ansible/test/integration/targets/ufw/tasks/tests/basic.yml

---
# ############################################
- name: Enable
  ufw:
    state: enabled
  register: enable
- name: Enable (idempotency)
  ufw:
    state: enabled
  register: enable_idem
- assert:
    that:
    - enable is changed
    - enable_idem is not changed

# ############################################
- name: ipv4 allow
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
  register: ipv4_allow
- name: ipv4 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
  become: yes
  register: ipv4_allow_idem
- assert:
    that:
    - ipv4_allow is changed
    - ipv4_allow_idem is not changed

# ############################################
- name: delete ipv4 allow
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
    delete: yes
  register: delete_ipv4_allow
- name: delete ipv4 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
    delete: yes
  become: yes
  register: delete_ipv4_allow_idem
- assert:
    that:
    - delete_ipv4_allow is changed
    - delete_ipv4_allow_idem is not changed

# ############################################
- name: ipv6 allow
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
  register: ipv6_allow
- name: ipv6 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
  become: yes
  register: ipv6_allow_idem
- assert:
    that:
    - ipv6_allow is changed
    - ipv6_allow_idem is not changed

# ############################################
- name: delete ipv6 allow
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
    delete: yes
  register: delete_ipv6_allow
- name: delete ipv6 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
    delete: yes
  become: yes
  register: delete_ipv6_allow_idem
- assert:
    that:
    - delete_ipv6_allow is changed
    - delete_ipv6_allow_idem is not changed


# ############################################
- name: ipv4 allow
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
  register: ipv4_allow
- name: ipv4 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
  become: yes
  register: ipv4_allow_idem
- assert:
    that:
    - ipv4_allow is changed
    - ipv4_allow_idem is not changed

# ############################################
- name: delete ipv4 allow
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
    delete: yes
  register: delete_ipv4_allow
- name: delete ipv4 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: 0.0.0.0
    delete: yes
  become: yes
  register: delete_ipv4_allow_idem
- assert:
    that:
    - delete_ipv4_allow is changed
    - delete_ipv4_allow_idem is not changed

# ############################################
- name: ipv6 allow
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
  register: ipv6_allow
- name: ipv6 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
  become: yes
  register: ipv6_allow_idem
- assert:
    that:
    - ipv6_allow is changed
    - ipv6_allow_idem is not changed

# ############################################
- name: delete ipv6 allow
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
    delete: yes
  register: delete_ipv6_allow
- name: delete ipv6 allow (idempotency)
  ufw:
    rule: allow
    port: 23
    to_ip: "::"
    delete: yes
  become: yes
  register: delete_ipv6_allow_idem
- assert:
    that:
    - delete_ipv6_allow is changed
    - delete_ipv6_allow_idem is not changed

# ############################################
- name: Disable
  ufw:
    state: disabled
  register: disable
- name: Disable (idempotency)
  ufw:
    state: disabled
  register: disable_idem
- assert:
    that:
    - disable is changed
    - disable_idem is not changed