ci: https_revproxy molecule verify step

This commit is contained in:
Guido Grazioli 2023-11-13 18:24:06 +01:00
commit efc3e547fe

View file

@ -1,6 +1,6 @@
--- ---
- name: Verify - name: Verify
hosts: all hosts: instance
tasks: tasks:
- name: Populate service facts - name: Populate service facts
ansible.builtin.service_facts: ansible.builtin.service_facts:
@ -12,22 +12,17 @@
- ansible_facts.services["keycloak.service"]["status"] == "enabled" - ansible_facts.services["keycloak.service"]["status"] == "enabled"
- name: Verify openid config - name: Verify openid config
run_once: True
block: block:
- name: Fetch openID config # noqa blocked_modules command-instead-of-module - name: Fetch openID config # noqa blocked_modules command-instead-of-module
ansible.builtin.uri: ansible.builtin.uri:
url: https://localhost:443/realms/master/.well-known/openid-configuration url: http://localhost:8080/realms/master/.well-known/openid-configuration
validate_certs: false validate_certs: false
headers: headers:
Host: proxy Host: proxy
register: openid_config register: openid_config
changed_when: False changed_when: False
delegate_to: localhost
- name: Verify endpoint URLs - name: Verify endpoint URLs
ansible.builtin.assert: ansible.builtin.assert:
that: that:
- openid_config.json["backchannel_authentication_endpoint"] == 'https://proxy/realms/master/protocol/openid-connect/ext/ciba/auth'
- openid_config.json['issuer'] == 'https://proxy/realms/master' - openid_config.json['issuer'] == 'https://proxy/realms/master'
- openid_config.json['authorization_endpoint'] == 'https://proxy/realms/master/protocol/openid-connect/auth' - openid_config.json['authorization_endpoint'] == 'https://proxy/realms/master/protocol/openid-connect/auth'
- openid_config.json['token_endpoint'] == 'https://proxy/realms/master/protocol/openid-connect/token'
delegate_to: localhost