test: strengthen molecule tests against false-passes (audit fixes)#155

Open

Oddly wants to merge 19 commits into

mainfrom

fix/molecule-test-audit

Commits on Jun 7, 2026

test: parameterise shared verify_es_health on scheme
Oddly
committed
test: rename misleading molecule scenario directories
Oddly
committed
test(cert_renewal): assert fingerprints actually change after renewal
Oddly
committed
test(elasticsearch_upgrade): assert handler suppression, JVM-loaded, role-driven 8.x bump
Oddly
committed
test(elasticsearch_*_certs): assert deployed certs match the source PEMs
Oddly
committed
test(*_tls): probe TLS handshake instead of trusting an open socket
Oddly
committed
test(beats_security, elasticstack_default): assert end-to-end ingest
Oddly
committed
test(cert_info_module): register and assert on every negative-path call
Oddly
committed
test(elasticsearch_default): don't skip the rotation guard on its own regression
Oddly
committed
test(kibana_custom): add negative sniff_on_start assertion for 9.x
Oddly
committed
test(logstash_centralized_pipelines): confirm Logstash actually starts
Oddly
committed
test(elasticsearch_diagnostics): require real diagnostic content, not just the header
Oddly
committed
test(logstash_standalone_certs): add scenario for the actually-uncovered standalone cert path
Oddly
committed
test: address ansible-lint findings in the audit-fix commits
Oddly
committed
ci: memory-aware admission gate for the molecule runner pool
Oddly
committed