aci_aaa_user_certificate: Add a certificate to an AAA user (#34602)

* aci_user_certificate: Add a certificate to a user

A new ACI module to add a X.509 certificate to a user.

* Add integration tests

test/integration/targets/aci_aaa_user_certificate/pki/admin.crt

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

test/integration/targets/aci_aaa_user_certificate/pki/admin.key

@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

test/integration/targets/aci_aaa_user_certificate/tasks/main.yml

@@ -0,0 +1,136 @@
+# Test code for the ACI modules
+# Copyright: (c) 2017, Dag Wieers (dagwieers) <dag@wieers.com>
+#
+# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
+#
+- name: Test that we have an ACI APIC host, ACI username and ACI password
+  fail:
+    msg: 'Please define the following variables: aci_hostname, aci_username and aci_password.'
+    when: aci_hostname is not defined or aci_username is not defined or aci_password is not defined
+
+
+# CLEAN ENVIRONMENT
+- name: Remove any pre-existing certificate
+  aci_aaa_user_certificate: &cert_absent
+    hostname: '{{ aci_hostname }}'
+    username: '{{ aci_username }}'
+    password: '{{ aci_password }}'
+    use_proxy: no
+    validate_certs: no
+    user: admin
+    certificate_name: admin
+    state: absent
+  delegate_to: localhost
+
+
+# ADD USER CERTIFICATE
+- name: Add user certificate (check_mode)
+  aci_aaa_user_certificate: &cert_present
+    hostname: '{{ aci_hostname }}'
+    username: '{{ aci_username }}'
+    password: '{{ aci_password }}'
+    use_proxy: no
+    validate_certs: no
+    user: admin
+    certificate_name: admin
+    certificate: "{{ lookup('file', 'pki/admin.crt') }}"
+    state: present
+  check_mode: yes
+  delegate_to: localhost
+  register: cm_add_cert
+
+- name: Add user certificate (normal mode)
+  aci_aaa_user_certificate: *cert_present
+  delegate_to: localhost
+  register: nm_add_cert
+
+- name: Add user certificate again (check mode)
+  aci_aaa_user_certificate: *cert_present
+  check_mode: yes
+  delegate_to: localhost
+  register: cm_add_cert_again
+
+- name: Add user certificate again (normal mode)
+  aci_aaa_user_certificate: *cert_present
+  delegate_to: localhost
+  register: nm_add_cert_again
+
+- name: Verify add_cert
+  assert:
+    that:
+    - cm_add_cert.changed == nm_add_cert.changed == true
+    - cm_add_cert_again.changed == nm_add_cert_again.changed == false
+
+
+# QUERY ALL USER CERTIFICATES
+- name: Query all user certificates (check_mode)
+  aci_aaa_user_certificate: &cert_query
+    hostname: '{{ aci_hostname }}'
+    username: '{{ aci_username }}'
+    password: '{{ aci_password }}'
+    use_proxy: no
+    validate_certs: no
+    user: admin
+    state: query
+  check_mode: yes
+  delegate_to: localhost
+  register: cm_query_all_certs
+
+- name: Query all user certificates (normal mode)
+  aci_aaa_user_certificate: *cert_query
+  delegate_to: localhost
+  register: nm_query_all_certs
+
+- name: Verify query_all_certs
+  assert:
+    that:
+    - cm_query_all_certs.changed == nm_query_all_certs.changed == false
+    # NOTE: Order of certs is not stable between calls
+    #- cm_query_all_certs == nm_query_all_certs
+
+
+# QUERY OUR USER CERTIFICATE
+- name: Query our certificate (check_mode)
+  aci_aaa_user_certificate:
+    <<: *cert_query
+    certificate_name: admin
+  check_mode: yes
+  register: cm_query_cert
+
+- name: Query our certificate (normal mode)
+  aci_aaa_user_certificate:
+    <<: *cert_query
+    certificate_name: admin
+  register: nm_query_cert
+
+- name: Verify query_cert
+  assert:
+    that:
+    - cm_query_cert.changed == nm_query_cert.changed == false
+    - cm_query_cert == nm_query_cert
+
+
+# REMOVE CERTIFICATE
+- name: Remove certificate (check_mode)
+  aci_tenant: *cert_absent
+  check_mode: yes
+  register: cm_remove_cert
+
+- name: Remove certificate (normal mode)
+  aci_tenant: *cert_absent
+  register: nm_remove_cert
+
+- name: Remove certificate again (check_mode)
+  aci_tenant: *cert_absent
+  check_mode: yes
+  register: cm_remove_cert_again
+
+- name: Remove certificate again (normal mode)
+  aci_tenant: *cert_absent
+  register: nm_remove_cert_again
+
+- name: Verify remove_cert
+  assert:
+    that:
+    - cm_remove_cert.changed == nm_remove_cert.changed == true
+    - cm_remove_cert_again.changed == nm_remove_cert_again.changed == false