collection 교체

This commit is contained in:
정훈 변
2024-02-23 16:37:40 +09:00
parent b494779b5b
commit 3fd554eee9
38862 changed files with 220204 additions and 6600073 deletions

View File

@@ -1,12 +1,19 @@
shippable/posix/group2
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
azp/posix/2
azp/posix/vm
skip/aix
skip/osx
skip/macos
skip/freebsd
skip/rhel8.0
skip/rhel8.0b
skip/rhel8.1b
skip/rhel8.0 # FIXME
skip/rhel9.0 # FIXME
skip/rhel9.1 # FIXME
skip/rhel9.2 # FIXME
skip/rhel9.3 # FIXME
skip/docker
needs/root
destructive
needs/target/setup_epel
destructive

View File

@@ -1,2 +1,7 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
dependencies:
- setup_pkg_mgr

View File

@@ -4,18 +4,24 @@
# and should not be used as examples of how to write Ansible roles #
####################################################################
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
# Make sure ufw is installed
- name: Install EPEL repository (RHEL only)
include_role:
name: setup_epel
when: ansible_distribution == 'RedHat'
when:
- ansible_distribution in ['RedHat', 'CentOS']
- ansible_distribution_major_version is version('9', '<')
- name: Install iptables (SuSE only)
package:
name: iptables
become: yes
become: true
when: ansible_os_family == 'Suse'
- name: Install ufw
become: yes
become: true
package:
name: ufw
@@ -24,7 +30,7 @@
- include_tasks: run-test.yml
with_fileglob:
- "tests/*.yml"
become: yes
become: true
# Cleanup
always:

View File

@@ -1,4 +1,8 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
- pause:
# ufw creates backups of the rule files with a timestamp; if reset is called
# twice in a row fast enough (so that both timestamps are taken in the same second),

View File

@@ -1,4 +1,8 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
# ############################################
- name: Make sure it is off
ufw:
@@ -6,7 +10,7 @@
- name: Enable (check mode)
ufw:
state: enabled
check_mode: yes
check_mode: true
register: enable_check
- name: Enable
ufw:
@@ -19,7 +23,7 @@
- name: Enable (idempotency, check mode)
ufw:
state: enabled
check_mode: yes
check_mode: true
register: enable_idem_check
- assert:
that:
@@ -34,7 +38,7 @@
rule: allow
port: 23
to_ip: 0.0.0.0
check_mode: yes
check_mode: true
register: ipv4_allow_check
- name: ipv4 allow
ufw:
@@ -53,7 +57,7 @@
rule: allow
port: 23
to_ip: 0.0.0.0
check_mode: yes
check_mode: true
register: ipv4_allow_idem_check
- assert:
that:
@@ -68,30 +72,30 @@
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv4_allow_check
- name: delete ipv4 allow
ufw:
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
delete: true
register: delete_ipv4_allow
- name: delete ipv4 allow (idempotency)
ufw:
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
delete: true
register: delete_ipv4_allow_idem
- name: delete ipv4 allow (idempotency, check mode)
ufw:
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv4_allow_idem_check
- assert:
that:
@@ -106,7 +110,7 @@
rule: allow
port: 23
to_ip: "::"
check_mode: yes
check_mode: true
register: ipv6_allow_check
- name: ipv6 allow
ufw:
@@ -125,7 +129,7 @@
rule: allow
port: 23
to_ip: "::"
check_mode: yes
check_mode: true
register: ipv6_allow_idem_check
- assert:
that:
@@ -140,30 +144,30 @@
rule: allow
port: 23
to_ip: "::"
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv6_allow_check
- name: delete ipv6 allow
ufw:
rule: allow
port: 23
to_ip: "::"
delete: yes
delete: true
register: delete_ipv6_allow
- name: delete ipv6 allow (idempotency)
ufw:
rule: allow
port: 23
to_ip: "::"
delete: yes
delete: true
register: delete_ipv6_allow_idem
- name: delete ipv6 allow (idempotency, check mode)
ufw:
rule: allow
port: 23
to_ip: "::"
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv6_allow_idem_check
- assert:
that:
@@ -179,7 +183,7 @@
rule: allow
port: 23
to_ip: 0.0.0.0
check_mode: yes
check_mode: true
register: ipv4_allow_check
- name: ipv4 allow
ufw:
@@ -198,7 +202,7 @@
rule: allow
port: 23
to_ip: 0.0.0.0
check_mode: yes
check_mode: true
register: ipv4_allow_idem_check
- assert:
that:
@@ -213,30 +217,30 @@
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv4_allow_check
- name: delete ipv4 allow
ufw:
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
delete: true
register: delete_ipv4_allow
- name: delete ipv4 allow (idempotency)
ufw:
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
delete: true
register: delete_ipv4_allow_idem
- name: delete ipv4 allow (idempotency, check mode)
ufw:
rule: allow
port: 23
to_ip: 0.0.0.0
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv4_allow_idem_check
- assert:
that:
@@ -251,7 +255,7 @@
rule: allow
port: 23
to_ip: "::"
check_mode: yes
check_mode: true
register: ipv6_allow_check
- name: ipv6 allow
ufw:
@@ -270,7 +274,7 @@
rule: allow
port: 23
to_ip: "::"
check_mode: yes
check_mode: true
register: ipv6_allow_idem_check
- assert:
that:
@@ -285,30 +289,30 @@
rule: allow
port: 23
to_ip: "::"
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv6_allow_check
- name: delete ipv6 allow
ufw:
rule: allow
port: 23
to_ip: "::"
delete: yes
delete: true
register: delete_ipv6_allow
- name: delete ipv6 allow (idempotency)
ufw:
rule: allow
port: 23
to_ip: "::"
delete: yes
delete: true
register: delete_ipv6_allow_idem
- name: delete ipv6 allow (idempotency, check mode)
ufw:
rule: allow
port: 23
to_ip: "::"
delete: yes
check_mode: yes
delete: true
check_mode: true
register: delete_ipv6_allow_idem_check
- assert:
that:
@@ -325,7 +329,7 @@
- name: Reload ufw (check mode)
ufw:
state: reloaded
check_mode: yes
check_mode: true
register: reload_check
- assert:
that:
@@ -336,7 +340,7 @@
- name: Disable (check mode)
ufw:
state: disabled
check_mode: yes
check_mode: true
register: disable_check
- name: Disable
ufw:
@@ -349,7 +353,7 @@
- name: Disable (idempotency, check mode)
ufw:
state: disabled
check_mode: yes
check_mode: true
register: disable_idem_check
- assert:
that:
@@ -365,7 +369,7 @@
- name: Reset (check mode)
ufw:
state: reset
check_mode: yes
check_mode: true
register: reset_check
- pause:
# Should not be needed, but since ufw is ignoring --dry-run for reset
@@ -392,7 +396,7 @@
- name: Reset (idempotency, check mode)
ufw:
state: reset
check_mode: yes
check_mode: true
register: reset_idem_check
- assert:
that:

View File

@@ -1,4 +1,8 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
- name: Enable ufw
ufw:
state: enabled
@@ -6,15 +10,15 @@
# ############################################
- name: Make sure logging is off
ufw:
logging: no
logging: false
- name: Logging (check mode)
ufw:
logging: yes
check_mode: yes
logging: true
check_mode: true
register: logging_check
- name: Logging
ufw:
logging: yes
logging: true
register: logging
- name: Get logging
shell: |
@@ -24,17 +28,17 @@
LC_ALL: C
- name: Logging (idempotency)
ufw:
logging: yes
logging: true
register: logging_idem
- name: Logging (idempotency, check mode)
ufw:
logging: yes
check_mode: yes
logging: true
check_mode: true
register: logging_idem_check
- name: Logging (change, check mode)
ufw:
logging: full
check_mode: yes
check_mode: true
register: logging_change_check
- name: Logging (change)
ufw:
@@ -62,7 +66,7 @@
ufw:
default: reject
direction: incoming
check_mode: yes
check_mode: true
register: default_check
- name: Default
ufw:
@@ -84,13 +88,13 @@
ufw:
default: reject
direction: incoming
check_mode: yes
check_mode: true
register: default_idem_check
- name: Default (change, check mode)
ufw:
default: allow
direction: incoming
check_mode: yes
check_mode: true
register: default_change_check
- name: Default (change)
ufw:
@@ -111,7 +115,7 @@
- name: Default (change incoming implicitly, check mode)
ufw:
default: allow
check_mode: yes
check_mode: true
register: default_change_implicit_check
- name: Default (change incoming implicitly)
ufw:
@@ -126,7 +130,7 @@
- name: Default (change incoming implicitly, idempotent, check mode)
ufw:
default: allow
check_mode: yes
check_mode: true
register: default_change_implicit_idem_check
- name: Default (change incoming implicitly, idempotent)
ufw:

View File

@@ -1,4 +1,8 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
- name: Enable
ufw:
state: enabled

View File

@@ -1,3 +1,8 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
- name: Enable
ufw:
state: enabled
@@ -5,7 +10,7 @@
- name: Route with interface in and out
ufw:
rule: allow
route: yes
route: true
interface_in: foo
interface_out: bar
proto: tcp
@@ -17,7 +22,7 @@
- name: Route with interface in
ufw:
rule: allow
route: yes
route: true
interface_in: foo
proto: tcp
from_ip: 1.1.1.1
@@ -26,7 +31,7 @@
- name: Route with interface out
ufw:
rule: allow
route: yes
route: true
interface_out: bar
proto: tcp
from_ip: 1.1.1.1
@@ -72,7 +77,7 @@
from_port: 1111
to_ip: 8.8.8.8
to_port: 2222
ignore_errors: yes
ignore_errors: true
register: ufw_non_route_iface
- assert: