Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat(eos_validate_state): ANTA Add eAPI HTTPS SSL profile test #3357

Merged
merged 5 commits into from Dec 14, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Expand Up @@ -205,6 +205,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -205,6 +205,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -41,6 +41,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc1-leaf1a
Expand Down
Expand Up @@ -267,6 +267,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -267,6 +267,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -41,6 +41,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc1-leaf2a
Expand Down
Expand Up @@ -117,6 +117,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc1-leaf1a
Expand Down
Expand Up @@ -117,6 +117,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc1-leaf1a
Expand Down
Expand Up @@ -205,6 +205,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -205,6 +205,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -41,6 +41,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc2-leaf1a
Expand Down
Expand Up @@ -267,6 +267,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -267,6 +267,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
vlans:
- id: 4093
tenant: system
Expand Down
Expand Up @@ -41,6 +41,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc2-leaf2a
Expand Down
Expand Up @@ -117,6 +117,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc2-leaf1a
Expand Down
Expand Up @@ -117,6 +117,7 @@ management_api_http:
enable_vrfs:
- name: MGMT
enable_https: true
https_ssl_profile: eAPI_SSL_Profile
ethernet_interfaces:
- name: Ethernet1
peer: dc2-leaf1a
Expand Down
Expand Up @@ -615,6 +615,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -615,6 +615,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -73,6 +73,9 @@ anta.tests.interfaces:
- Interface State
custom_field: Port-Channel1 - DC1_L3_LEAF1_Po8
description: Port-Channel Interface & Line Protocol == \"up\"
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -636,6 +636,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -63,6 +63,9 @@ anta.tests.interfaces:
- Interface State
custom_field: Port-Channel1 - DC1_L3_LEAF2_Po8
description: Port-Channel Interface & Line Protocol == \"up\"
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -198,6 +198,9 @@ anta.tests.routing.generic:
- BGP
custom_field: ArBGP
description: ArBGP is configured and operating
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -198,6 +198,9 @@ anta.tests.routing.generic:
- BGP
custom_field: ArBGP
description: ArBGP is configured and operating
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -615,6 +615,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -615,6 +615,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -73,6 +73,9 @@ anta.tests.interfaces:
- Interface State
custom_field: Port-Channel1 - DC2_L3_LEAF1_Po8
description: Port-Channel Interface & Line Protocol == \"up\"
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -667,6 +667,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -625,6 +625,9 @@ anta.tests.routing.generic:
description: Remote VTEP address
routes:
- 10.255.129.15
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -73,6 +73,9 @@ anta.tests.interfaces:
- Interface State
custom_field: Port-Channel1 - DC2_L3_LEAF2_Po8
description: Port-Channel Interface & Line Protocol == \"up\"
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -240,6 +240,9 @@ anta.tests.routing.generic:
- BGP
custom_field: ArBGP
description: ArBGP is configured and operating
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -240,6 +240,9 @@ anta.tests.routing.generic:
- BGP
custom_field: ArBGP
description: ArBGP is configured and operating
anta.tests.security:
- VerifyAPIHttpsSSL:
profile: eAPI_SSL_Profile
anta.tests.system:
- VerifyNTP:
result_overwrite:
Expand Down
Expand Up @@ -27,6 +27,10 @@ fabric_name: FABRIC
underlay_routing_protocol: ebgp
overlay_routing_protocol: ebgp

#eAPI HTTPS SSL profile
custom_structured_configuration_management_api_http:
https_ssl_profile: eAPI_SSL_Profile

# Local users
local_users:
# Define a new user, which is called "ansible"
Expand Down