majic-ansible-roles Files · roles/bootstrap/molecule/default/tests/test_parameters

Files @ 75bfe558bba9

Branch filter:

Location: majic-ansible-roles/roles/bootstrap/molecule/default/tests/test_parameters_optional.py

75bfe558bba9 883 B text/x-python Show Annotation Show as Raw Download as Raw

branko

MAR-158: Refactor ldap_server TLS-related tests to use nmap:

- Updated requirements to include defusedxml for safe parsing of XML
reports from nmap.
- Install nmap as part of preparation step.
- Refactored tests for TLS to use nmap ssl-enum-ciphers script for
listing available TLS versions and ciphers.

import os

import testinfra.utils.ansible_runner


testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
    os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('parameters-optional')


def test_authorized_keys(host):
    """
    Tests if Ansible user authorized_keys has been set-up correctly.
    """

    with host.sudo():

        ssh_key = open('tests/data/ansible_key.pub', 'r').read().strip()
        authorized_keys = host.file('/home/ansible/.ssh/authorized_keys')

        assert authorized_keys.is_file
        assert ssh_key in authorized_keys.content_string


def test_root_authorised_keys(host):
    """
    Tests if Ansible key been removed from root's authorized keys.
    """

    with host.sudo():

        ssh_key = open('tests/data/ansible_key.pub', 'r').read().strip()

        assert ssh_key not in host.file('/root/.ssh/authorized_keys').content_string