majic-ansible-roles Files · roles/bootstrap/playbook.yml

Files @ ef201fa5ec5f

Branch filter:

Location: majic-ansible-roles/roles/bootstrap/playbook.yml

ef201fa5ec5f 1.3 KiB text/x-yaml Show Annotation Show as Raw Download as Raw

branko

MAR-128: Upgraded tests for backup_server role:

- Switch to new Molecule configuration.
- Updated set-up playbook to use become: yes.
- Moved some preparatory steps outside of the main playbook (eases
idempotence tests).
- Updated tests to reference the yml inventory file.
- Updated tests to use new fixture (host instead of individual ones).
- Switched to extracting IP address instead of hard-coding it in a
couple of tests.
- Moved test for checking available authentication mechanisms for
backup SSH server to be part of testing of parameters_optional only
for now (it was hard coded to that IP, and fails on
parameters-mandatory due to iptables not opening correct ports).

---

# Put Ansible key into root's authorized_keys to test its removal, but don't
# touch the file if it does not exist in order to properly test for idempotence.
- hosts: parameters-mandatory
  tasks:

    - name: Check if authorized_keys exists already
      stat:
        path: "/root/.ssh/authorized_keys"
      register: "authorized_keys"

    - name: Deploy authorized_keys to mimic set-up via preseed file
      authorized_key:
        user: root
        key: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
      when: "not authorized_keys.stat.exists"

# Put Ansible key into root's authorized_keys to test its removal, but don't
# touch the file if it does not exist in order to properly test for idempotence.
- hosts: parameters-optional
  tasks:

    - name: Check if authorized_keys exists already
      stat:
        path: "/root/.ssh/authorized_keys"
      register: "authorized_keys"

    - name: Deploy authorized_keys to mimic set-up via preseed file
      authorized_key:
        user: root
        key: "{{ lookup('file', 'tests/data/ansible_key.pub') }}"
      when: "not authorized_keys.stat.exists"

- hosts: parameters-mandatory
  roles:
    - role: bootstrap

- hosts: parameters-optional
  roles:
    - role: bootstrap
      ansible_key: "{{ lookup('file', 'tests/data/ansible_key.pub') }}"