Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add basic integration tests for ufw.
- Loading branch information
1 parent
9fb4e24
commit 7eda7d8
Showing
4 changed files
with
222 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| shippable/posix/group2 | ||
| skip/osx | ||
| skip/freebsd | ||
| skip/rhel8.0 | ||
| needs/root | ||
| needs/privileged | ||
| destructive |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| --- | ||
| # Make sure ufw is installed | ||
| - name: Install EPEL repository (RHEL only) | ||
| yum: | ||
| name: https://dl.fedoraproject.org/pub/epel/epel-release-latest-{{ ansible_distribution_major_version }}.noarch.rpm | ||
| state: present | ||
| when: ansible_distribution == 'RedHat' | ||
| - name: Install iptables (SuSE only) | ||
| package: | ||
| name: iptables | ||
| when: ansible_os_family == 'Suse' | ||
| - name: Install ufw | ||
| package: | ||
| name: ufw | ||
| # Make sure ufw is not enabled | ||
| - name: Disable ufw in case it is running | ||
| ufw: | ||
| state: disabled | ||
| # Run the tests | ||
| - block: | ||
| - include_tasks: run-test.yml | ||
| with_fileglob: | ||
| - "tests/*.yml" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| --- | ||
| - name: "Loading tasks from {{ item }}" | ||
| include_tasks: "{{ item }}" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,189 @@ | ||
| --- | ||
| # ############################################ | ||
| - name: Enable | ||
| ufw: | ||
| state: enabled | ||
| register: enable | ||
| - name: Enable (idempotency) | ||
| ufw: | ||
| state: enabled | ||
| register: enable_idem | ||
| - assert: | ||
| that: | ||
| - enable is changed | ||
| - enable_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: ipv4 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| register: ipv4_allow | ||
| - name: ipv4 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| become: yes | ||
| register: ipv4_allow_idem | ||
| - assert: | ||
| that: | ||
| - ipv4_allow is changed | ||
| - ipv4_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: delete ipv4 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| delete: yes | ||
| register: delete_ipv4_allow | ||
| - name: delete ipv4 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| delete: yes | ||
| become: yes | ||
| register: delete_ipv4_allow_idem | ||
| - assert: | ||
| that: | ||
| - delete_ipv4_allow is changed | ||
| - delete_ipv4_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: ipv6 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| register: ipv6_allow | ||
| - name: ipv6 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| become: yes | ||
| register: ipv6_allow_idem | ||
| - assert: | ||
| that: | ||
| - ipv6_allow is changed | ||
| - ipv6_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: delete ipv6 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| delete: yes | ||
| register: delete_ipv6_allow | ||
| - name: delete ipv6 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| delete: yes | ||
| become: yes | ||
| register: delete_ipv6_allow_idem | ||
| - assert: | ||
| that: | ||
| - delete_ipv6_allow is changed | ||
| - delete_ipv6_allow_idem is not changed | ||
|
|
||
|
|
||
| # ############################################ | ||
| - name: ipv4 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| register: ipv4_allow | ||
| - name: ipv4 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| become: yes | ||
| register: ipv4_allow_idem | ||
| - assert: | ||
| that: | ||
| - ipv4_allow is changed | ||
| - ipv4_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: delete ipv4 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| delete: yes | ||
| register: delete_ipv4_allow | ||
| - name: delete ipv4 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: 0.0.0.0 | ||
| delete: yes | ||
| become: yes | ||
| register: delete_ipv4_allow_idem | ||
| - assert: | ||
| that: | ||
| - delete_ipv4_allow is changed | ||
| - delete_ipv4_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: ipv6 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| register: ipv6_allow | ||
| - name: ipv6 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| become: yes | ||
| register: ipv6_allow_idem | ||
| - assert: | ||
| that: | ||
| - ipv6_allow is changed | ||
| - ipv6_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: delete ipv6 allow | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| delete: yes | ||
| register: delete_ipv6_allow | ||
| - name: delete ipv6 allow (idempotency) | ||
| ufw: | ||
| rule: allow | ||
| port: 23 | ||
| to_ip: "::" | ||
| delete: yes | ||
| become: yes | ||
| register: delete_ipv6_allow_idem | ||
| - assert: | ||
| that: | ||
| - delete_ipv6_allow is changed | ||
| - delete_ipv6_allow_idem is not changed | ||
|
|
||
| # ############################################ | ||
| - name: Disable | ||
| ufw: | ||
| state: disabled | ||
| register: disable | ||
| - name: Disable (idempotency) | ||
| ufw: | ||
| state: disabled | ||
| register: disable_idem | ||
| - assert: | ||
| that: | ||
| - disable is changed | ||
| - disable_idem is not changed |