forked from ansible-lockdown/RHEL9-CIS
Lint for galaxy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
49d71ffc80
commit
6fdb18aece
11 changed files with 201 additions and 201 deletions
|
|
@ -5,23 +5,23 @@
|
|||
gather_facts: true
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
ansible_user: root
|
||||
system_is_container: true
|
||||
rhel9cis_selinux_disable: true
|
||||
rhel9cis_rule_5_3_4: false
|
||||
rhel9cis_rule_1_1_10: false
|
||||
rhel9cis_firewall: "none"
|
||||
rhel9cis_rule_4_1_1_1: false
|
||||
rhel9cis_rule_4_1_1_2: false
|
||||
rhel9cis_rule_4_1_1_3: false
|
||||
rhel9cis_rule_4_1_1_4: false
|
||||
rhel9cis_rule_4_2_1_2: false
|
||||
rhel9cis_rule_4_2_1_4: false
|
||||
rhel9cis_rule_5_1_1: false
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
ansible_user: root
|
||||
system_is_container: true
|
||||
rhel9cis_selinux_disable: true
|
||||
rhel9cis_rule_5_3_4: false
|
||||
rhel9cis_rule_1_1_10: false
|
||||
rhel9cis_firewall: "none"
|
||||
rhel9cis_rule_4_1_1_1: false
|
||||
rhel9cis_rule_4_1_1_2: false
|
||||
rhel9cis_rule_4_1_1_3: false
|
||||
rhel9cis_rule_4_1_1_4: false
|
||||
rhel9cis_rule_4_2_1_2: false
|
||||
rhel9cis_rule_4_2_1_4: false
|
||||
rhel9cis_rule_5_1_1: false
|
||||
|
||||
pre_tasks:
|
||||
tasks:
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
|
|
|
|||
|
|
@ -3,31 +3,31 @@
|
|||
# https://molecule.readthedocs.io/en/latest/
|
||||
|
||||
driver:
|
||||
name: docker
|
||||
name: docker
|
||||
|
||||
platforms:
|
||||
- name: ubi9
|
||||
image: registry.access.redhat.com/ubi9/ubi-init
|
||||
pre_build_image: true
|
||||
volumes:
|
||||
- /sys/fs/cgroup:/sys/fs/cgroup:ro
|
||||
privileged: true
|
||||
command: "/usr/sbin/init"
|
||||
capabilities:
|
||||
- SYS_ADMIN
|
||||
- name: ubi9
|
||||
image: registry.access.redhat.com/ubi9/ubi-init
|
||||
pre_build_image: true
|
||||
volumes:
|
||||
- /sys/fs/cgroup:/sys/fs/cgroup:ro
|
||||
privileged: true
|
||||
command: "/usr/sbin/init"
|
||||
capabilities:
|
||||
- SYS_ADMIN
|
||||
|
||||
provisioner:
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
|
||||
lint: |
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
|
||||
verifier:
|
||||
name: ansible
|
||||
name: ansible
|
||||
|
|
|
|||
|
|
@ -4,10 +4,10 @@
|
|||
gather_facts: false
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
|
||||
tasks:
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
|
|
|
|||
|
|
@ -6,12 +6,12 @@
|
|||
gather_facts: true
|
||||
|
||||
vars:
|
||||
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
rhel9cis_rule_5_3_4: false
|
||||
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
rhel9cis_rule_5_3_4: false
|
||||
|
||||
pre_tasks:
|
||||
tasks:
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
|
|
|
|||
|
|
@ -3,27 +3,27 @@
|
|||
# https://molecule.readthedocs.io/en/latest/
|
||||
|
||||
driver:
|
||||
name: delegated
|
||||
options:
|
||||
managed: false
|
||||
ansible_connection_options:
|
||||
ansible_connection: local
|
||||
name: delegated
|
||||
options:
|
||||
managed: false
|
||||
ansible_connection_options:
|
||||
ansible_connection: local
|
||||
platforms:
|
||||
- name: localhost
|
||||
- name: localhost
|
||||
|
||||
provisioner:
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
stdout_callback: yaml
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
stdout_callback: yaml
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
|
||||
lint: |
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
|
||||
verifier:
|
||||
name: ansible
|
||||
name: ansible
|
||||
|
|
|
|||
|
|
@ -5,10 +5,10 @@
|
|||
become: true
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
|
||||
tasks:
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
|
|
|
|||
|
|
@ -6,21 +6,21 @@
|
|||
gather_facts: true
|
||||
|
||||
vars:
|
||||
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||
system_is_container: true
|
||||
rhel8cis_selinux_disable: true
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
rhel8cis_rule_5_3_4: false
|
||||
rhel8cis_rule_1_1_10: false
|
||||
rhel8cis_rsyslog_ansiblemanaged: false
|
||||
rhel8cis_rule_3_4_1_3: false
|
||||
rhel8cis_rule_3_4_1_4: false
|
||||
rhel8cis_rule_4_2_1_2: false
|
||||
rhel8cis_rule_4_2_1_4: false
|
||||
rhel8cis_rule_5_1_1: false
|
||||
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||
system_is_container: true
|
||||
rhel8cis_selinux_disable: true
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
rhel8cis_rule_5_3_4: false
|
||||
rhel8cis_rule_1_1_10: false
|
||||
rhel8cis_rsyslog_ansiblemanaged: false
|
||||
rhel8cis_rule_3_4_1_3: false
|
||||
rhel8cis_rule_3_4_1_4: false
|
||||
rhel8cis_rule_4_2_1_2: false
|
||||
rhel8cis_rule_4_2_1_4: false
|
||||
rhel8cis_rule_5_1_1: false
|
||||
|
||||
pre_tasks:
|
||||
tasks:
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
|
|
|
|||
|
|
@ -3,26 +3,26 @@
|
|||
# https://molecule.readthedocs.io/en/latest/
|
||||
|
||||
driver:
|
||||
name: delegated
|
||||
options:
|
||||
managed: false
|
||||
ansible_connection_options:
|
||||
ansible_connection: local
|
||||
name: delegated
|
||||
options:
|
||||
managed: false
|
||||
ansible_connection_options:
|
||||
ansible_connection: local
|
||||
platforms:
|
||||
- name: localhost
|
||||
- name: localhost
|
||||
|
||||
provisioner:
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
|
||||
lint: |
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
|
||||
verifier:
|
||||
name: ansible
|
||||
name: ansible
|
||||
|
|
|
|||
|
|
@ -4,10 +4,10 @@
|
|||
gather_facts: false
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
|
||||
tasks:
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue