-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
use chef handler to run inspec tests #113
Changes from all commits
43845a1
182ff45
d6eef1d
a42530a
c93b3d0
c730ead
e260c52
7ebcb8f
2ed2b59
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -14,7 +14,9 @@ | |
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
# See the License for the specific language governing permissions and | ||
# limitations under the License. | ||
# | ||
|
||
# inspec gem version to install(e.g. '1.1.0') | ||
default['audit']['inspec_version'] = '1.2.0' | ||
|
||
# collector possible values: chef-server, chef-compliance, chef-visibility | ||
# chef-visibility requires inspec version 0.27.1 or above | ||
|
@@ -23,34 +25,29 @@ | |
# Attributes server, insecure and token/refresh_token are only needed for the 'chef-compliance' collector | ||
# server format example: 'https://comp-server.example.com/api' | ||
default['audit']['server'] = nil | ||
|
||
# choose between the permanent refresh_token or ephemeral token(access_token). Needed only for the 'chef-compliance' collector | ||
default['audit']['refresh_token'] = nil | ||
|
||
# the token(access_token) expires in 12h after creation | ||
default['audit']['token'] = nil | ||
|
||
# set this insecure attribute to true if the compliance server uses self-signed ssl certificates | ||
default['audit']['insecure'] = nil | ||
|
||
# owner needed for the 'chef-compliance' and 'chef-server' collectors | ||
default['audit']['owner'] = nil | ||
|
||
default['audit']['quiet'] = nil | ||
default['audit']['profiles'] = {} | ||
|
||
# raise exception if Compliance API endpoint is unreachable | ||
# while fetching profiles or posting report | ||
default['audit']['raise_if_unreachable'] = true | ||
|
||
# fail converge if downloaded profile is not present | ||
default['audit']['fail_if_not_present'] = false | ||
|
||
# fail converge after posting report if any audits have failed | ||
default['audit']['fail_if_any_audits_failed'] = false | ||
|
||
# inspec gem version to install(e.g. '1.1.0') | ||
default['audit']['inspec_version'] = '1.2.0' | ||
|
||
# by default run audit every time | ||
default['audit']['interval']['enabled'] = false | ||
|
||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. we are going to need it for now |
||
# by default run compliance once a day | ||
default['audit']['interval']['time'] = 1440 | ||
|
||
|
@@ -59,3 +56,16 @@ | |
|
||
# overwrite existing profile in upload mode | ||
default['audit']['overwrite'] = true | ||
|
||
# use json format since this is for reporting | ||
default['audit']['format'] = 'json' | ||
|
||
# set profiles to empty array as default | ||
default['audit']['profiles'] = [] | ||
|
||
# output for inspec results | ||
result_path = File.expand_path('../../inspec_results.json', __FILE__) | ||
default['audit']['output'] = result_path | ||
|
||
# inspec gem version to install(e.g. '1.1.0') | ||
default['audit']['inspec_version'] = '1.2.0' |
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
not 100% sure what
&profiles
should refer toThere was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
leftover from initial implementation.. Yaml syntax docs: "Repeated nodes are first identified by an anchor (marked with the ampersand - “&”), and are then aliased (referenced with an asterisk - “*”) thereafter."