42 lines
1.3 KiB
Bash
Executable File
42 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
repository_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
|
|
workspace_venv="$repository_root/../.venv"
|
|
test_tmp=$(mktemp -d)
|
|
chmod 0700 "$test_tmp"
|
|
|
|
export ANSIBLE_COLLECTIONS_PATH="$test_tmp/collections"
|
|
export ANSIBLE_ROLES_PATH="$(dirname "$repository_root")"
|
|
|
|
inventory="$repository_root/tests/inventory"
|
|
converge="$repository_root/tests/converge.yml"
|
|
verify="$repository_root/tests/verify.yml"
|
|
ansible_playbook="$workspace_venv/bin/ansible-playbook"
|
|
default_commit=a84941d68168a1ed9ea7423b6477ae8218be73f9
|
|
|
|
cleanup() {
|
|
rm -rf -- "$test_tmp"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
require_clean_recap() {
|
|
grep -Eq 'changed=0 .*failed=0' "$1"
|
|
}
|
|
|
|
cd "$repository_root"
|
|
"$workspace_venv/bin/ansible-galaxy" collection install \
|
|
-r collections/requirements.yml \
|
|
-p "$ANSIBLE_COLLECTIONS_PATH"
|
|
"$ansible_playbook" -i "$inventory" --syntax-check "$converge"
|
|
"$workspace_venv/bin/ansible-lint" "$converge" "$verify"
|
|
|
|
baseline_log="$test_tmp/baseline.log"
|
|
"$ansible_playbook" -i "$inventory" "$converge" | tee "$baseline_log"
|
|
"$ansible_playbook" -i "$inventory" \
|
|
-e "audita_expected_commit=$default_commit" \
|
|
"$verify"
|
|
baseline_repeat_log="$test_tmp/baseline-repeat.log"
|
|
"$ansible_playbook" -i "$inventory" "$converge" | tee "$baseline_repeat_log"
|
|
require_clean_recap "$baseline_repeat_log"
|