mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-10-03 23:14:02 -07:00
win_firewall_rule only change arguments passed by user (#54297)
* win_firewall_rule only changes specified arguments defaults are controlled by com object integration test for built in rule * removed ignore psaliases for win_firewall_rule * direction and action are no longer required program and service respect default values documentation updated to reflect that defaults apply to rule creation added test to disable a rule and verify other values have not changed * fixed extra whitespace * Move each description sentance to a new entry
This commit is contained in:
parent
365db9057c
commit
2b049238d6
4 changed files with 103 additions and 112 deletions
|
@ -95,6 +95,24 @@
|
|||
that:
|
||||
- change_firewall_rule.changed == true
|
||||
|
||||
- name: Disable firewall rule
|
||||
win_firewall_rule:
|
||||
name: http
|
||||
enabled: no
|
||||
|
||||
- name: Get the actual values from the changed firewall rule
|
||||
win_shell: '(New-Object -ComObject HNetCfg.FwPolicy2).Rules | Where-Object { $_.Name -eq "http" } | Foreach-Object { $_.LocalPorts; $_.Enabled; $_.Action; $_.Direction; $_.Protocol }'
|
||||
register: firewall_rule_actual
|
||||
|
||||
- name: Ensure that disabling the rule did not change the previous values
|
||||
assert:
|
||||
that:
|
||||
- "firewall_rule_actual.stdout_lines[0] == '80'" # LocalPorts = 80
|
||||
- "firewall_rule_actual.stdout_lines[1] == 'False'" # Enabled = False
|
||||
- "firewall_rule_actual.stdout_lines[2] == '0'" # Action = block
|
||||
- "firewall_rule_actual.stdout_lines[3] == '1'" # Direction = in
|
||||
- "firewall_rule_actual.stdout_lines[4] == '6'" # Protocol = tcp
|
||||
|
||||
- name: Add firewall rule when remoteip is range
|
||||
win_firewall_rule:
|
||||
name: http
|
||||
|
|
|
@ -72,7 +72,6 @@ lib/ansible/modules/windows/win_file_version.ps1 PSCustomUseLiteralPath
|
|||
lib/ansible/modules/windows/win_find.ps1 PSAvoidTrailingWhitespace
|
||||
lib/ansible/modules/windows/win_find.ps1 PSAvoidUsingEmptyCatchBlock
|
||||
lib/ansible/modules/windows/win_find.ps1 PSAvoidUsingWMICmdlet
|
||||
lib/ansible/modules/windows/win_firewall_rule.ps1 PSAvoidUsingCmdletAliases
|
||||
lib/ansible/modules/windows/win_firewall_rule.ps1 PSUseApprovedVerbs
|
||||
lib/ansible/modules/windows/win_get_url.ps1 PSUsePSCredentialType # Credential param can take a base64 encoded string as well as a PSCredential
|
||||
lib/ansible/modules/windows/win_hotfix.ps1 PSAvoidTrailingWhitespace
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue