84 lines
2.3 KiB
YAML
84 lines
2.3 KiB
YAML
|
---
|
||
|
|
- debug:
|
||
|
|
msg: "START vyos_firewall_global round trip integration tests on connection={{ ansible_connection }}"
|
||
|
|
|
||
|
|
- include_tasks: _remove_config.yaml
|
||
|
|
|
||
|
|
- block:
|
||
|
|
- name: Apply the provided configuration (base config)
|
||
|
|
vyos_firewall_global:
|
||
|
|
config:
|
||
|
|
validation: strict
|
||
|
|
config_trap: True
|
||
|
|
log_martians: True
|
||
|
|
syn_cookies: True
|
||
|
|
twa_hazards_protection: True
|
||
|
|
ping:
|
||
|
|
all: True
|
||
|
|
broadcast: True
|
||
|
|
state_policy:
|
||
|
|
- connection_type: 'established'
|
||
|
|
action: 'accept'
|
||
|
|
log: True
|
||
|
|
- connection_type: 'invalid'
|
||
|
|
action: 'reject'
|
||
|
|
route_redirects:
|
||
|
|
- afi: 'ipv4'
|
||
|
|
ip_src_route: True
|
||
|
|
icmp_redirects:
|
||
|
|
send: True
|
||
|
|
receive: False
|
||
|
|
group:
|
||
|
|
address_group:
|
||
|
|
- name: 'MGMT-HOSTS'
|
||
|
|
description: 'This group has the Management hosts address list'
|
||
|
|
members:
|
||
|
|
- address: 192.0.1.1
|
||
|
|
- address: 192.0.1.3
|
||
|
|
- address: 192.0.1.5
|
||
|
|
network_group:
|
||
|
|
- name: 'MGMT'
|
||
|
|
description: 'This group has the Management network addresses'
|
||
|
|
members:
|
||
|
|
- address: 192.0.1.0/24
|
||
|
|
state: merged
|
||
|
|
register: base_config
|
||
|
|
|
||
|
|
- name: Gather firewall_global facts
|
||
|
|
vyos_facts:
|
||
|
|
gather_subset:
|
||
|
|
- default
|
||
|
|
gather_network_resources:
|
||
|
|
- firewall_global
|
||
|
|
|
||
|
|
- name: Apply the provided configuration (config to be reverted)
|
||
|
|
vyos_firewall_global:
|
||
|
|
config:
|
||
|
|
validation: strict
|
||
|
|
config_trap: False
|
||
|
|
log_martians: False
|
||
|
|
syn_cookies: False
|
||
|
|
twa_hazards_protection: False
|
||
|
|
ping:
|
||
|
|
all: False
|
||
|
|
broadcast: False
|
||
|
|
state: merged
|
||
|
|
register: result
|
||
|
|
|
||
|
|
- name: Assert that changes were applied
|
||
|
|
assert:
|
||
|
|
that: "{{ round_trip['after'] == result['after'] }}"
|
||
|
|
|
||
|
|
- name: Revert back to base config using facts round trip
|
||
|
|
vyos_firewall_global:
|
||
|
|
config: "{{ ansible_facts['network_resources']['firewall_global'] }}"
|
||
|
|
state: replaced
|
||
|
|
register: revert
|
||
|
|
|
||
|
|
- name: Assert that config was reverted
|
||
|
|
assert:
|
||
|
|
that: "{{ base_config['after'] == revert['after']}}"
|
||
|
|
|
||
|
|
always:
|
||
|
|
- include_tasks: _remove_config.yaml
|