Files
@ 2381ba93d089
Branch filter:
Location: majic-ansible-roles/roles/mail_server/molecule/default/prepare.yml
2381ba93d089
5.0 KiB
text/x-yaml
MAR-148: Better workaround for https://github.com/ansible/ansible/issues/64560 (override the module_utils/mysql.py instead of the module itself).
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 | ---
- name: Prepare
hosts: all
gather_facts: false
tasks:
- name: Install python for Ansible
raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)
become: true
changed_when: false
- hosts: all
become: true
tasks:
- name: Update all caches to avoid errors due to missing remote archives
apt:
update_cache: true
changed_when: false
- hosts: jessie
become: true
tasks:
- name: Set-up the hosts file
lineinfile:
path: /etc/hosts
regexp: "^{{ item.key }}"
line: "{{ item.key }} {{ item.value }}"
owner: root
group: root
mode: 0644
state: present
with_dict:
10.31.127.10: "ldap-server backup-server"
10.31.127.20: "client1"
10.31.127.21: "client2"
10.31.127.30: "parameters-mandatory parameters-mandatory-jessie64"
10.31.127.31: "parameters-optional parameters-optional-jessie64"
- hosts: stretch
become: true
tasks:
- name: Set-up the hosts file
lineinfile:
path: /etc/hosts
regexp: "^{{ item.key }}"
line: "{{ item.key }} {{ item.value }}"
owner: root
group: root
mode: 0644
state: present
with_dict:
10.31.127.10: "ldap-server backup-server"
10.31.127.22: "client1"
10.31.127.23: "client2"
10.31.127.32: "parameters-mandatory parameters-mandatory-jessie64"
10.31.127.33: "parameters-optional parameters-optional-jessie64"
- hosts: client
become: true
tasks:
- name: Install SWAKS for testing SMTP capability
apt:
name: swaks
state: present
- name: Install pip
apt:
name: python-pip
state: present
- name: Install IMAP CLI tool
pip:
name: Imap-CLI==0.6
state: present
- name: Install tool for testing SIEVE
apt:
name: sieve-connect
state: present
- name: Install tool for testing TCP connectivity
apt:
name: hping3
state: present
- name: Deploy IMAP CLI configuration
copy:
src: "tests/data/{{ item }}"
dest: "/home/vagrant/{{ item }}"
owner: vagrant
group: vagrant
mode: 0600
with_items:
- imapcli-parameters-mandatory-john_doe.conf
- imapcli-parameters-mandatory-jane_doe.conf
- imapcli-parameters-optional-john_doe.conf
- imapcli-parameters-optional-jane_doe.conf
- name: Deploy CA certificate
copy:
src: tests/data/x509/ca.cert.pem
dest: /usr/local/share/ca-certificates/testca.crt
owner: root
group: root
mode: 0644
notify:
- Update CA certificate cache
handlers:
- name: Update CA certificate cache
command: /usr/sbin/update-ca-certificates --fresh
- hosts: ldap-server
become: true
roles:
- ldap_server
- backup_server
- hosts: ldap-server
become: true
tasks:
- name: Create LDAP accounts for testing
ldap_entry:
dn: "{{ item.dn }}"
objectClass: "{{ item.objectClass }}"
attributes: "{{ item.attributes }}"
with_items:
# Users.
- dn: uid=john,ou=people,dc=local
objectClass:
- inetOrgPerson
- simpleSecurityObject
attributes:
userPassword: johnpassword
uid: john
cn: John Doe
sn: Doe
mail: john.doe@domain1
- dn: uid=jane,ou=people,dc=local
objectClass:
- inetOrgPerson
- simpleSecurityObject
attributes:
userPassword: janepassword
uid: jane
cn: Jane Doe
sn: Doe
mail: jane.doe@domain2
- dn: uid=nomail,ou=people,dc=local
objectClass:
- inetOrgPerson
- simpleSecurityObject
attributes:
userPassword: nomailpassword
uid: nomail
cn: No Mail
sn: Mail
mail: nomail@domain1
# Domains
- dn: dc=domain1,ou=domains,ou=mail,ou=services,dc=local
objectClass: dNSDomain
attributes:
dc: domain1
- dn: dc=domain2,ou=domains,ou=mail,ou=services,dc=local
objectClass: dNSDomain
attributes:
dc: domain2
# Aliases
- dn: cn=postmaster@domain1,ou=aliases,ou=mail,ou=services,dc=local
objectClass: nisMailAlias
attributes:
cn: postmaster@domain1
rfc822MailMember: john.doe@domain1
- dn: cn=webmaster@domain2,ou=aliases,ou=mail,ou=services,dc=local
objectClass: nisMailAlias
attributes:
cn: webmaster@domain2
rfc822MailMember: jane.doe@domain2
- name: Add test accounts to correct group
ldap_attr:
dn: "cn=mail,ou=groups,dc=local"
name: uniqueMember
state: exact
values:
- uid=john,ou=people,dc=local
- uid=jane,ou=people,dc=local
|