public-health-ch/ansible/roles/dev-sec.nginx-hardening/.kitchen.yml

117 lines
2.8 KiB
YAML
Raw Normal View History

2017-04-24 12:22:51 +00:00
---
driver:
name: docker
use_sudo: false
2018-12-17 12:50:15 +00:00
privileged: true
http_proxy: <%= ENV['http_proxy'] || nil %>
https_proxy: <%= ENV['https_proxy'] || nil %>
2017-04-24 12:22:51 +00:00
transport:
max_ssh_sessions: 5
provisioner:
name: ansible_playbook
hosts: all
require_ansible_repo: false
require_chef_for_busser: false
require_ruby_for_busser: false
ansible_verbose: true
ansible_diff: true
2018-12-17 12:50:15 +00:00
2017-04-24 12:22:51 +00:00
roles_path: ../ansible-nginx-hardening/
2018-12-17 12:50:15 +00:00
http_proxy: <%= ENV['http_proxy'] || nil %>
https_proxy: <%= ENV['https_proxy'] || nil %>
playbook: tests/test.yml
requirements_path: requirements.yml
galaxy_ignore_certs: true
2017-04-24 12:22:51 +00:00
platforms:
2018-12-17 12:50:15 +00:00
- name: centos6-ansible-latest
driver:
image: rndmh3ro/docker-centos6-ansible:latest
platform: centos
- name: centos7-ansible-latest
driver:
image: rndmh3ro/docker-centos7-ansible:latest
platform: centos
run_command: /sbin/init
provision_command:
- sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
- systemctl enable sshd.service
- name: oracle6-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-oracle6-ansible:latest
platform: centos
- name: oracle7-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-oracle7-ansible:latest
run_command: /sbin/init
platform: centos
provision_command:
- sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
- systemctl enable sshd.service
- name: ubuntu1404-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-ubuntu1404-ansible:latest
platform: ubuntu
- name: ubuntu1604-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-ubuntu1604-ansible:latest
platform: ubuntu
run_command: /sbin/init
provision_command:
- systemctl enable ssh.service
- name: ubuntu1804-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-ubuntu1804-ansible:latest
platform: ubuntu
run_command: /sbin/init
provision_command:
- systemctl enable ssh.service
- name: debian8-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-debian8-ansible:latest
platform: debian
- name: debian9-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-debian9-ansible:latest
platform: debian
run_command: /sbin/init
provision_command:
- apt install -y systemd-sysv
- systemctl enable ssh.service
- name: amazon-ansible-latest
2017-04-24 12:22:51 +00:00
driver:
2018-12-17 12:50:15 +00:00
image: rndmh3ro/docker-amazon-ansible:latest
platform: centos
run_command: /sbin/init
provision_command:
- sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
- systemctl enable sshd.service
2017-04-24 12:22:51 +00:00
verifier:
name: inspec
sudo: true
inspec_tests:
2018-12-17 12:50:15 +00:00
- ../nginx-baseline
#- https://github.com/dev-sec/nginx-baseline
controls:
- nginx-01
- nginx-02
- nginx-03
- nginx-04
- nginx-05
- nginx-06
- nginx-07
- nginx-08
- nginx-09
- nginx-10
- nginx-12
- nginx-13
- nginx-14
- nginx-15
- nginx-17
2017-04-24 12:22:51 +00:00
suites:
2018-12-17 12:50:15 +00:00
- name: nginx