forked from sous-chefs/selinux
-
Notifications
You must be signed in to change notification settings - Fork 0
/
kitchen.yml
74 lines (70 loc) · 1.93 KB
/
kitchen.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
---
driver:
name: vagrant
provisioner:
name: chef_infra
product_name: <%= ENV['CHEF_PRODUCT_NAME'] || 'chef' %>
chef_license: accept-no-persist
multiple_converge: 2
enforce_idempotency: true
deprecations_as_errors: true
product_version: <%= ENV['CHEF_VERSION'] || 'latest' %>
log_level: <%= ENV['CHEF_LOG_LEVEL'] || 'auto' %>
# Allow reboots
max_retries: 60
wait_for_retry: 180
root_path: /var/tmp/kitchen
verifier:
name: inspec
platforms:
- name: almalinux-8
- name: amazonlinux-2
- name: centos-7
- name: centos-stream-8
- name: debian-10
- name: debian-11
- name: fedora-latest
- name: oracle-7
- name: oracle-8
- name: rockylinux-8
- name: ubuntu-18.04
- name: ubuntu-20.04
- name: ubuntu-22.04
suites:
- name: enforcing
run_list:
- recipe[selinux_test::install]
- recipe[selinux_test::enforcing]
- recipe[selinux_test::debian_enforcing_prepare]
- recipe[selinux_test::module_create]
- recipe[selinux_test::module_remove]
- recipe[selinux_test::boolean]
provisioner:
# not idempotent on debian/ubuntu due to debian_enforcing_prepare & module_create/remove
multiple_converge: 1
enforce_idempotency: false
- name: permissive
run_list:
- recipe[selinux_test::install]
- recipe[selinux::permissive]
- recipe[selinux_test::module_create]
- recipe[selinux_test::boolean]
- name: disabled
run_list:
- recipe[selinux_test::install]
- recipe[selinux::disabled]
- name: port
run_list:
- recipe[selinux_test::install]
- recipe[selinux::permissive]
- recipe[selinux_test::port]
- name: fcontext
run_list:
- recipe[selinux_test::install]
- recipe[selinux::permissive]
- recipe[selinux_test::fcontext]
- name: permissive_resource
run_list:
- recipe[selinux_test::install]
- recipe[selinux::permissive]
- recipe[selinux_test::permissive_resource]