andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,925 Commits 14 Branches 64 Tags
0cd3b0d02edb0721413dea7e3d0ad1ed1111c11f
Commit Graph
71 Commits
Author SHA1 Message Date
schurzi 9b32aca0ca run our CI tests periodically (#634) 
* allow multiple instances for os vm tests

Signed-off-by: Martin Schurz <[email protected]>

* add scheduled trigger to all test actions

Signed-off-by: Martin Schurz <[email protected]>

* use different scenario names

Signed-off-by: Martin Schurz <[email protected]>

* use different scenario names

Signed-off-by: Martin Schurz <[email protected]>

* use different scenario names

Signed-off-by: Martin Schurz <[email protected]>

* use username to create uniqe vms

Signed-off-by: Martin Schurz <[email protected]>

* use compatible name

Signed-off-by: Martin Schurz <[email protected]>

* add explaination

Signed-off-by: Martin Schurz <[email protected]>

---------

Signed-off-by: Martin Schurz <[email protected]>
 2023-02-07 09:27:46 +01:00
schurzi 1ef9171393 remove unneccessary tasks for VM based test (#629) 
* add remaining platforms to test

Signed-off-by: Martin Schurz <[email protected]>

* remove unneccessary tasks for test

Signed-off-by: Martin Schurz <[email protected]>

* use current opensuse version

Signed-off-by: Martin Schurz <[email protected]>

* disable sysctl for missing yama in opensuse

Signed-off-by: Martin Schurz <[email protected]>

---------

Signed-off-by: Martin Schurz <[email protected]>
 2023-02-06 08:37:40 +01:00
dependabot[bot] f34f24deb7 Bump hugo19941994/delete-draft-releases from 1.0.0 to 1.0.1 (#627) 
Bumps [hugo19941994/delete-draft-releases](https://github.com/hugo19941994/delete-draft-releases) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/hugo19941994/delete-draft-releases/releases)
- [Commits](https://github.com/hugo19941994/delete-draft-releases/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: hugo19941994/delete-draft-releases
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-01 12:37:31 +01:00
Sebastian Gumprich 330a1eb94d run linting only when files inside roles change 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-01-30 10:23:25 +01:00
Sebastian Gumprich db4bd32767 cancel running tests if new commit to branch is made 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-01-24 13:08:04 +01:00
dependabot[bot] 16f78bc6be Bump actions/setup-python from 1 to 4 (#611) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 1 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v1...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-12-24 10:28:54 +01:00
dependabot[bot] 395091c41d Bump creyD/prettier_action from 3.1 to 4.2 (#610) 
Bumps [creyD/prettier_action](https://github.com/creyD/prettier_action) from 3.1 to 4.2.
- [Release notes](https://github.com/creyD/prettier_action/releases)
- [Commits](https://github.com/creyD/prettier_action/compare/v3.1...v4.2)

---
updated-dependencies:
- dependency-name: creyD/prettier_action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-12-17 19:53:05 +01:00
Sebastian GumprichandFlorian Goth e66c2eb6bb Add OpenSUSE support (#605) 
* Add variables for mariadb on opensuse

Signed-off-by: Florian Goth <[email protected]>

* enable pipeline

Signed-off-by: Florian Goth <[email protected]>

* add a note about the reuirement of the jmespath library.

Signed-off-by: Florian Goth <[email protected]>

* Use python3 on opensuse

Signed-off-by: Florian Goth <[email protected]>

* fix my yml.

Signed-off-by: Florian Goth <[email protected]>

* use right ansible variable

Signed-off-by: Florian Goth <[email protected]>

* Suse requires python-rpm

Signed-off-by: Florian Goth <[email protected]>

* try zypper

Signed-off-by: Florian Goth <[email protected]>

* python-xml

Signed-off-by: Florian Goth <[email protected]>

* another try at fixing the install

Signed-off-by: Florian Goth <[email protected]>

* fix my yml

Signed-off-by: Florian Goth <[email protected]>

* another try

Signed-off-by: Florian Goth <[email protected]>

* another try

Signed-off-by: Florian Goth <[email protected]>

* another try now with rpm.

Signed-off-by: Florian Goth <[email protected]>

* fix my yml...

Signed-off-by: Florian Goth <[email protected]>

* typo

Signed-off-by: Florian Goth <[email protected]>

* do the test for Suse on the shell and not in ansible

Signed-off-by: Florian Goth <[email protected]>

* specify to use bash

Signed-off-by: Florian Goth <[email protected]>

* specify to use bash

* try the removes keyword of builtin.shell

Signed-off-by: Florian Goth <[email protected]>

* fix ansible syntax

Signed-off-by: Florian Goth <[email protected]>

* fix zypper syntax

Signed-off-by: Florian Goth <[email protected]>

* ensure pymysql is present

Signed-off-by: Florian Goth <[email protected]>

* set ansible python interpreter in converge-step, too

Signed-off-by: Sebastian Gumprich <[email protected]>

* move install task to prepare

Signed-off-by: Sebastian Gumprich <[email protected]>

Signed-off-by: Florian Goth <[email protected]>
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Florian Goth <[email protected]>
 2022-11-29 15:09:27 +01:00
Martin Schurz c30ef42355 exclude el9 from vm tests 
Signed-off-by: Martin Schurz <[email protected]>
 2022-10-25 18:59:11 +02:00
Sebastian Gumprich 414efd6125 use correct centos stream images, try to fix prepare step for debian tests 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2022-10-25 18:59:11 +02:00
Sebastian Gumprich a176443f22 add support for centos stream 8 and 9, rocky 9 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2022-10-24 10:03:07 +02:00
Sebastian Gumprich 44489dea5f run tests only on pushes to master or to PRs (#581) 
Signed-off-by: Sebastian Gumprich <[email protected]>

Signed-off-by: Sebastian Gumprich <[email protected]>
 2022-09-28 10:44:31 +02:00
Sebastian Gumprich 11d187e62e update supported OS in meta and fix linting (#572) 
Signed-off-by: Sebastian Gumprich <[email protected]>

Signed-off-by: Sebastian Gumprich <[email protected]>
 2022-08-26 13:44:51 +02:00
Sebastian Gumprich fbea75ad18 only run release actions on upstream-repo (#568) 
fixes #566

Signed-off-by: Sebastian Gumprich <[email protected]>

Signed-off-by: Sebastian Gumprich <[email protected]>
 2022-08-26 09:40:59 +02:00
Daya AdiantoSebastian GumprichSebastian Gumprich
 		eef8708918 Add full support for Debian 11 (#538) 
* Include Debian 11 into Molecule test suites (#527)

Signed-off-by: Daya Adianto <[email protected]>

* Fix Ansible Lint GitHub Action version (#527)

Signed-off-by: Daya Adianto <[email protected]>

* Update .gitignore

Signed-off-by: Daya Adianto <[email protected]>

* mysql_hardening: Use Python 3 as Ansible interpreter (#527)

Signed-off-by: Daya Adianto <[email protected]>

* Note Debian 11 support for os_hardening & nginx_hardening (#527)

Signed-off-by: Daya Adianto <[email protected]>

* Fix lint issues & Ansible Lint configuration in CI

Signed-off-by: Daya Adianto <[email protected]>

* Try to fix YAML lint issues, again

Re-ordered YAML comments at the end of `.yamllint` file.

Signed-off-by: Daya Adianto <[email protected]>

* rm debian9 from tests, add debian 11 where missing

Signed-off-by: Sebastian Gumprich <[email protected]>

* fix mysql molecule tests

Signed-off-by: Sebastian Gumprich <[email protected]>

Signed-off-by: Daya Adianto <[email protected]>
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
 2022-08-16 15:02:27 +02:00
schurzi b56c801574 add basic support for ubuntu22.04 (#554) 
Signed-off-by: Martin Schurz <[email protected]>

Signed-off-by: Martin Schurz <[email protected]>
 2022-08-15 13:05:09 +02:00
Martin Schurz 0f631c1405 add sysctl exclude 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-11 09:39:52 +02:00
Martin Schurz 92dc094022 add sysctl exclude 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-11 09:05:58 +02:00
Martin Schurz fdc6b333c9 exclude arch 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-10 21:30:45 +02:00
Martin Schurz 1825eba27a exclude opensuse 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-10 21:08:50 +02:00
Martin Schurz 730510c2a7 add opensuse and arch 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-10 15:55:08 +02:00
Martin Schurz 7535abd882 remove waiver 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-09 02:22:35 +02:00
Martin Schurz 400e576984 use correct parameter 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-09 01:47:59 +02:00
Martin Schurz 0eddf2872b setup python 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-09 01:19:12 +02:00
Martin Schurz 013a554731 force linking 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-09 00:59:50 +02:00
Martin Schurz 8f3f724380 call correct molecule task 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-09 00:57:26 +02:00
Martin Schurz e742330a41 add testing of os_hardning on vm 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-09 00:52:58 +02:00
Martin Schurz 02b9a20fe7 fix release action 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-07 12:06:34 +02:00
Martin Schurz f627d2fbfd fix release action 
Signed-off-by: Martin Schurz <[email protected]>
 2022-07-07 11:27:51 +02:00
Martin Schurz b32ee28a89 use correct version for github-actions-x/commit 
Signed-off-by: Martin Schurz <[email protected]>
 2022-06-29 15:55:13 +02:00
Martin Schurz 0c8cbb2185 update GitHub action for checkout 
there was a new feature introduced to git, that prevents some of our
actions to run. The updated action handles this properly.

https://github.com/actions/checkout/issues/760

Signed-off-by: Martin Schurz <[email protected]>
 2022-06-29 15:34:39 +02:00
Sebastian Gumprich 231036f882 update commit-action version 2022-06-29 12:59:44 +02:00
Sebastian Gumprich 36412f438a upadte commit-action version 2022-06-29 12:56:28 +02:00
Martin Schurz 79fb86d021 fix linter errors 
Signed-off-by: Martin Schurz <[email protected]>
 2022-05-04 14:12:24 +02:00
Martin Schurz bff23f82cb update ansible-lint action 
Signed-off-by: Martin Schurz <[email protected]>
 2022-05-04 13:57:52 +02:00
Martin Schurz 9d00c8ba29 delete old release drafts 
Signed-off-by: Martin Schurz <[email protected]>
 2022-02-25 20:10:36 +01:00
rndmh3ro b74e88723d remove centos8 tests 
Signed-off-by: rndmh3ro <[email protected]>
 2022-02-21 08:05:40 +01:00
Sebastian Gumprich 2ba40b0891 move sysctls to debian specific vars (#524) 
* fix ansible-lint issue

https://github.com/ansible-community/ansible-lint/issues/1795
Signed-off-by: rndmh3ro <[email protected]>

* move 2 sysctls to debian specific

Signed-off-by: rndmh3ro <[email protected]>

* fix ansible-lint issue

https://github.com/ansible-community/ansible-lint/issues/1795
Signed-off-by: rndmh3ro <[email protected]>

* add arch linux sysctls

* simplify sysctl settings

Signed-off-by: rndmh3ro <[email protected]>

* ove overwrite to the bottom to let it acutally overwrite something

Signed-off-by: rndmh3ro <[email protected]>

* fix typo

Signed-off-by: rndmh3ro <[email protected]>
 2022-02-18 15:30:32 +01:00
Sebastian Gumprich f09b2b6338 fix molecule call 2021-10-25 10:26:56 +02:00
rndmh3ro 3877a9bab1 fix comment 
Signed-off-by: rndmh3ro <[email protected]>
 2021-10-18 22:00:01 +02:00
rndmh3ro 55c83ac92d use second molecule scenario for custom ssh tests 
Signed-off-by: rndmh3ro <[email protected]>
 2021-10-18 21:49:24 +02:00
rndmh3ro bbc827e4a1 use second molecule scenario for custom ssh tests 
Signed-off-by: rndmh3ro <[email protected]>
 2021-10-18 21:33:45 +02:00
rndmh3ro 7b37e9890e rename ansible-lint task 
Signed-off-by: rndmh3ro <[email protected]>
 2021-08-15 20:16:56 +02:00
rndmh3ro 6fa7f7a0c8 add new linting action to replace molecules linting 
molecule lints multiple times per action

Signed-off-by: rndmh3ro <[email protected]>
 2021-08-15 20:16:56 +02:00
Sebastian Gumprich 72ec118a6d add rocky linux 8 tests and make sure that all relevant tasks are execd (#457) 
* add rocky linux 8 tests and make sure that all relevant tasks are executed

Signed-off-by: rndmh3ro <[email protected]>

* fix missing quote

Signed-off-by: rndmh3ro <[email protected]>
 2021-06-30 13:09:12 +02:00
Martin Schurz 8dbeae7b39 limit changelog labels to role names 
Signed-off-by: Martin Schurz <[email protected]>
 2021-05-05 22:53:20 +02:00
Sebastian Gumprich 45711874e6 test release workflow with labels 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2021-04-29 07:46:06 +02:00
Sebastian Gumprich 2fb54bd224 remove secure-auth param if mysql => 8.0.3 
Signed-off-by: Sebastian Gumprich <[email protected]>

install collection in molecule

Signed-off-by: Sebastian Gumprich <[email protected]>

remove deprecated ubuntu 16.04 from tests

Signed-off-by: Sebastian Gumprich <[email protected]>
 2021-04-01 13:20:58 +02:00
Martin Schurz cd4925d411 checkout master between 
Signed-off-by: Martin Schurz <[email protected]>
 2021-03-16 11:07:21 +01:00
Martin Schurz d1b8e7d7a3 update paths 
Signed-off-by: Martin Schurz <[email protected]>
 2021-03-16 11:00:40 +01:00