Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 0 additions & 6 deletions roles/sfs/molecule/default/molecule.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,9 +25,3 @@ provisioner:
inventory:
links:
host_vars: host_vars
verifier:
name: testinfra
env:
TEST_HOST: "localhost"
options:
verbose: true
47 changes: 47 additions & 0 deletions roles/sfs/molecule/default/verify.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
---
- name: sfs Tests
hosts: all
become: yes
gather_facts: true
vars:
tomcat_version: "10.1.41"
config_folder: "/etc/opt/alfresco"
binaries_folder: "/opt/alfresco"
username: "alfresco"
test_host: "localhost"
tasks:
- name: Gather service facts
ansible.builtin.service_facts:

- name: Assert alfresco sfs service is running and enabled
ansible.builtin.assert:
that:
- ansible_facts.services['alfresco-shared-fs.service'].state == 'running'
- ansible_facts.services['alfresco-shared-fs.service'].status == 'enabled'
fail_msg: "alfresco sfs service is not running or not enabled."
success_msg: "alfresco sfs service is running and enabled."

- name: Ensure ats-shared-fs.log exists
ansible.builtin.stat:
path: /var/log/alfresco/ats-shared-fs.log
register: sfs_log
become: yes
become_user: "{{ username }}"
failed_when: not sfs_log.stat.exists

- name: Verify /ready and /live endpoints respond with 200
ansible.builtin.uri:
url: "http://{{ test_host }}:8099{{ item }}"

Check warning on line 34 in roles/sfs/molecule/default/verify.yml

View workflow job for this annotation

GitHub Actions / kics

[MEDIUM] Communication Over HTTP

Using HTTP URLs (without encryption) could lead to security vulnerabilities and risks
status_code: 200
return_content: yes
loop:
- /ready
- /live
register: sfs_endpoints

- name: Validate JVM memory settings
ansible.builtin.command: "pgrep -fa java"
register: jvm_opts
changed_when: false
failed_when: >
'-Xmx900m' not in jvm_opts.stdout or '-Xms128m' not in jvm_opts.stdout
Loading