Initial commit

tests/render.yml

@@ -0,0 +1,52 @@
+---
+- name: Render Dex values without a cluster or real secrets
+  hosts: localhost
+  connection: local
+  gather_facts: false
+  vars:
+    role_path: /roles/ansible-role-dex
+  tasks:
+    - name: Load defaults
+      ansible.builtin.include_vars: ../defaults/main.yml
+    - name: Set fake isolated credentials
+      ansible.builtin.set_fact:
+        dex_postgres_password: fixture-not-a-real-password
+        dex_ldap_bind_password: fixture-not-a-real-password
+        dex_matrix_client_enabled: true
+        matrix_dex_oidc_client_id: matrix-fixture
+        matrix_dex_oidc_client_secret: fixture-not-a-real-client-secret
+        dex_theme_enabled: true
+    - name: Render default values
+      ansible.builtin.template:
+        src: ../templates/values.yml.j2
+        dest: /tmp/dex-values.yml
+        mode: "0600"
+    - name: Set optional settings
+      ansible.builtin.set_fact:
+        dex_theme_enabled: false
+        dex_matrix_client_enabled: false
+        dex_ldap_insecure_no_ssl: false
+        dex_ldap_start_tls: true
+        dex_ldap_root_ca: /etc/dex-ca/ldap.pem
+        dex_ca_secret_name: ldap-ca
+        dex_env_secret_name: dex-client-secrets
+        dex_static_clients:
+          - id: www-membership
+            name: Example Membership
+            secretEnv: WWW_DEX_CLIENT_SECRET
+            redirectURIs: [https://www.example.com/members/oidc/callback/]
+    - name: Render optional values
+      ansible.builtin.template:
+        src: ../templates/values.yml.j2
+        dest: /tmp/dex-values-optional.yml
+        mode: "0600"
+    - name: Set empty optional lists
+      ansible.builtin.set_fact:
+        dex_ca_secret_name: ""
+        dex_env_secret_name: ""
+        dex_static_clients: []
+    - name: Render minimal values
+      ansible.builtin.template:
+        src: ../templates/values.yml.j2
+        dest: /tmp/dex-values-minimal.yml
+        mode: "0600"