1 files changed, 71 insertions, 0 deletions
diff --git a/test/integration/targets/iptables/tasks/chain_management.yml b/test/integration/targets/iptables/tasks/chain_management.yml
new file mode 100644
index 0000000..0355122
--- /dev/null
+++ b/test/integration/targets/iptables/tasks/chain_management.yml
@@ -0,0 +1,71 @@
+# test code for the iptables module
+# (c) 2021, Éloi Rivard <eloi@yaal.coop>
+
+# This file is part of Ansible
+#
+# Ansible is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# Ansible is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
+---
+- name: get the state of the iptable rules
+  shell: "{{ iptables_bin }} -L"
+  become: true
+  register: result
+
+- name: assert the rule is absent
+  assert:
+    that:
+      - result is not failed
+      - '"FOOBAR-CHAIN" not in result.stdout'
+
+- name: create the foobar chain
+  become: true
+  iptables:
+    chain: FOOBAR-CHAIN
+    chain_management: true
+    state: present
+
+- name: get the state of the iptable rules after chain is created
+  become: true
+  shell: "{{ iptables_bin }} -L"
+  register: result
+
+- name: assert the rule is present
+  assert:
+    that:
+      - result is not failed
+      - '"FOOBAR-CHAIN" in result.stdout'
+
+- name: flush the foobar chain
+  become: true
+  iptables:
+    chain: FOOBAR-CHAIN
+    flush: true
+
+- name: delete the foobar chain
+  become: true
+  iptables:
+    chain: FOOBAR-CHAIN
+    chain_management: true
+    state: absent
+
+- name: get the state of the iptable rules after chain is deleted
+  become: true
+  shell: "{{ iptables_bin }} -L"
+  register: result
+
+- name: assert the rule is absent
+  assert:
+    that:
+      - result is not failed
+      - '"FOOBAR-CHAIN" not in result.stdout'
+      - '"FOOBAR-RULE" not in result.stdout'