89 lines
2 KiB
YAML
89 lines
2 KiB
YAML
|
---
|
||
|
|
- name: Enable ufw
|
||
|
|
ufw:
|
||
|
|
state: enabled
|
||
|
|
|
||
|
|
# ############################################
|
||
|
|
- name: Logging (check mode)
|
||
|
|
ufw:
|
||
|
|
logging: yes
|
||
|
|
check_mode: yes
|
||
|
|
register: logging_check
|
||
|
|
- name: Logging
|
||
|
|
ufw:
|
||
|
|
logging: yes
|
||
|
|
register: logging
|
||
|
|
- name: Get logging
|
||
|
|
shell: |
|
||
|
|
ufw status verbose | grep "^Logging:"
|
||
|
|
register: ufw_logging
|
||
|
|
- name: Logging (idempotency)
|
||
|
|
ufw:
|
||
|
|
logging: yes
|
||
|
|
register: logging_idem
|
||
|
|
- name: Logging (idempotency, check mode)
|
||
|
|
ufw:
|
||
|
|
logging: yes
|
||
|
|
check_mode: yes
|
||
|
|
register: logging_idem_check
|
||
|
|
- assert:
|
||
|
|
that:
|
||
|
|
- logging_check is not changed # NOT as expected!
|
||
|
|
- logging is not changed # NOT as expected!
|
||
|
|
- "ufw_logging.stdout == 'Logging: on (low)'"
|
||
|
|
- logging_idem is not changed
|
||
|
|
- logging_idem_check is not changed
|
||
|
|
|
||
|
|
# ############################################
|
||
|
|
- name: Default (check mode)
|
||
|
|
ufw:
|
||
|
|
default: reject
|
||
|
|
direction: incoming
|
||
|
|
check_mode: yes
|
||
|
|
register: default_check
|
||
|
|
- name: Default
|
||
|
|
ufw:
|
||
|
|
default: reject
|
||
|
|
direction: incoming
|
||
|
|
register: default
|
||
|
|
- name: Get defaults
|
||
|
|
shell: |
|
||
|
|
ufw status verbose | grep "^Default:"
|
||
|
|
register: ufw_defaults
|
||
|
|
- name: Default (idempotency)
|
||
|
|
ufw:
|
||
|
|
default: reject
|
||
|
|
direction: incoming
|
||
|
|
register: default_idem
|
||
|
|
- name: Default (idempotency, check mode)
|
||
|
|
ufw:
|
||
|
|
default: reject
|
||
|
|
direction: incoming
|
||
|
|
check_mode: yes
|
||
|
|
register: default_idem_check
|
||
|
|
- name: Default (change, check mode)
|
||
|
|
ufw:
|
||
|
|
default: allow
|
||
|
|
direction: incoming
|
||
|
|
check_mode: yes
|
||
|
|
register: default_change_check
|
||
|
|
- name: Default (change)
|
||
|
|
ufw:
|
||
|
|
default: allow
|
||
|
|
direction: incoming
|
||
|
|
register: default_change
|
||
|
|
- name: Get defaults
|
||
|
|
shell: |
|
||
|
|
ufw status verbose | grep "^Default:"
|
||
|
|
register: ufw_defaults_change
|
||
|
|
- assert:
|
||
|
|
that:
|
||
|
|
# FIXME - default_check is changed
|
||
|
|
- default is changed
|
||
|
|
- "'reject (incoming)' in ufw_defaults.stdout"
|
||
|
|
- default_idem is not changed
|
||
|
|
- default_idem_check is not changed
|
||
|
|
# FIXME - default_change_check is changed
|
||
|
|
- default_change is changed
|
||
|
|
- "'allow (incoming)' in ufw_defaults_change.stdout"
|