e76630c4e4
* firewall_rules module added Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * state fact gathering code Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * facts and operation code added Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * unit tests added Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * sanity fixes Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * sanity fixes Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * sanity fixes Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com> * delete opr updated Signed-off-by: rohitthakur2590 <rohitthakur2590@outlook.com>
65 lines
2.1 KiB
YAML
65 lines
2.1 KiB
YAML
---
|
|
- debug:
|
|
msg: "START vyos_firewall_rules replaced integration tests on connection={{ ansible_connection }}"
|
|
|
|
- include_tasks: _remove_config.yaml
|
|
|
|
- include_tasks: _populate.yaml
|
|
|
|
- block:
|
|
- name: Replace device configurations of listed firewall rules with provided configurations
|
|
vyos_firewall_rules: &replaced
|
|
config:
|
|
- afi: 'ipv6'
|
|
rule_sets:
|
|
- name: 'UPLINK'
|
|
description: 'This is ipv6 specific rule-set'
|
|
default_action: 'accept'
|
|
- afi: 'ipv4'
|
|
rule_sets:
|
|
- name: 'INBOUND'
|
|
description: 'IPv4 INBOUND rule set'
|
|
default_action: 'accept'
|
|
rules:
|
|
- number: 101
|
|
action: 'accept'
|
|
description: 'Rule 101 is configured by Ansible'
|
|
ipsec: 'match-ipsec'
|
|
- number: 104
|
|
action: 'reject'
|
|
description: 'Rule 104 is configured by Ansible'
|
|
ipsec: 'match-none'
|
|
state: replaced
|
|
register: result
|
|
|
|
- name: Assert that correct set of commands were generated
|
|
assert:
|
|
that:
|
|
- "{{ replaced['commands'] | symmetric_difference(result['commands']) |length == 0 }}"
|
|
|
|
- name: Assert that before dicts are correctly generated
|
|
assert:
|
|
that:
|
|
- "{{ populate | symmetric_difference(result['before']) |length == 0 }}"
|
|
|
|
- name: Assert that after dict is correctly generated
|
|
assert:
|
|
that:
|
|
- "{{ replaced['after'] | symmetric_difference(result['after']) |length == 0 }}"
|
|
|
|
- name: Replace device configurations of listed firewall rules with provided configurarions (IDEMPOTENT)
|
|
vyos_firewall_rules: *replaced
|
|
register: result
|
|
|
|
- name: Assert that task was idempotent
|
|
assert:
|
|
that:
|
|
- "result['changed'] == false"
|
|
|
|
- name: Assert that before dict is correctly generated
|
|
assert:
|
|
that:
|
|
- "{{ replaced['after'] | symmetric_difference(result['before']) |length == 0 }}"
|
|
|
|
always:
|
|
- include_tasks: _remove_config.yaml
|