majic-ansible-roles Files · roles/bootstrap/molecule/default/tests/test

Files @ 92011aae7258

Branch filter:

Location: majic-ansible-roles/roles/bootstrap/molecule/default/tests/test_default.py

92011aae7258 1.2 KiB text/x-python Show Annotation Show as Raw Download as Raw

branko

MAR-128: Upgraded tests for php_website role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting hostname instead of hard-coding it in a
couple of tests.
- Fixed some linting issues.
- Updated hostname to include Debian version.

import testinfra.utils.ansible_runner


testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
    '.molecule/ansible_inventory.yml').get_hosts('all')


def test_installed_packages(host):
    """
    Tests if packages have been installed.
    """

    assert host.package('sudo').is_installed


def test_ansible_user(host):
    """
    Tests if Ansible user and group have been set-up correctly.
    """

    with host.sudo():
        group = host.group('ansible')
        assert group.exists
        assert group.gid < 1000

        user = host.user('ansible')
        assert user.exists
        assert user.group == 'ansible'
        assert user.groups == ['ansible']
        assert user.uid < 1000
        assert user.shell == '/bin/bash'
        assert user.password == '!'


def test_sudo_configuration(host):
    """
    Tests if sudo has been configured to allow Ansible user to run any command
    without password.
    """

    with host.sudo():

        sudo_config = host.file('/etc/sudoers.d/ansible')

        assert sudo_config.is_file
        assert sudo_config.user == 'root'
        assert sudo_config.group == 'root'
        assert sudo_config.mode == 0o640
        assert sudo_config.content == 'ansible ALL=(ALL:ALL) NOPASSWD:ALL'