A collection of Ansible playbooks to detect and report potential issues during TripleO deployments
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 

53 lines
1.8 KiB

  1. ---
  2. # Copyright 2019 Red Hat, Inc.
  3. # All Rights Reserved.
  4. #
  5. # Licensed under the Apache License, Version 2.0 (the "License"); you may
  6. # not use this file except in compliance with the License. You may obtain
  7. # a copy of the License at
  8. #
  9. # http://www.apache.org/licenses/LICENSE-2.0
  10. #
  11. # Unless required by applicable law or agreed to in writing, software
  12. # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
  13. # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
  14. # License for the specific language governing permissions and limitations
  15. # under the License.
  16. - name: Converge
  17. hosts: all
  18. vars:
  19. ipa_bin: echo
  20. kinit_bin: echo
  21. kdestroy_bin: echo
  22. tls_everywhere_undercloud_fqdn: "undercloud.example.com"
  23. tasks:
  24. - name: Run ipa_server_check validation
  25. block:
  26. - name: run validation
  27. include_role:
  28. name: tls_everywhere
  29. tasks_from: ipa-server-check
  30. rescue:
  31. - name: clear errors
  32. meta: clear_host_errors
  33. - name: check command outputs
  34. assert:
  35. that:
  36. - tls_everywhere_aci_check_kinit_output == "host/undercloud.example.com -k -t /etc/krb5.keytab"
  37. - tls_everywhere_aci_check_dns_record_show_output == "dnsrecord-show example.com freeipa-0"
  38. - tls_everywhere_aci_check_service_show_output == "service-show nova/undercloud.example.com --all --raw"
  39. - ipa_server_aci_check_kdestroy_output == "-A"
  40. - ipa_server_aci_check_failures|length == 1
  41. - '"Modify Realm Domains" in ipa_server_aci_check_failures[0]'
  42. - name: End play
  43. meta: end_play
  44. - name: Fail the test
  45. fail:
  46. msg: |
  47. The ipa-server-check validation didn't fail as expected