# Copyright 2017 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
---
- hosts: all
  vars:
    rolename: ansible-role-gear

  roles:
    - "{{ rolename }}"

  post_tasks:
    - name: Assert results are registered.
      assert:
        that:
          - gear_file_log_config
          - gear_file_ssl_ca
          - gear_file_ssl_cert
          - gear_file_ssl_key

    - name: Ensure gear_user_name is gear.
      shell: /usr/bin/getent passwd gear
      tags: skip_ansible_lint

    - name: Ensure gear_user_group is gear.
      shell: /usr/bin/getent group gear
      tags: skip_ansible_lint

    - name: Register gear_user_home_getent.
      shell: '/usr/bin/getent passwd gear | cut -d: -f6'
      register: gear_user_home_getent
      tags: skip_ansible_lint

    - name: Assert gear_user_home is /var/lib/gear.
      assert:
        that:
          - gear_user_home_getent.stdout == '/var/lib/gear'

    - name: Register gear_user_home_stat.
      stat:
        path: /var/lib/gear
      register: gear_user_home_stat

    - name: Assert gear_user_home tests.
      assert:
        that:
          - gear_user_home_stat.stat.exists
          - gear_user_home_stat.stat.isdir

    - name: Register gear_git_dest_stat.
      stat:
        path: /home/zuul/src/opendev.org/opendev/gear
      register: gear_git_dest_stat
      when: gear_install_method == 'git'

    - name: Assert gear_git_dest tests.
      assert:
        that:
          - gear_git_dest_stat.stat.exists
          - gear_git_dest_stat.stat.isdir
      when: gear_install_method == 'git'

    - name: Register /etc/gear/ssl/root-ca.pem
      stat:
        path: /etc/gear/ssl/root-ca.pem
      register: _gear_file_ssl_ca_stat

    - name: Assert _gear_file_ssl_ca_stat tests.
      assert:
        that:
          - _gear_file_ssl_ca_stat.stat.exists
          - _gear_file_ssl_ca_stat.stat.isreg
          - _gear_file_ssl_ca_stat.stat.pw_name == 'gear'
          - _gear_file_ssl_ca_stat.stat.gr_name == 'gear'
          - _gear_file_ssl_ca_stat.stat.mode == '0644'

    - name: Register /etc/gear/ssl/server.pem
      stat:
        path: /etc/gear/ssl/server.pem
      register: _gear_file_ssl_cert_stat

    - name: Assert _gear_file_ssl_cert_stat tests.
      assert:
        that:
          - _gear_file_ssl_cert_stat.stat.exists
          - _gear_file_ssl_cert_stat.stat.isreg
          - _gear_file_ssl_cert_stat.stat.pw_name == 'gear'
          - _gear_file_ssl_cert_stat.stat.gr_name == 'gear'
          - _gear_file_ssl_cert_stat.stat.mode == '0644'

    - name: Register /etc/gear/ssl/server.key
      stat:
        path: /etc/gear/ssl/server.key
      register: _gear_file_ssl_key_stat

    - name: Assert _gear_file_ssl_key_stat tests.
      assert:
        that:
          - _gear_file_ssl_key_stat.stat.exists
          - _gear_file_ssl_key_stat.stat.isreg
          - _gear_file_ssl_key_stat.stat.pw_name == 'gear'
          - _gear_file_ssl_key_stat.stat.gr_name == 'gear'
          - _gear_file_ssl_key_stat.stat.mode == '0600'

    - name: Register /etc/gear/logging.conf
      stat:
        path: /etc/gear/logging.conf
      register: _gear_file_log_config_stat

    - name: Assert _gear_file_log_config_stat tests.
      assert:
        that:
          - _gear_file_log_config_stat.stat.exists
          - _gear_file_log_config_stat.stat.isreg
          - _gear_file_log_config_stat.stat.pw_name == 'gear'
          - _gear_file_log_config_stat.stat.gr_name == 'gear'
          - _gear_file_log_config_stat.stat.mode == '0644'