Adds the bigip_password_policy module (#48951)

This module can be used to manage password policy settings on a BIG-IP
This commit is contained in:
Tim Rupp 2018-11-20 11:59:02 -08:00 committed by GitHub
commit fb782fa3e9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 605 additions and 0 deletions

View file

@ -0,0 +1,15 @@
{
"kind": "tm:auth:password-policy:password-policystate",
"selfLink": "https://localhost/mgmt/tm/auth/password-policy?ver=13.1.0.7",
"expirationWarning": 7,
"maxDuration": 99999,
"maxLoginFailures": 0,
"minDuration": 0,
"minimumLength": 6,
"passwordMemory": 0,
"policyEnforcement": "disabled",
"requiredLowercase": 0,
"requiredNumeric": 0,
"requiredSpecial": 0,
"requiredUppercase": 0
}

View file

@ -0,0 +1,151 @@
# -*- coding: utf-8 -*-
#
# Copyright: (c) 2018, F5 Networks Inc.
# GNU General Public License v3.0 (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
from __future__ import (absolute_import, division, print_function)
__metaclass__ = type
import os
import json
import pytest
import sys
from nose.plugins.skip import SkipTest
if sys.version_info < (2, 7):
raise SkipTest("F5 Ansible modules require Python >= 2.7")
from ansible.module_utils.basic import AnsibleModule
try:
from library.modules.bigip_password_policy import ApiParameters
from library.modules.bigip_password_policy import ModuleParameters
from library.modules.bigip_password_policy import ModuleManager
from library.modules.bigip_password_policy import ArgumentSpec
# In Ansible 2.8, Ansible changed import paths.
from test.units.compat import unittest
from test.units.compat.mock import Mock
from test.units.compat.mock import patch
from test.units.modules.utils import set_module_args
except ImportError:
from ansible.modules.network.f5.bigip_password_policy import ApiParameters
from ansible.modules.network.f5.bigip_password_policy import ModuleParameters
from ansible.modules.network.f5.bigip_password_policy import ModuleManager
from ansible.modules.network.f5.bigip_password_policy import ArgumentSpec
# Ansible 2.8 imports
from units.compat import unittest
from units.compat.mock import Mock
from units.compat.mock import patch
from units.modules.utils import set_module_args
fixture_path = os.path.join(os.path.dirname(__file__), 'fixtures')
fixture_data = {}
def load_fixture(name):
path = os.path.join(fixture_path, name)
if path in fixture_data:
return fixture_data[path]
with open(path) as f:
data = f.read()
try:
data = json.loads(data)
except Exception:
pass
fixture_data[path] = data
return data
class TestParameters(unittest.TestCase):
def test_module_parameters(self):
args = dict(
expiration_warning=7,
max_duration=99999,
max_login_failures=0,
min_duration=0,
min_length=6,
password_memory=0,
policy_enforcement=False,
required_lowercase=0,
required_numeric=0,
required_special=0,
required_uppercase=0,
)
p = ModuleParameters(params=args)
assert p.expiration_warning == 7
assert p.max_duration == 99999
assert p.max_login_failures == 0
assert p.min_duration == 0
assert p.password_memory == 0
assert p.policy_enforcement == 'no'
assert p.required_lowercase == 0
assert p.required_numeric == 0
assert p.required_special == 0
assert p.required_uppercase == 0
def test_api_parameters(self):
args = load_fixture('load_tm_auth_password_policy_1.json')
p = ApiParameters(params=args)
assert p.expiration_warning == 7
assert p.max_duration == 99999
assert p.max_login_failures == 0
assert p.min_duration == 0
assert p.password_memory == 0
assert p.policy_enforcement == 'no'
assert p.required_lowercase == 0
assert p.required_numeric == 0
assert p.required_special == 0
assert p.required_uppercase == 0
@patch('ansible.module_utils.f5_utils.AnsibleF5Client._get_mgmt_root',
return_value=True)
class TestManager(unittest.TestCase):
def setUp(self):
self.spec = ArgumentSpec()
def test_create_partition(self, *args):
set_module_args(dict(
expiration_warning=7,
max_duration=9999,
max_login_failures=0,
min_duration=0,
min_length=6,
password_memory=0,
policy_enforcement='no',
required_lowercase=0,
required_numeric=0,
required_special=0,
required_uppercase=0,
server='localhost',
password='password',
user='admin'
))
current = ApiParameters(params=load_fixture('load_tm_auth_password_policy_1.json'))
module = AnsibleModule(
argument_spec=self.spec.argument_spec,
supports_check_mode=self.spec.supports_check_mode
)
# Override methods in the specific type of manager
mm = ModuleManager(module=module)
mm.exists = Mock(side_effect=[False, True])
mm.update_on_device = Mock(return_value=True)
mm.read_current_from_device = Mock(return_value=current)
results = mm.exec_module()
assert results['changed'] is True