site roles to introduce explicit handler in them.
- Updated usage instructions to include set-up of explicit handler for
restarting the Wiki service.

MAR-117: Renamed ldap_entry and ldap_permissions modules:

- Renamed ldap_entry module to m_ldap_entry.
- Renamed ldap_permissions module to m_ldap_permissions.
- Renames done to avoid collisions with official modules (at least for
ldap_entry).

MAR-114: Updated task syntax for bootstrap, preseed and xmpp roles:

- Updated web_server, php_website, and wsgi_website roles.
- Added and removed quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).
- Updated ordering of arguments in task definitions.

MAR-114: Updated task syntax for web server/application roles:

- Updated web_server, php_website, and wsgi_website roles.
- Added and removed quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).
- Updated ordering of arguments in task definitions.

MAR-114: Updated task syntax for mail roles:

- Updated mail_server and mail_forwarder roles.
- Added and removed quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).
- Updated ordering of arguments in task definitions.

MAR-114: Updated task syntax for ldap roles:

- Updated ldap_client and ldap_server roles.
- Added and removed quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).

MAR-114: Updated task syntax for database roles:

- Updated database and database_server roles.
- Added and removed quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).

MAR-114: Updated task syntax for backup roles:

- Updated backup, backup_client, and backup_server.
- Added and removed quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).
- Updated ordering of arguments in task definitions.

MAR-114: Updated task syntax for the common role:

- Added quoting where it makes sense.
- Switched to using expanded syntax (instead of one-liners).
- Updated ordering of arguments in task definitions.

MAR-114: Moved set_fact for wsgi_website and php_website roles:

- Moved set_fact for setting application admin, user, and home directory into
defaults/main.yml.
- Updated test playbook for wsgi_website to fixate the ptpython and dnspython
versions (including their dependencies).
- Updated tests for wsgi_website to use new fixated versions for ptpython,
dnspython, and their dependencies.

MAR-113: Added option for specifying relay port to mail_forwarder:

- Introduced new option "smtp_relay_host_port".
- Updated the test playbook and tests to make sure new functionality works as
expected.
- Update role reference documentation.
- Updated usage instructions.

MAR-112: Added alternate SMTP port:

- Updated mail_server role to deploy firewall rules that include redirection
from TCP port 27 to TCP port 25.
- Updated documentation to include references to the additional port.
- Updated tests to cover the new functionality.

MAR-105: Added parameter for controlling firewall to mail_forwarder:

- Added new parameter smtp_from_relay_allowed.
- Updated role reference documentation.
- Added small note to usage instructions to mention the parameter's usability in
case of NAT'ed machines or laptops.
- Updated test playbook, adding another instance for testing the parameter, and
added tests that cover new parameter.
- Updated existing connectivity tests to be more specific and reliable.

MAR-110: Implemented script for running tests for all roles:

- Updated gitignore file to ignore test reports.
- Updated instructions for running tests.
- Added Bash script that wraps around Molecule and allows output of reports into
a directory.

MAR-33: Implemented tests for the wsgi_website role:

- Updated test playbook to have better coverage of functionality.
- Fixed some additional permission mode issues (leading zero).
- Use expanded syntax for deploying TLS material in order to avoid mangling of
TABs.
- Implemented proper WSGI applications in order to test everything.
- Implemented tests covering mandatory parameters, optional parameters, and the
use of WSGI requirements/Paster.

MAR-33: Added initial scaffolding for wsgi_website tests:

- Added Molecule configuration file.
- Implemented test playbook that sets-up three separate instances of WSGI
website in order to test all variations of parameters.
- Added name for the set_fact task.
- Fixed linting errors related to mode that lacks leading zero.
- Added skip_ansible_lint tag for command that creates the Python virtual
environment.
- Added missing become keyword wherever become_user is specified.
- Fixed invalid parameter name for specifying if HTTPS should be enforced or
not.
- Added small initial sample WSGI apps that get deployed.
- Added static/media sample files.
- Added TLS material.
- Added initial dummy test file.

MAR-29: Small fix for php_website role tests:

- Sleep for 5 seconds when testing mail sending (aliases), so the mail can get
delivered.

MAR-29: Implemented tests for php_website role:

- Install some additional tools for testing everything.
- Updated test playbook to change allowed extensions for running PHP scripts on
parameters-optional.
- Updated error page to use correct extension for parameters-optional test
instance.
- Expanded rewrite configuration slightly for parameters-optional.
- Install libmariadb-client-lgpl-dev-compat to test mysql_config symlink
creation.
- Deploy a number of PHP pages used for testing if pages are served correctly.
- Set file permissions on deployed PHP FPM pool configuraiton files.
- Use expanded syntax when deploying TLS keys/certificates in order to avoid
issues with TAB mangling.
- Fixed set-up of Strict-Transport-Security header when HTTPS enforcement is
disabled.
- Added a number of PHP and static test pages.
- Wrote tests covering full functionality of the role.

MAR-29: Added scaffolding for testing the php_website role:

- Added molecule configuration with a single instance.
- Added playbook that sets-up the test instances.
- Fixed issues related to incorrect mode syntax when deploying files (missing
leading zero).
- Added test data.
- Added dummy tests.

MAR-32: Implemented tests for web_server role:

- Updated test playbook to deploy some additional test tools.
- Use expanded syntax for deploying TLS keys and certificates in order to
preserve tabs.
- Added a number of tests that should cover full functionality of the server.

MAR-32: Added initial scaffolding for testing web_server role:

- Added Molecule configuration for for bringing up a couple of instances.
- Added test playbook that sets-up test instances.
- Fixed issues with file mode in tasks (added leading 0).
- Added test data (TLS private keys and certificates).
- Added dummy test file.

MAR-31: Implemented tests and small fixes for xmpp_server role:

- Updated test playbook to deploy simple XMPP non-interactive tool.
- Updated test playbook to include an additional administrator for server
hosting domain2 and domain3.
- Updated test playbook to enable backup on parameters-optional test instance.
- Use expanded syntax for deploying TLS key and certificate in order to prevent
mangling of tab characters.
- Set permissions on deployed Prosody configuration file in order to prevent
LDAP password from being world-readable.
- Implemented tests for backup functionality.
- Implemented tests for client connectivity.
- Implemented a number of tests that ensure XMPP server is deployed correctly.
- Full functionality cannot be tested (like MUC and file proxy) due to partial
lack of CLI-based tools.

MAR-31: Added scaffolding for testing xmpp_server role:

- Fixed wrong default for xmpp_domains parameter (should be a list).
- Added Molecule configuration file with LDAP server, client, and two XMPP
server instances.
- Added test playbook that sets-up all servers.
- Fixed mode syntax issues (use lead zero).
- Added data required for testing.
- Added dummy file with tests.

MAR-27: Update mail_forwarder role/tests:

- Install swaks on mail-server instance for testing SMTP.
- Install procmail via mail_forwarder role (needed to be explicit for Debian
Stretch).
- Introduce small sleep when mails are sent to localhost for delivery to remote
hosts before checking the logs in order to allow Postfix to process the
queue.

MAR-27: Implemented tests for mail_forwarder role:

- Install hping3 (for testing connectivity) on mail-server test machine.
- Changed syntax used for deploying the SMTP relay truststore in order to ensure
that tabs are preserved.
- Implemented tests for the mail_fotwarder role.
- Updated tests for mail_server role to check for new setting
added (smtp_host_lookup).

MAR-27: Added initial scaffolding for testing mail_forwarder role:

- Fixed issues reported by Ansible linting check (some mode-related syntax and
one ignore.
- Added Molecule configuration for testing mandatory and optional
parameters. Covers both Debian Jessie and Debian Stretch.
- Added test playbook for setting-up the test instances. A helper relay mail
server.
- Updated both mail_server and mail_forwarder to fall-back to using
native (/etc/hosts) resolving if DNS fails. Solves issue with test environment
not having proper DNS set-up for all domains etc.
- Added a number of data/config files associated with tests.
- Added dummy test file.

MAR-28: Implemented backup tests for mail_server role:

- Reworked slightly how /etc/hosts is set-up to allow for multiple names to be
associated with the same IP in test playbook.
- Updated LDAP server to behave as backup server as well.
- Enabled backups on server used for testing optional parameters.
- Implemented backup tests.
- Added necessary test data for backups (keys etc).

MAR-28: Minor fixes for mail_server tests:

- Take into account different extension for ClamAV database (cvd or cld) that
could happen in cases where the test VM has been running for a long time.
- Before checking Dovecot directory permissions, make sure to send out at least
two mails so the directory structure will get created.
- Fixed incorrect directory path for testing Dovecot directory permissions.

MAR-28: Implemented additional tests for mail_server role:

- Deploy a number of tools on clients in order to test SMTP, IMAP, and Sieve
services.
- Added one more user to LDAP directory for testing group restrictions.
- Deploy CA certificate on all testing machines for TLS validation purposes.
- Use different custom-configured cipher for mail server ciphers.
- Fixed invalid postmaster address for parameters-optional host.
- Deploy configuration files for use with Imap-CLI on client test machines.
- Updated testing of SMTP server to include checks for users that do not belong
to mail group.
- Extended some SMTP-related tests to cover both test servers.
- Some small fixes in SMTP-related tests for expected output from commands.
- Implemented tests covering Dovecot (IMAP + Sieve) functionality.
- Implemented tests for running/enabled services.
- Implemented tests for ClamAV.
- Implemented tests for firewall and connectivity.
- Implemented tests for Postfix TLS configuration.
- TODO: Tests for Sieve TLS configuration have not been written yet due to
limitation of available tools.

MAR-28: Impelmented general and SMTP-related tests for mail_server:

- Increased amount of memory in test instances to 768MB.
- Fixed playbook for runs against client test instances.
- Fixed typos and invalid settings in test playbook.
- Switched to expanded syntax in tasks used for deploying TLS keys and
certificates in order to avoid mangling of TAB characters.
- Fixed missing permissions set-up for Postfix main configuration file.
- Fixed deployment of Postfix master.cf configuration file to take into account
configurable virtual mail user.
- Implemented tests covering SMTP functionality.

MAR-28: Fixed minor issues in the mail_server tasks:

- Ensure command handler is excluded from linting checks.
- Fixed modes to use leading zero.

MAR-28: Implemented scaffolding for testing the mail_server role:

- Added Molecule configuration.
- Added test playbook.
- Restart Postfix for truststore changes.
- Added test data (private keys and certificates).
- Fixed small documentation inaccuracy.

MAR-25: Implemented tests for ldap_client role:

- Added Molecule configuration.
- Added test playbook.
- Fixed issue with mode not including leading zero.
- Implemented a couple of simple tests.

MAR-26: Implemented tests and fixes ldap_server role:

- Use static network configuration in order to make it easier to test
connectivity from dedicated client.
- Added client machine for testing firewall.
- Added missing LDAP client configuration on instance used for testing of
mandatory options.
- Fixed name of server for backup testing purposes.
- Expanded a bit the cipher configuration for LDAP server for testing optional
parameters.
- Fixed wrongly populated Debian selections setting for LDAP organisation.
- Use templates for deploying LDAP TLS keys and certificates in order to avoid
Ansible munching the TAB characters.
- Implemented tests covering fully functionality of the role.

MAR-26: Implemented scaffolding for testing the ldap_server role:

- Fixed role documentation and example for the ldap_server ldap_entries
parameter.
- Fixed missing leading zero when setting mode for deployed files.
- Marked certain tasks for skipping Ansible linting on.
- Fixed invocation of local LDAP commands to use unix socket out of the
box (don't depend on LDAP client configuration).
- Default to state 'present' for ldap_entry (makes things a bit more
readable/clear).
- Added test data for backup and TLS.
- Added dummy default test file.

MAR-23: Implemented tests for the database role:

- Updated test playbook to set-up backup_server as separate play in order to
avoid skipping of backup_client role.
- Updated test playbook to correctly set-up a single backup client.
- Do not manage permissions on /srv/ directory in database role. This can
interfere with backup client access.
- Do not manage permissions on /srv/ directory in ldap_server role. This can
interfere with backup client access.
- Implemented common tests.
- Implemented tests related to database backup.

MAR-23: Implemented initial scaffolding for testing database role:

- Added Molecule configuration.
- Implemented basic playbook for setting-up the two instances used for testing
mandatory parameters and backups.
- Added data necessary for setting-up all roles.
- Updated database_serve role Molecule configuration not to depends on the
Ansible Galaxy.

MAR-24: Implemented tests for 'database_server' role:

- Added Molecule configuration for single platform and instance.
- Added test playbook that deploys database_server role for testing.
- Fixed mode setting by appending leading zero.
- Ignore task that immediatelly restarts MariaDB database server.
- Implemented tests for the role covering full functionality.

MAR-109: Minor fixes to backup role:

- Fixed mode parameters used in the role to include leading zero.

MAR-109: Added initial scaffolding for testing the 'backup' role:

- Added Molecule configuration file with two platforms and two instances.
- Added test playbook that sets-up instances for testing of mandatory and
optional parameters.
- Added test data requiered for meta-dependency backup_client.
- Added dummy default test.