Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: Enable AD trust tests #1339

Draft
wants to merge 23 commits into
base: master
Choose a base branch
from

Conversation

rjeffman
Copy link
Member

@rjeffman rjeffman commented Feb 6, 2025

This is a work in progress to enable upstream tests that require that an AD trust is available.

Using pipes and redirections is ansible.builtin.shell allows the
occurence of pipe errors and makes the scripts more dificult to
read, as there's more 'boilerpart code' that is not nedded.

By using 'stdin' argument to this scripts the scripts bome easier
to read and to adapt to different values.

Signed-off-by: Rafael Guterres Jeffman <[email protected]>
@rjeffman rjeffman added the DRAFT label Feb 6, 2025
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch 2 times, most recently from f202942 to 72732e5 Compare February 6, 2025 17:47
Some tests require AD trust and some common variables related to the
domain controller and AD users.

This patch modifies the tests that require these tasks and vars to use
the same sources. With this change configuring the variables with
inventory files is easier and ensures that data used is valid.

Signed-off-by: Rafael Guterres Jeffman <[email protected]>
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch 4 times, most recently from b2bb86a to 039e2aa Compare February 8, 2025 00:06
Without a dnsforwardzone to the AD DC node setting the trust might fail.

Signed-off-by: Rafael Guterres Jeffman <[email protected]>
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 039e2aa to 8028268 Compare February 9, 2025 01:04
@rjeffman
Copy link
Member Author

rjeffman commented Feb 9, 2025

/azp run chekpr

Copy link

No pipelines are associated with this pull request.

@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch 4 times, most recently from a892d37 to 73c84eb Compare February 10, 2025 21:53
ipalab-config allows the creation of complex IPA environments using
rootless containers. For example, the tool provides the means to create
an environment where a trust can be set between IPA and Samba AD DC,
which is similar enough to Windows AD DC to be used in ansible-freeipa
testing.

To start a test scenario run 'infra/scenarios/start-scenario' passing
the scenario configuration as parameter. The configuration for the
scenario will be generated with 'ipalab-config', the containers will be
started, all the nodes will be deployed and the initial configuration
will be applied to the scenario. The configuration directory will be
moved to the repository root.

Only one scenario can be run at a single time.

When the tests are finished, 'infra/scenarios/stop-scenario' will
cleanup the environment, and a new scenario can be started. The
configuration directory created will not be removed, in this case, but
will be overwritten if a new scenario is created.

Signed-off-by: Rafael Guterres Jeffman <[email protected]>
Signed-off-by: Rafael Guterres Jeffman <[email protected]>
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 73c84eb to 461a215 Compare February 10, 2025 23:30
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 2f76da2 to 81572c5 Compare February 11, 2025 00:08
Signed-off-by: Rafael Guterres Jeffman <[email protected]>
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 1cdfb83 to 508d9dd Compare February 11, 2025 01:13
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 9c150d5 to 4642418 Compare February 11, 2025 12:15
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 4642418 to ca2c875 Compare February 11, 2025 14:32
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 30f4498 to 050da0d Compare February 12, 2025 20:54
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch 2 times, most recently from f7f0aa2 to 623629a Compare February 12, 2025 23:08
@rjeffman rjeffman force-pushed the enable_ad_trust_tests branch from 623629a to 47efbcf Compare February 12, 2025 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant