Install and configure Audita

tests/integration

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repository_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+workspace_venv="$repository_root/../.venv"
+test_tmp=$(mktemp -d)
+chmod 0700 "$test_tmp"
+
+export ANSIBLE_COLLECTIONS_PATH="$test_tmp/collections"
+export ANSIBLE_ROLES_PATH="$(dirname "$repository_root")"
+
+inventory="$repository_root/tests/inventory"
+converge="$repository_root/tests/converge.yml"
+verify="$repository_root/tests/verify.yml"
+ansible_playbook="$workspace_venv/bin/ansible-playbook"
+default_commit=a84941d68168a1ed9ea7423b6477ae8218be73f9
+
+cleanup() {
+  rm -rf -- "$test_tmp"
+}
+trap cleanup EXIT
+
+require_clean_recap() {
+  grep -Eq 'changed=0 .*failed=0' "$1"
+}
+
+cd "$repository_root"
+"$workspace_venv/bin/ansible-galaxy" collection install \
+  -r collections/requirements.yml \
+  -p "$ANSIBLE_COLLECTIONS_PATH"
+"$ansible_playbook" -i "$inventory" --syntax-check "$converge"
+"$workspace_venv/bin/ansible-lint" "$converge" "$verify"
+
+baseline_log="$test_tmp/baseline.log"
+"$ansible_playbook" -i "$inventory" "$converge" | tee "$baseline_log"
+"$ansible_playbook" -i "$inventory" \
+  -e "audita_expected_commit=$default_commit" \
+  "$verify"
+baseline_repeat_log="$test_tmp/baseline-repeat.log"
+"$ansible_playbook" -i "$inventory" "$converge" | tee "$baseline_repeat_log"
+require_clean_recap "$baseline_repeat_log"