37 lines
1.5 KiB
Python
37 lines
1.5 KiB
Python
"""Role testing files using testinfra."""
|
|
|
|
|
|
def test_hosts_file(host):
|
|
"""Validate /etc/hosts file."""
|
|
etc_hosts = host.file("/etc/hosts")
|
|
assert etc_hosts.exists
|
|
assert etc_hosts.user == "root"
|
|
assert etc_hosts.group == "root"
|
|
|
|
def test_ansible_user_group(host):
|
|
"""Validate ansible user and group."""
|
|
ansible_group = host.group("ansible")
|
|
ansible_user = host.user("ansible")
|
|
assert ansible_group.exists
|
|
assert ansible_user.exists
|
|
assert ansible_user.group == "ansible"
|
|
assert ansible_user.shell == "/bin/bash"
|
|
|
|
def test_ansible_sudoer(host):
|
|
"""Validate that ansible user is sudoer"""
|
|
etc_sudoers_d_ansible = host.file("/etc/sudoers.d/ansible")
|
|
assert etc_sudoers_d_ansible.exists
|
|
assert etc_sudoers_d_ansible.user == "root"
|
|
assert etc_sudoers_d_ansible.group == "root"
|
|
assert etc_sudoers_d_ansible.mode == 0o640
|
|
assert etc_sudoers_d_ansible.contains("ansible ALL=(ALL) NOPASSWD: ALL")
|
|
|
|
def test_ansible_ssh_authorized_keys(host):
|
|
"""Validate that ansible user has authorized_keys"""
|
|
opt_ansible_authorized_keys = host.file("/opt/ansible/.ssh/authorized_keys")
|
|
assert opt_ansible_authorized_keys.exists
|
|
assert opt_ansible_authorized_keys.user == "ansible"
|
|
assert opt_ansible_authorized_keys.group == "ansible"
|
|
assert opt_ansible_authorized_keys.mode == 0o600
|
|
assert opt_ansible_authorized_keys.contains("ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIClfmTk73wNNL2jwvhRUmUuy80JRrz3P7cEgXUqlc5O9 ansible@instance")
|