fe4fa519d7
* Improve cleanup. * Add check mode tests. Failing tests commented out; will be fixed in #49948. * Add reload and reset tests. * Add tests for other global state. * Work around ufw bugs.
88 lines
2 KiB
YAML
88 lines
2 KiB
YAML
---
|
|
- name: Enable ufw
|
|
ufw:
|
|
state: enabled
|
|
|
|
# ############################################
|
|
- name: Logging (check mode)
|
|
ufw:
|
|
logging: yes
|
|
check_mode: yes
|
|
register: logging_check
|
|
- name: Logging
|
|
ufw:
|
|
logging: yes
|
|
register: logging
|
|
- name: Get logging
|
|
shell: |
|
|
ufw status verbose | grep "^Logging:"
|
|
register: ufw_logging
|
|
- name: Logging (idempotency)
|
|
ufw:
|
|
logging: yes
|
|
register: logging_idem
|
|
- name: Logging (idempotency, check mode)
|
|
ufw:
|
|
logging: yes
|
|
check_mode: yes
|
|
register: logging_idem_check
|
|
- assert:
|
|
that:
|
|
- logging_check is not changed # NOT as expected!
|
|
- logging is not changed # NOT as expected!
|
|
- "ufw_logging.stdout == 'Logging: on (low)'"
|
|
- logging_idem is not changed
|
|
- logging_idem_check is not changed
|
|
|
|
# ############################################
|
|
- name: Default (check mode)
|
|
ufw:
|
|
default: reject
|
|
direction: incoming
|
|
check_mode: yes
|
|
register: default_check
|
|
- name: Default
|
|
ufw:
|
|
default: reject
|
|
direction: incoming
|
|
register: default
|
|
- name: Get defaults
|
|
shell: |
|
|
ufw status verbose | grep "^Default:"
|
|
register: ufw_defaults
|
|
- name: Default (idempotency)
|
|
ufw:
|
|
default: reject
|
|
direction: incoming
|
|
register: default_idem
|
|
- name: Default (idempotency, check mode)
|
|
ufw:
|
|
default: reject
|
|
direction: incoming
|
|
check_mode: yes
|
|
register: default_idem_check
|
|
- name: Default (change, check mode)
|
|
ufw:
|
|
default: allow
|
|
direction: incoming
|
|
check_mode: yes
|
|
register: default_change_check
|
|
- name: Default (change)
|
|
ufw:
|
|
default: allow
|
|
direction: incoming
|
|
register: default_change
|
|
- name: Get defaults
|
|
shell: |
|
|
ufw status verbose | grep "^Default:"
|
|
register: ufw_defaults_change
|
|
- assert:
|
|
that:
|
|
# FIXME - default_check is changed
|
|
- default is changed
|
|
- "'reject (incoming)' in ufw_defaults.stdout"
|
|
- default_idem is not changed
|
|
- default_idem_check is not changed
|
|
# FIXME - default_change_check is changed
|
|
- default_change is changed
|
|
- "'allow (incoming)' in ufw_defaults_change.stdout"
|