ansible-collections/community.docker
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.docker.git synced 2026-07-29 11:55:04 +00:00
Code Packages Projects Releases Wiki Activity

Implement cap_add and cap_drop handling for docker_swarm_service (#294)

Browse Source 
* Implement `cap_add` and `cap_drop` handling for `docker_swarm_service`

* Fix typos in changelog fragment

* Add missing `version_added` docstrings to `docker_swarm_service`

* Check api version too in `docker_swarm_service` capability tests

* Fix API version checking in tests for docker_swarm_service

Co-authored-by: Felix Fontein <felix@fontein.de>

* Add `cap_add` and `cap_drop` to sample output for `docker_swarm_service`

* Use proper diff checking for `docker_swarm_service` capabilities

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
András Maróy
2022-02-12 07:30:44 +00:00
committed by GitHub
parent 1d062dad5c
commit 3ad49824db
4 changed files with 119 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/integration/targets/docker_swarm_service/tasks/tests/options.yml
+77
View File
@@ -1920,3 +1920,80 @@
- init_1 is failed
- "('version is ' ~ docker_api_version ~'. Minimum version required is 1.37') in hosts_1.msg"
when: docker_api_version is version('1.37', '<')
####################################################################
## cap_drop, capabilities ##########################################
####################################################################
- name: capabilities, cap_drop
docker_swarm_service:
name: "{{ service_name }}"
image: "{{ docker_test_image_alpine }}"
resolve_image: no
init: true
cap_add:
- sys_time
cap_drop:
- all
register: capabilities_1
ignore_errors: yes
- name: capabilities, cap_drop (idempotency)
docker_swarm_service:
name: "{{ service_name }}"
image: "{{ docker_test_image_alpine }}"
resolve_image: no
init: true
cap_add:
- sys_time
cap_drop:
- all
register: capabilities_2
ignore_errors: yes
- name: capabilities, cap_drop (less)
docker_swarm_service:
name: "{{ service_name }}"
image: "{{ docker_test_image_alpine }}"
resolve_image: no
init: true
cap_add: []
cap_drop:
- all
register: capabilities_3
ignore_errors: yes
- name: capabilities, cap_drop (changed)
docker_swarm_service:
name: "{{ service_name }}"
image: "{{ docker_test_image_alpine }}"
resolve_image: no
init: true
cap_add:
- setgid
cap_drop:
- all
register: capabilities_4
ignore_errors: yes
- name: cleanup
docker_swarm_service:
name: "{{ service_name }}"
state: absent
diff: no
- assert:
that:
- capabilities_1 is changed
- capabilities_2 is not changed
- capabilities_3 is not changed
- capabilities_4 is changed
when: docker_api_version is version('1.41', '>=') and docker_py_version is version('5.0.3', '>=')
- assert:
that:
- capabilities_1 is failed
- >
(('version is ' ~ docker_py_version ~ ' ') in capabilities_1.msg and 'Minimum version required is 5.0.3 ' in capabilities_1.msg)
or (('Docker API version is ' ~ docker_api_version ~ '. ') in capabilities_1.msg and 'Minimum version required is 1.41 ' in capabilities_1.msg)
when: docker_api_version is version('1.41', '<') or docker_py_version is version('5.0.3', '<')