|
Packit Service |
0a38ef |
---
|
|
Packit Service |
0a38ef |
- name: Test vault
|
|
Packit Service |
0a38ef |
hosts: ipaserver
|
|
Packit Service |
0a38ef |
become: true
|
|
Packit Service |
0a38ef |
# Need to gather facts for ansible_env.
|
|
Packit Service |
0a38ef |
gather_facts: true
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
tasks:
|
|
Packit Service |
0a38ef |
- name: Setup testing environment.
|
|
Packit Service |
0a38ef |
import_tasks: env_setup.yml
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is present
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
vault_type: asymmetric
|
|
Packit Service |
a166ed |
public_key: "{{ lookup('file', 'public.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is present, again
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
vault_type: asymmetric
|
|
Packit Service |
a166ed |
public_key: "{{ lookup('file', 'public.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
a166ed |
- name: Archive data to asymmetric vault, matching `no_log` field.
|
|
Packit Service |
a166ed |
ipavault:
|
|
Packit Service |
a166ed |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
a166ed |
name: asymvault
|
|
Packit Service |
a166ed |
vault_data: SomeADMINpassword
|
|
Packit Service |
a166ed |
register: result
|
|
Packit Service |
a166ed |
failed_when: not result.changed
|
|
Packit Service |
a166ed |
|
|
Packit Service |
a166ed |
- name: Retrieve data from asymmetric vault.
|
|
Packit Service |
a166ed |
ipavault:
|
|
Packit Service |
a166ed |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
a166ed |
name: asymvault
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
a166ed |
state: retrieved
|
|
Packit Service |
a166ed |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'SomeADMINpassword' or result.changed
|
|
Packit Service |
a166ed |
|
|
Packit Service |
0a38ef |
- name: Archive data to asymmetric vault
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
data: Hello World.
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'Hello World.' or result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault into file {{ ansible_env.HOME }}/data.txt.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
out: "{{ ansible_env.HOME }}/data.txt"
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.changed or result.failed or (result.vault.data | default(false))
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Verify retrieved data.
|
|
Packit Service |
0a38ef |
slurp:
|
|
Packit Service |
0a38ef |
src: "{{ ansible_env.HOME }}/data.txt"
|
|
Packit Service |
0a38ef |
register: slurpfile
|
|
Packit Service |
0a38ef |
failed_when: slurpfile['content'] | b64decode != 'Hello World.'
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Archive data with non-ASCII characters to asymmetric vault
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
data: The world of π is half rounded.
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'The world of π is half rounded.' or result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Archive data in asymmetric vault, from file.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
vault_type: asymmetric
|
|
Packit Service |
0a38ef |
in: "{{ ansible_env.HOME }}/in.txt"
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'Another World.' or result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Archive data with single character to asymmetric vault
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
data: c
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'c' or result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is absent
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
state: absent
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is absent, again
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
state: absent
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is present, with public key from file.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
public_key_file: "{{ ansible_env.HOME }}/public.pem"
|
|
Packit Service |
0a38ef |
vault_type: asymmetric
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is present, with password from file, again.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
public_key_file: "{{ ansible_env.HOME }}/public.pem"
|
|
Packit Service |
0a38ef |
vault_type: asymmetric
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Archive data to asymmetric vault
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
data: Hello World.
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
a166ed |
private_key: "{{ lookup('file', 'private.pem', rstrip=False) | b64encode }}"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'Hello World.' or result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Retrieve data from asymmetric vault, with password file.
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
private_key_file: "{{ ansible_env.HOME }}/private.pem"
|
|
Packit Service |
0a38ef |
state: retrieved
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
a166ed |
failed_when: result.vault.data != 'Hello World.' or result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is absent
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
state: absent
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: not result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Ensure asymmetric vault is absent, again
|
|
Packit Service |
0a38ef |
ipavault:
|
|
Packit Service |
0a38ef |
ipaadmin_password: SomeADMINpassword
|
|
Packit Service |
0a38ef |
name: asymvault
|
|
Packit Service |
0a38ef |
state: absent
|
|
Packit Service |
0a38ef |
register: result
|
|
Packit Service |
0a38ef |
failed_when: result.changed
|
|
Packit Service |
0a38ef |
|
|
Packit Service |
0a38ef |
- name: Cleanup testing environment.
|
|
Packit Service |
0a38ef |
import_tasks: env_setup.yml
|