Make Audita configuration field-specific
This commit is contained in:
@@ -106,25 +106,6 @@ metadata_repeat_log="$test_tmp/metadata-repeat.log"
|
||||
run_converge "$metadata_repeat_log"
|
||||
require_clean_recap "$metadata_repeat_log"
|
||||
|
||||
custom_config='{"audita_config": {"version": 1, "context": {"description": "Focused integration coverage"}}}'
|
||||
config_log="$test_tmp/config.log"
|
||||
run_converge "$config_log" -e "$custom_config"
|
||||
require_changed_recap "$config_log"
|
||||
grep -A1 -E 'TASK .*Build Audita' "$config_log" | grep -q '^skipping:'
|
||||
grep -A1 -E 'TASK .*Write Audita configuration' "$config_log" | grep -q '^changed:'
|
||||
validate_config
|
||||
config_repeat_log="$test_tmp/config-repeat.log"
|
||||
run_converge "$config_repeat_log" -e "$custom_config"
|
||||
require_clean_recap "$config_repeat_log"
|
||||
|
||||
default_config_log="$test_tmp/default-config.log"
|
||||
run_converge "$default_config_log"
|
||||
require_changed_recap "$default_config_log"
|
||||
grep -A1 -E 'TASK .*Build Audita' "$default_config_log" | grep -q '^skipping:'
|
||||
default_config_repeat_log="$test_tmp/default-config-repeat.log"
|
||||
run_converge "$default_config_repeat_log"
|
||||
require_clean_recap "$default_config_repeat_log"
|
||||
|
||||
alternate_release_log="$test_tmp/alternate-release.log"
|
||||
run_converge "$alternate_release_log" -e "audita_version=$alternate_commit"
|
||||
require_changed_recap "$alternate_release_log"
|
||||
|
||||
@@ -69,6 +69,17 @@
|
||||
- audita_config_metadata.stat.gr_name == "root"
|
||||
- audita_config_metadata.stat.mode == "0644"
|
||||
|
||||
- name: Read default configuration
|
||||
become: true
|
||||
ansible.builtin.slurp:
|
||||
src: /usr/local/etc/audita/config.yml
|
||||
register: audita_default_config
|
||||
|
||||
- name: Check default configuration
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- '(audita_default_config.content | b64decode | from_yaml) == {"version": 1}'
|
||||
|
||||
- name: Validate Audita configuration
|
||||
ansible.builtin.command:
|
||||
argv:
|
||||
|
||||
Reference in New Issue
Block a user