ansible/test/integration/targets/aci_aaa_user/tasks/main.yml
Dag Wieers d8ba8c03f3
ACI: Make querying links and nodes possible (#43441)
This functionality was not considered when the module was written, but
there's no reason why it shouldn't be supported.

We had to rework the query string construction and object filtering.
This new functionality allows to filter on arbitrary keys and supports
None values.

This PR fixes various issues with the existing framework, including
querying specific objects using construct_url_4 (i.e.
aci_epg_to_contract and aci_static_binding_to_epg)
2018-08-07 23:54:54 +02:00

187 lines
5 KiB
YAML

# Test code for the ACI modules
# Copyright: (c) 2017, Dag Wieers (dagwieers) <dag@wieers.com>
#
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
- name: Test that we have an ACI APIC host, ACI username and ACI password
fail:
msg: 'Please define the following variables: aci_hostname, aci_username and aci_password.'
when: aci_hostname is not defined or aci_username is not defined or aci_password is not defined
# CLEAN ENVIRONMENT
- name: Remove any pre-existing user
aci_aaa_user: &user_absent
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
password: '{{ aci_password }}'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: ansible
state: absent
# ADD USER
- name: Add user (check_mode)
aci_aaa_user: &user_present
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
password: '{{ aci_password }}'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: ansible
description: Ansible test user
email: ansible@ansible.lan
enabled: yes
expiration: never
expires: no
first_name: Test
last_name: User
phone: 1-234-555-678
check_mode: yes
register: cm_add_user
# NOTE: Setting password is not idempotent, see #35544
- name: Add user (normal mode)
aci_aaa_user:
<<: *user_present
aaa_password: 12!Ab:cD!34
register: nm_add_user
- name: Add user again (check mode)
aci_aaa_user: *user_present
check_mode: yes
register: cm_add_user_again
- name: Add user again (normal mode)
aci_aaa_user: *user_present
register: nm_add_user_again
- name: Verify add user
assert:
that:
- cm_add_user is changed
- nm_add_user is changed
- cm_add_user_again is not changed
- nm_add_user_again is not changed
# MODIFY USER
- name: Modify user (check_mode)
aci_aaa_user: &user_changed
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
password: '{{ aci_password }}'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: ansible
description: Ansible test user for integration tests
email: aci-ansible@ansible.lan
expiration: '2123-12-12'
expires: yes
phone: 2-345-555-678
check_mode: yes
register: cm_modify_user
- name: Modify user (normal mode)
aci_aaa_user: *user_changed
register: nm_modify_user
- name: Modify user again (check mode)
aci_aaa_user: *user_changed
check_mode: yes
register: cm_modify_user_again
- name: Modify user again (normal mode)
aci_aaa_user: *user_changed
register: nm_modify_user_again
- name: Verify modify user
assert:
that:
- cm_modify_user is changed
- nm_modify_user is changed
- cm_modify_user_again is not changed
- nm_modify_user_again is not changed
# QUERY ALL USERS
- name: Query all users (check_mode)
aci_aaa_user: &user_query
host: '{{ aci_hostname }}'
username: '{{ aci_username }}'
password: '{{ aci_password }}'
validate_certs: '{{ aci_validate_certs | default(false) }}'
use_ssl: '{{ aci_use_ssl | default(true) }}'
use_proxy: '{{ aci_use_proxy | default(true) }}'
output_level: '{{ aci_output_level | default("info") }}'
aaa_user: ansible
state: query
check_mode: yes
register: cm_query_all_users
- name: Query all users (normal mode)
aci_aaa_user: *user_query
register: nm_query_all_users
- name: Verify query_all_users
assert:
that:
- cm_query_all_users is not changed
- nm_query_all_users is not changed
# NOTE: Order of users is not stable between calls
#- cm_query_all_users == nm_query_all_users
# QUERY OUR USER
- name: Query our user (check_mode)
aci_aaa_user:
<<: *user_query
check_mode: yes
register: cm_query_user
- name: Query our user (normal mode)
aci_aaa_user:
<<: *user_query
register: nm_query_user
- name: Verify query_user
assert:
that:
- cm_query_user is not changed
- nm_query_user is not changed
- cm_query_user == nm_query_user
# REMOVE USER
- name: Remove user (check_mode)
aci_aaa_user: *user_absent
check_mode: yes
register: cm_remove_user
- name: Remove user (normal mode)
aci_aaa_user: *user_absent
register: nm_remove_user
- name: Remove user again (check_mode)
aci_aaa_user: *user_absent
check_mode: yes
register: cm_remove_user_again
- name: Remove user again (normal mode)
aci_aaa_user: *user_absent
register: nm_remove_user_again
- name: Verify remove_user
assert:
that:
- cm_remove_user is changed
- nm_remove_user is changed
- cm_remove_user_again is not changed
- nm_remove_user_again is not changed