Bug 1894501

Summary:	[RFE] New management module ipaselfservice
Product:	Red Hat Enterprise Linux 8	Reporter:	Thomas Woerner <twoerner>
Component:	ansible-freeipa	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.4	CC:	mvarun, ndehadra, pcech, pvoborni
Target Milestone:	rc	Keywords:	FutureFeature, RFE
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ansible-freeipa-0.3.0-1	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 15:51:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1894575

Description Thomas Woerner 2020-11-04 11:21:00 UTC

New management module ipaselfservice

There is a new selfservice management module placed in the plugins folder:

plugins/modules/ipaselfservice.py

The selfservice module allows to ensure presence and absence of selfservices
and manage selfservice attributes.

Here is the documentation for the module:

README-selfservice.md

New example playbooks have been added:

playbooks/selfservice/selfservice-absent.yml
playbooks/selfservice/selfservice-present.yml
playbooks/selfservice/selfservice-member-absent.yml
playbooks/selfservice/selfservice-member-present.yml

New tests for the module:

tests/selfservice/test_selfservice.yml

Upstream RP: https://github.com/freeipa/ansible-freeipa/pull/344

Comment 8 Varun Mylaraiah 2020-12-11 10:26:31 UTC

Verified
ansible-freeipa-0.3.1-1.el8.noarch

ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_with_attributes_and_read_permission 
2020-12-11T08:07:27+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:07:27+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipactl', 'status']
2020-12-11T08:07:29+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:29+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '01_selfservice test']
2020-12-11T08:07:30+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:30+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:07:30+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:07:30+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:07:35+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:35+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '01_selfservice test']
2020-12-11T08:07:36+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:36+0000 PASSED                                                                   [ 61%]
2020-12-11T08:07:36+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_update_with_write_permission 
2020-12-11T08:07:36+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:07:36+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:36+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '01_selfservice test']
2020-12-11T08:07:37+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:37+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:07:37+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:07:37+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:07:42+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:42+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '01_selfservice test']
2020-12-11T08:07:43+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:43+0000 PASSED                                                                   [ 62%]
2020-12-11T08:07:43+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_update_with_read_write_permission 
2020-12-11T08:07:43+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:07:43+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:43+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '01_selfservice test']
2020-12-11T08:07:44+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:44+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:07:44+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:07:44+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:07:49+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:49+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '01_selfservice test']
2020-12-11T08:07:50+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:50+0000 PASSED                                                                   [ 63%]
2020-12-11T08:07:50+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_with_multiple_attributes 
2020-12-11T08:07:50+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:07:50+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:50+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:07:51+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:51+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:07:51+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:07:51+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:07:56+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:56+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:07:57+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:57+0000 PASSED                                                                   [ 64%]
2020-12-11T08:07:58+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_update_with_new_attributes_with_existing_attributes 
2020-12-11T08:07:58+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:07:58+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:58+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:07:59+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:07:59+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:07:59+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:00+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:00+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:00+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:00+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:05+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:05+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:06+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:06+0000 PASSED                                                                   [ 64%]
2020-12-11T08:08:06+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_update_with_new_attributes_only 
2020-12-11T08:08:06+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:06+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:06+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:07+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:07+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:07+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:07+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:12+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:12+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:13+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:13+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:13+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:14+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:14+0000 PASSED                                                                   [ 65%]
2020-12-11T08:08:14+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_remove_attribute 
2020-12-11T08:08:14+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:14+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:15+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:15+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:16+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:16+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:16+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:20+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:20+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-show', '02_selfservice attributes test']
2020-12-11T08:08:21+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:21+0000 PASSED                                                                   [ 66%]
2020-12-11T08:08:21+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_negative_scenarios[add_without_selfservice_name-missing required arguments: name] 
2020-12-11T08:08:21+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:21+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:21+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:21+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:24+0000 PASSED                                                                   [ 67%]
2020-12-11T08:08:24+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_negative_scenarios[add_without_attributes-'attrs' is required] 
2020-12-11T08:08:24+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:24+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:24+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:24+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:28+0000 PASSED                                                                   [ 67%]
2020-12-11T08:08:28+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_negative_scenarios[add_with_nonexisting_attribute-Invalid syntax] 
2020-12-11T08:08:28+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:28+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:28+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:28+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:33+0000 PASSED                                                                   [ 68%]
2020-12-11T08:08:33+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_negative_scenarios[add_with_empty_list_permission-permissions' is required] 
2020-12-11T08:08:33+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:33+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:33+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:33+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:37+0000 PASSED                                                                   [ 69%]
2020-12-11T08:08:37+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_add_negative_scenarios[add_with_invalid_permission-Invalid permission] 
2020-12-11T08:08:37+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:37+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:37+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:37+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:40+0000 PASSED                                                                   [ 70%]
2020-12-11T08:08:40+0000 ansible_freeipa_tests/rbac_module.py::TestSelfServicePermission::test_selfservice_remove 
2020-12-11T08:08:40+0000 -------------------------------- live log call ---------------------------------
2020-12-11T08:08:40+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:40+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-find']
2020-12-11T08:08:41+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:41+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO WRITE inventory/rbac.hosts
2020-12-11T08:08:41+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO PUT rbac_module.yml
2020-12-11T08:08:41+0000 [pytest_multihost.host.Host.ansible.ParamikoTransport] INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/rbac.hosts', 'rbac_module.yml']
2020-12-11T08:08:46+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kinit', 'admin']
2020-12-11T08:08:46+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['ipa', 'selfservice-find']
2020-12-11T08:08:47+0000 [pytest_multihost.host.Host.master.ParamikoTransport] INFO RUN ['kdestroy', '-A']
2020-12-11T08:08:47+0000 PASSED                                                                   [ 70%]




Based on the above observation, marking the bug VERIFIED

Comment 10 errata-xmlrpc 2021-05-18 15:51:41 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2021:1860