feat(semantic-release): implement for this formula
* Automated using https://github.com/myii/ssf-formula/pull/79
This commit is contained in:
		
							parent
							
								
									93c8d1ffe7
								
							
						
					
					
						commit
						34d1f7cf15
					
				
							
								
								
									
										122
									
								
								.gitignore
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										122
									
								
								.gitignore
									
									
									
									
										vendored
									
									
								
							@ -1,2 +1,122 @@
 | 
			
		||||
*.swp
 | 
			
		||||
# Byte-compiled / optimized / DLL files
 | 
			
		||||
__pycache__/
 | 
			
		||||
*.py[cod]
 | 
			
		||||
*$py.class
 | 
			
		||||
 | 
			
		||||
# C extensions
 | 
			
		||||
*.so
 | 
			
		||||
 | 
			
		||||
# Distribution / packaging
 | 
			
		||||
.Python
 | 
			
		||||
env/
 | 
			
		||||
build/
 | 
			
		||||
develop-eggs/
 | 
			
		||||
dist/
 | 
			
		||||
downloads/
 | 
			
		||||
eggs/
 | 
			
		||||
.eggs/
 | 
			
		||||
lib/
 | 
			
		||||
lib64/
 | 
			
		||||
parts/
 | 
			
		||||
sdist/
 | 
			
		||||
var/
 | 
			
		||||
wheels/
 | 
			
		||||
*.egg-info/
 | 
			
		||||
.installed.cfg
 | 
			
		||||
*.egg
 | 
			
		||||
 | 
			
		||||
# PyInstaller
 | 
			
		||||
#  Usually these files are written by a python script from a packager
 | 
			
		||||
#  before PyInstaller builds the exe, so as to inject date/other infos into it.
 | 
			
		||||
*.manifest
 | 
			
		||||
*.spec
 | 
			
		||||
 | 
			
		||||
# Installer logs
 | 
			
		||||
pip-log.txt
 | 
			
		||||
pip-delete-this-directory.txt
 | 
			
		||||
 | 
			
		||||
# Unit test / coverage reports
 | 
			
		||||
htmlcov/
 | 
			
		||||
.tox/
 | 
			
		||||
.coverage
 | 
			
		||||
.coverage.*
 | 
			
		||||
.cache
 | 
			
		||||
nosetests.xml
 | 
			
		||||
coverage.xml
 | 
			
		||||
*.cover
 | 
			
		||||
.hypothesis/
 | 
			
		||||
.kitchen
 | 
			
		||||
.kitchen.local.yml
 | 
			
		||||
kitchen.local.yml
 | 
			
		||||
junit-*.xml
 | 
			
		||||
 | 
			
		||||
# Translations
 | 
			
		||||
*.mo
 | 
			
		||||
*.pot
 | 
			
		||||
 | 
			
		||||
# Django stuff:
 | 
			
		||||
*.log
 | 
			
		||||
local_settings.py
 | 
			
		||||
 | 
			
		||||
# Flask stuff:
 | 
			
		||||
instance/
 | 
			
		||||
.webassets-cache
 | 
			
		||||
 | 
			
		||||
# Scrapy stuff:
 | 
			
		||||
.scrapy
 | 
			
		||||
 | 
			
		||||
# Sphinx documentation
 | 
			
		||||
docs/_build/
 | 
			
		||||
 | 
			
		||||
# PyBuilder
 | 
			
		||||
target/
 | 
			
		||||
 | 
			
		||||
# Jupyter Notebook
 | 
			
		||||
.ipynb_checkpoints
 | 
			
		||||
 | 
			
		||||
# pyenv
 | 
			
		||||
.python-version
 | 
			
		||||
 | 
			
		||||
# celery beat schedule file
 | 
			
		||||
celerybeat-schedule
 | 
			
		||||
 | 
			
		||||
# SageMath parsed files
 | 
			
		||||
*.sage.py
 | 
			
		||||
 | 
			
		||||
# dotenv
 | 
			
		||||
.env
 | 
			
		||||
 | 
			
		||||
# virtualenv
 | 
			
		||||
.venv
 | 
			
		||||
venv/
 | 
			
		||||
ENV/
 | 
			
		||||
 | 
			
		||||
# Spyder project settings
 | 
			
		||||
.spyderproject
 | 
			
		||||
.spyproject
 | 
			
		||||
 | 
			
		||||
# Rope project settings
 | 
			
		||||
.ropeproject
 | 
			
		||||
 | 
			
		||||
# mkdocs documentation
 | 
			
		||||
/site
 | 
			
		||||
 | 
			
		||||
# mypy
 | 
			
		||||
.mypy_cache/
 | 
			
		||||
 | 
			
		||||
# Bundler
 | 
			
		||||
Gemfile.lock
 | 
			
		||||
 | 
			
		||||
# copied `.md` files used for conversion to `.rst` using `m2r`
 | 
			
		||||
docs/*.md
 | 
			
		||||
 | 
			
		||||
# Vim
 | 
			
		||||
*.sw?
 | 
			
		||||
 | 
			
		||||
## Collected when centralising formulas (check and sort)
 | 
			
		||||
# `collectd-formula`
 | 
			
		||||
.pytest_cache/
 | 
			
		||||
/.idea/
 | 
			
		||||
Dockerfile.*_*
 | 
			
		||||
ignore/
 | 
			
		||||
tmp/
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										56
									
								
								.kitchen.yml
									
									
									
									
									
								
							
							
						
						
									
										56
									
								
								.kitchen.yml
									
									
									
									
									
								
							@ -1,56 +0,0 @@
 | 
			
		||||
---
 | 
			
		||||
driver:
 | 
			
		||||
  name: docker
 | 
			
		||||
  use_sudo: false
 | 
			
		||||
  privileged: true
 | 
			
		||||
  require_chef_omnibus: false
 | 
			
		||||
 | 
			
		||||
platforms:
 | 
			
		||||
  - name: centos-7
 | 
			
		||||
  - name: ubuntu-16.04
 | 
			
		||||
  - name: debian-9
 | 
			
		||||
 | 
			
		||||
provisioner:
 | 
			
		||||
  name: salt_solo
 | 
			
		||||
  formula: apache
 | 
			
		||||
  require_chef: false
 | 
			
		||||
  data_path: test/shared
 | 
			
		||||
  pillars:
 | 
			
		||||
    top.sls:
 | 
			
		||||
      base:
 | 
			
		||||
        '*':
 | 
			
		||||
          - apache
 | 
			
		||||
    apache.sls:
 | 
			
		||||
      apache:
 | 
			
		||||
        manage_service_states: False
 | 
			
		||||
        mod_security:
 | 
			
		||||
          crs_install: True
 | 
			
		||||
          manage_config: True
 | 
			
		||||
          sec_rule_engine: 'On'
 | 
			
		||||
          sec_request_body_access: 'On'
 | 
			
		||||
          sec_request_body_limit: '14000000'
 | 
			
		||||
          sec_request_body_no_files_limit: '114002'
 | 
			
		||||
          sec_request_body_in_memory_limit: '114002'
 | 
			
		||||
          sec_request_body_limit_action: 'Reject'
 | 
			
		||||
          sec_pcre_match_limit: '15000'
 | 
			
		||||
          sec_pcre_match_limit_recursion: '15000'
 | 
			
		||||
          sec_debug_log_level: '3'
 | 
			
		||||
 | 
			
		||||
suites:
 | 
			
		||||
  - name: default
 | 
			
		||||
    provisioner:
 | 
			
		||||
      state_top:
 | 
			
		||||
        base:
 | 
			
		||||
          '*':
 | 
			
		||||
            - apache
 | 
			
		||||
            - apache.mod_security
 | 
			
		||||
  - name: apache_norestart
 | 
			
		||||
    provisioner:
 | 
			
		||||
      state_top:
 | 
			
		||||
        base:
 | 
			
		||||
          '*':
 | 
			
		||||
            - apache
 | 
			
		||||
      pillars:
 | 
			
		||||
        apache.sls:
 | 
			
		||||
          apache:
 | 
			
		||||
            manage_service_states: False
 | 
			
		||||
							
								
								
									
										10
									
								
								.rubocop.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										10
									
								
								.rubocop.yml
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,10 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
# General overrides used across formulas in the org
 | 
			
		||||
Metrics/LineLength:
 | 
			
		||||
  # Increase from default of `80`
 | 
			
		||||
  # Based on https://github.com/PyCQA/flake8-bugbear#opinionated-warnings (`B950`)
 | 
			
		||||
  Max: 88
 | 
			
		||||
 | 
			
		||||
# Any offenses that should be fixed, e.g. collected via. `rubocop --auto-gen-config`
 | 
			
		||||
							
								
								
									
										26
									
								
								.salt-lint
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										26
									
								
								.salt-lint
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,26 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
exclude_paths:
 | 
			
		||||
  # Violation: [203] Most files should not contain tabs
 | 
			
		||||
  # Violation: [204] Lines should be no longer that 160 chars
 | 
			
		||||
  - apache/files/Debian/apache-2.4.config.jinja           # 203
 | 
			
		||||
  - apache/files/Debian/mpm/mpm_event.conf.jinja          # 203
 | 
			
		||||
  - apache/files/Debian/mpm/mpm_prefork.conf.jinja        # 203
 | 
			
		||||
  - apache/files/Debian/mpm/mpm_worker.conf.jinja         # 203
 | 
			
		||||
  - apache/files/Debian/ssl.conf.jinja                    # 203,204
 | 
			
		||||
  - apache/files/FreeBSD/mod_cgi.conf.jinja               # 203
 | 
			
		||||
  - apache/files/FreeBSD/mod_ssl.conf.jinja               # 203,204
 | 
			
		||||
  - apache/files/RedHat/conf.modules.d/00-mpm.conf.jinja  # 203
 | 
			
		||||
  - apache/files/RedHat/modsecurity.conf.jinja            # 203
 | 
			
		||||
  - apache/files/tls-defaults.conf.jinja                  # 204
 | 
			
		||||
  - apache/logrotate.sls                                  # 203
 | 
			
		||||
skip_list:
 | 
			
		||||
  # Using `salt-lint` for linting other files as well, such as Jinja macros/templates
 | 
			
		||||
  - 205  # Use ".sls" as a Salt State file extension
 | 
			
		||||
  # Skipping `207` and `208` because `210` is sufficient, at least for the time-being
 | 
			
		||||
  # I.e. Allows 3-digit unquoted codes to still be used, such as `644` and `755`
 | 
			
		||||
  - 207  # File modes should always be encapsulated in quotation marks
 | 
			
		||||
  - 208  # File modes should always contain a leading zero
 | 
			
		||||
tags: []
 | 
			
		||||
verbosity: 1
 | 
			
		||||
							
								
								
									
										110
									
								
								.travis.yml
									
									
									
									
									
								
							
							
						
						
									
										110
									
								
								.travis.yml
									
									
									
									
									
								
							@ -1,16 +1,104 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
## Machine config
 | 
			
		||||
dist: bionic
 | 
			
		||||
sudo: required
 | 
			
		||||
language: python
 | 
			
		||||
services: 
 | 
			
		||||
services:
 | 
			
		||||
  - docker
 | 
			
		||||
 | 
			
		||||
before_install:
 | 
			
		||||
  - bundle install
 | 
			
		||||
 | 
			
		||||
env:
 | 
			
		||||
  matrix:
 | 
			
		||||
    - INSTANCE: default-centos-7
 | 
			
		||||
    - INSTANCE: default-ubuntu-1604
 | 
			
		||||
    - INSTANCE: default-debian-9
 | 
			
		||||
## Language and cache config
 | 
			
		||||
language: ruby
 | 
			
		||||
cache: bundler
 | 
			
		||||
 | 
			
		||||
## Script to run for the test stage
 | 
			
		||||
script:
 | 
			
		||||
  - bundle exec kitchen verify ${INSTANCE}
 | 
			
		||||
  - bin/kitchen verify "${INSTANCE}"
 | 
			
		||||
 | 
			
		||||
## Stages and jobs matrix
 | 
			
		||||
stages:
 | 
			
		||||
  - test
 | 
			
		||||
  - name: release
 | 
			
		||||
    if: branch = master AND type != pull_request
 | 
			
		||||
jobs:
 | 
			
		||||
  include:
 | 
			
		||||
    ## Define the test stage that runs the linters (and testing matrix, if applicable)
 | 
			
		||||
 | 
			
		||||
    # Run all of the linters in a single job
 | 
			
		||||
    - language: node_js
 | 
			
		||||
      node_js: lts/*
 | 
			
		||||
      env: Lint
 | 
			
		||||
      name: 'Lint: salt-lint, yamllint, rubocop & commitlint'
 | 
			
		||||
      before_install: skip
 | 
			
		||||
      script:
 | 
			
		||||
        # Install and run `salt-lint`
 | 
			
		||||
        - pip install --user salt-lint
 | 
			
		||||
        - git ls-files | grep '\.sls$\|\.jinja$\|\.j2$\|\.tmpl$'
 | 
			
		||||
                       | xargs -I {} salt-lint {}
 | 
			
		||||
        # Install and run `yamllint`
 | 
			
		||||
        # Need at least `v1.17.0` for the `yaml-files` setting
 | 
			
		||||
        - pip install --user yamllint>=1.17.0
 | 
			
		||||
        - yamllint -s .
 | 
			
		||||
        # Install and run `rubocop`
 | 
			
		||||
        - gem install rubocop
 | 
			
		||||
        - rubocop -d
 | 
			
		||||
        # Install and run `commitlint`
 | 
			
		||||
        - npm install @commitlint/config-conventional -D
 | 
			
		||||
        - npm install @commitlint/travis-cli -D
 | 
			
		||||
        - commitlint-travis
 | 
			
		||||
 | 
			
		||||
    ## Define the rest of the matrix based on Kitchen testing
 | 
			
		||||
    # Make sure the instances listed below match up with
 | 
			
		||||
    # the `platforms` defined in `kitchen.yml`
 | 
			
		||||
    - env: INSTANCE=default-debian-10-develop-py3
 | 
			
		||||
    # - env: INSTANCE=default-ubuntu-1804-develop-py3
 | 
			
		||||
    # - env: INSTANCE=default-centos-7-develop-py3
 | 
			
		||||
    # - env: INSTANCE=default-fedora-30-develop-py3
 | 
			
		||||
    # - env: INSTANCE=default-opensuse-leap-15-develop-py3
 | 
			
		||||
    # - env: INSTANCE=default-amazonlinux-2-develop-py2
 | 
			
		||||
    # - env: INSTANCE=default-arch-base-latest-develop-py2
 | 
			
		||||
    # - env: INSTANCE=default-debian-9-2019-2-py3
 | 
			
		||||
    - env: INSTANCE=default-ubuntu-1804-2019-2-py3
 | 
			
		||||
    # - env: INSTANCE=default-centos-7-2019-2-py3
 | 
			
		||||
    # - env: INSTANCE=default-fedora-30-2019-2-py3
 | 
			
		||||
    # - env: INSTANCE=default-opensuse-leap-15-2019-2-py3
 | 
			
		||||
    - env: INSTANCE=default-amazonlinux-2-2019-2-py2
 | 
			
		||||
    # - env: INSTANCE=default-arch-base-latest-2019-2-py2
 | 
			
		||||
    # - env: INSTANCE=default-debian-9-2018-3-py2
 | 
			
		||||
    # - env: INSTANCE=default-ubuntu-1604-2018-3-py2
 | 
			
		||||
    # - env: INSTANCE=default-centos-7-2018-3-py2
 | 
			
		||||
    - env: INSTANCE=default-fedora-29-2018-3-py2
 | 
			
		||||
    # - env: INSTANCE=default-opensuse-leap-15-2018-3-py2
 | 
			
		||||
    # - env: INSTANCE=default-amazonlinux-2-2018-3-py2
 | 
			
		||||
    # - env: INSTANCE=default-arch-base-latest-2018-3-py2
 | 
			
		||||
    # - env: INSTANCE=default-debian-8-2017-7-py2
 | 
			
		||||
    # - env: INSTANCE=default-ubuntu-1604-2017-7-py2
 | 
			
		||||
    - env: INSTANCE=default-centos-6-2017-7-py2
 | 
			
		||||
    # - env: INSTANCE=default-fedora-29-2017-7-py2
 | 
			
		||||
    # - env: INSTANCE=default-opensuse-leap-15-2017-7-py2
 | 
			
		||||
    # - env: INSTANCE=default-amazonlinux-2-2017-7-py2
 | 
			
		||||
    # - env: INSTANCE=default-arch-base-latest-2017-7-py2
 | 
			
		||||
 | 
			
		||||
    ## Define the release stage that runs `semantic-release`
 | 
			
		||||
    - stage: release
 | 
			
		||||
      language: node_js
 | 
			
		||||
      node_js: lts/*
 | 
			
		||||
      env: Release
 | 
			
		||||
      name: 'Run semantic-release inc. file updates to AUTHORS, CHANGELOG & FORMULA'
 | 
			
		||||
      before_install: skip
 | 
			
		||||
      script:
 | 
			
		||||
        # Update `AUTHORS.md`
 | 
			
		||||
        - export MAINTAINER_TOKEN=${GH_TOKEN}
 | 
			
		||||
        - go get github.com/myii/maintainer
 | 
			
		||||
        - maintainer contributor
 | 
			
		||||
 | 
			
		||||
        # Install all dependencies required for `semantic-release`
 | 
			
		||||
        - npm install @semantic-release/changelog@3 -D
 | 
			
		||||
        - npm install @semantic-release/exec@3 -D
 | 
			
		||||
        - npm install @semantic-release/git@7 -D
 | 
			
		||||
      deploy:
 | 
			
		||||
        provider: script
 | 
			
		||||
        skip_cleanup: true
 | 
			
		||||
        script:
 | 
			
		||||
          # Run `semantic-release`
 | 
			
		||||
          - npx semantic-release@15
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										36
									
								
								.yamllint
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										36
									
								
								.yamllint
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,36 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
# Extend the `default` configuration provided by `yamllint`
 | 
			
		||||
extends: default
 | 
			
		||||
 | 
			
		||||
# Files to ignore completely
 | 
			
		||||
# 1. All YAML files under directory `node_modules/`, introduced during the Travis run
 | 
			
		||||
# 2. Any SLS files under directory `test/`, which are actually state files
 | 
			
		||||
# 3. Any YAML files under directory `.kitchen/`, introduced during local testing
 | 
			
		||||
ignore: |
 | 
			
		||||
  node_modules/
 | 
			
		||||
  test/**/states/**/*.sls
 | 
			
		||||
  .kitchen/
 | 
			
		||||
 | 
			
		||||
yaml-files:
 | 
			
		||||
  # Default settings
 | 
			
		||||
  - '*.yaml'
 | 
			
		||||
  - '*.yml'
 | 
			
		||||
  - .salt-lint
 | 
			
		||||
  - .yamllint
 | 
			
		||||
  # SaltStack Formulas additional settings
 | 
			
		||||
  - '*.example'
 | 
			
		||||
  - test/**/*.sls
 | 
			
		||||
 | 
			
		||||
rules:
 | 
			
		||||
  empty-values:
 | 
			
		||||
    forbid-in-block-mappings: true
 | 
			
		||||
    forbid-in-flow-mappings: true
 | 
			
		||||
  line-length:
 | 
			
		||||
    # Increase from default of `80`
 | 
			
		||||
    # Based on https://github.com/PyCQA/flake8-bugbear#opinionated-warnings (`B950`)
 | 
			
		||||
    max: 88
 | 
			
		||||
  octal-values:
 | 
			
		||||
    forbid-implicit-octal: true
 | 
			
		||||
    forbid-explicit-octal: true
 | 
			
		||||
							
								
								
									
										11
									
								
								Gemfile
									
									
									
									
									
								
							
							
						
						
									
										11
									
								
								Gemfile
									
									
									
									
									
								
							@ -1,6 +1,7 @@
 | 
			
		||||
source "https://rubygems.org"
 | 
			
		||||
# frozen_string_literal: true
 | 
			
		||||
 | 
			
		||||
gem "test-kitchen", '>=1.2.1'
 | 
			
		||||
gem "kitchen-docker"
 | 
			
		||||
gem "kitchen-salt", ">=0.0.11"
 | 
			
		||||
gem "kitchen-inspec"
 | 
			
		||||
source 'https://rubygems.org'
 | 
			
		||||
 | 
			
		||||
gem 'kitchen-docker', '>= 2.9'
 | 
			
		||||
gem 'kitchen-inspec', '>= 1.1'
 | 
			
		||||
gem 'kitchen-salt', '>= 0.6.0'
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										32
									
								
								bin/kitchen
									
									
									
									
									
										Executable file
									
								
							
							
						
						
									
										32
									
								
								bin/kitchen
									
									
									
									
									
										Executable file
									
								
							@ -0,0 +1,32 @@
 | 
			
		||||
#!/usr/bin/env ruby
 | 
			
		||||
# frozen_string_literal: true
 | 
			
		||||
 | 
			
		||||
#
 | 
			
		||||
# This file was generated by Bundler.
 | 
			
		||||
#
 | 
			
		||||
# The application 'kitchen' is installed as part of a gem, and
 | 
			
		||||
# this file is here to facilitate running it.
 | 
			
		||||
#
 | 
			
		||||
 | 
			
		||||
require 'pathname'
 | 
			
		||||
ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile',
 | 
			
		||||
                                           Pathname.new(__FILE__).realpath)
 | 
			
		||||
 | 
			
		||||
bundle_binstub = File.expand_path('bundle', __dir__)
 | 
			
		||||
 | 
			
		||||
if File.file?(bundle_binstub)
 | 
			
		||||
  if File.read(bundle_binstub, 300) =~ /This file was generated by Bundler/
 | 
			
		||||
    load(bundle_binstub)
 | 
			
		||||
  else
 | 
			
		||||
    abort(
 | 
			
		||||
      'Your `bin/bundle` was not generated by Bundler, '\
 | 
			
		||||
      'so this binstub cannot run.  Replace `bin/bundle` by running '\
 | 
			
		||||
      '`bundle binstubs bundler --force`, then run this command again.'
 | 
			
		||||
    )
 | 
			
		||||
  end
 | 
			
		||||
end
 | 
			
		||||
 | 
			
		||||
require 'rubygems'
 | 
			
		||||
require 'bundler/setup'
 | 
			
		||||
 | 
			
		||||
load Gem.bin_path('test-kitchen', 'kitchen')
 | 
			
		||||
							
								
								
									
										3
									
								
								commitlint.config.js
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										3
									
								
								commitlint.config.js
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,3 @@
 | 
			
		||||
module.exports = {
 | 
			
		||||
    extends: ['@commitlint/config-conventional'],
 | 
			
		||||
};
 | 
			
		||||
							
								
								
									
										212
									
								
								kitchen.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										212
									
								
								kitchen.yml
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,212 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
# For help on this file's format, see https://kitchen.ci/
 | 
			
		||||
driver:
 | 
			
		||||
  name: docker
 | 
			
		||||
  use_sudo: false
 | 
			
		||||
  privileged: true
 | 
			
		||||
  run_command: /lib/systemd/systemd
 | 
			
		||||
 | 
			
		||||
# Make sure the platforms listed below match up with
 | 
			
		||||
# the `env.matrix` instances defined in `.travis.yml`
 | 
			
		||||
platforms:
 | 
			
		||||
  ## SALT `develop`
 | 
			
		||||
  - name: debian-10-develop-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-develop-py3:debian-10
 | 
			
		||||
      provision_command:
 | 
			
		||||
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
 | 
			
		||||
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
 | 
			
		||||
  - name: ubuntu-1804-develop-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-develop-py3:ubuntu-18.04
 | 
			
		||||
      provision_command:
 | 
			
		||||
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
 | 
			
		||||
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
 | 
			
		||||
  - name: centos-7-develop-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-develop-py3:centos-7
 | 
			
		||||
      provision_command:
 | 
			
		||||
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
 | 
			
		||||
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
 | 
			
		||||
  - name: fedora-30-develop-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-develop-py3:fedora-30
 | 
			
		||||
      provision_command:
 | 
			
		||||
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
 | 
			
		||||
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
 | 
			
		||||
  - name: opensuse-leap-15-develop-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: opensuse/leap:15
 | 
			
		||||
      provision_command:
 | 
			
		||||
        # yamllint disable-line rule:line-length
 | 
			
		||||
        - zypper install -y glibc-locale net-tools net-tools-deprecated python-xml python3-pip
 | 
			
		||||
        - systemctl enable sshd.service
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
    provisioner:
 | 
			
		||||
      salt_bootstrap_options: -XdPfrq -x python3 git develop
 | 
			
		||||
      salt_install: bootstrap
 | 
			
		||||
    # Workaround to avoid intermittent failures on `opensuse-leap-15`:
 | 
			
		||||
    # => SCP did not finish successfully (255):  (Net::SCP::Error)
 | 
			
		||||
    transport:
 | 
			
		||||
      max_ssh_sessions: 1
 | 
			
		||||
  - name: amazonlinux-2-develop-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-develop-py2:amazonlinux-2
 | 
			
		||||
      provision_command:
 | 
			
		||||
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
 | 
			
		||||
        - sh bootstrap-salt.sh -XdPbfrq -x python2 git develop
 | 
			
		||||
  - name: arch-base-latest-develop-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-develop-py2:arch-base-latest
 | 
			
		||||
      provision_command:
 | 
			
		||||
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
 | 
			
		||||
        - sh bootstrap-salt.sh -XdPbfrq -x python2 git develop
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
 | 
			
		||||
  ## SALT `2019.2`
 | 
			
		||||
  - name: debian-9-2019-2-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2019.2-py3:debian-9
 | 
			
		||||
  - name: ubuntu-1804-2019-2-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2019.2-py3:ubuntu-18.04
 | 
			
		||||
  - name: centos-7-2019-2-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2019.2-py3:centos-7
 | 
			
		||||
  - name: fedora-30-2019-2-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2019.2-py3:fedora-30
 | 
			
		||||
  - name: opensuse-leap-15-2019-2-py3
 | 
			
		||||
    driver:
 | 
			
		||||
      image: opensuse/leap:15
 | 
			
		||||
      provision_command:
 | 
			
		||||
        # yamllint disable-line rule:line-length
 | 
			
		||||
        - zypper install -y glibc-locale net-tools net-tools-deprecated python-xml python3-pip
 | 
			
		||||
        - systemctl enable sshd.service
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
    provisioner:
 | 
			
		||||
      salt_bootstrap_options: -XdPfrq -x python3 git 2019.2
 | 
			
		||||
      salt_install: bootstrap
 | 
			
		||||
    # Workaround to avoid intermittent failures on `opensuse-leap-15`:
 | 
			
		||||
    # => SCP did not finish successfully (255):  (Net::SCP::Error)
 | 
			
		||||
    transport:
 | 
			
		||||
      max_ssh_sessions: 1
 | 
			
		||||
  - name: amazonlinux-2-2019-2-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2019.2-py2:amazonlinux-2
 | 
			
		||||
  - name: arch-base-latest-2019-2-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2019.2-py2:arch-base-latest
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
 | 
			
		||||
  ## SALT `2018.3`
 | 
			
		||||
  - name: debian-9-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2018.3-py2:debian-9
 | 
			
		||||
  - name: ubuntu-1604-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2018.3-py2:ubuntu-16.04
 | 
			
		||||
  - name: centos-7-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2018.3-py2:centos-7
 | 
			
		||||
  - name: fedora-29-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2018.3-py2:fedora-29
 | 
			
		||||
  - name: opensuse-leap-15-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: opensuse/leap:15
 | 
			
		||||
      provision_command:
 | 
			
		||||
        # yamllint disable-line rule:line-length
 | 
			
		||||
        - zypper install -y glibc-locale net-tools net-tools-deprecated python-xml python2-pip
 | 
			
		||||
        - systemctl enable sshd.service
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
    provisioner:
 | 
			
		||||
      salt_bootstrap_options: -XdPfrq -x python2 git 2018.3
 | 
			
		||||
      salt_install: bootstrap
 | 
			
		||||
    # Workaround to avoid intermittent failures on `opensuse-leap-15`:
 | 
			
		||||
    # => SCP did not finish successfully (255):  (Net::SCP::Error)
 | 
			
		||||
    transport:
 | 
			
		||||
      max_ssh_sessions: 1
 | 
			
		||||
  - name: amazonlinux-2-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2018.3-py2:amazonlinux-2
 | 
			
		||||
  - name: arch-base-latest-2018-3-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2018.3-py2:arch-base-latest
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
 | 
			
		||||
  ## SALT `2017.7`
 | 
			
		||||
  - name: debian-8-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2017.7-py2:debian-8
 | 
			
		||||
  - name: ubuntu-1604-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2017.7-py2:ubuntu-16.04
 | 
			
		||||
  - name: centos-6-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2017.7-py2:centos-6
 | 
			
		||||
      run_command: /sbin/init
 | 
			
		||||
  - name: fedora-29-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2017.7-py2:fedora-29
 | 
			
		||||
  - name: opensuse-leap-15-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: opensuse/leap:15
 | 
			
		||||
      provision_command:
 | 
			
		||||
        # yamllint disable-line rule:line-length
 | 
			
		||||
        - zypper install -y glibc-locale net-tools net-tools-deprecated python-xml python2-pip
 | 
			
		||||
        - systemctl enable sshd.service
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
    provisioner:
 | 
			
		||||
      salt_bootstrap_options: -XdPfrq -x python2 git 2017.7
 | 
			
		||||
      salt_install: bootstrap
 | 
			
		||||
    # Workaround to avoid intermittent failures on `opensuse-leap-15`:
 | 
			
		||||
    # => SCP did not finish successfully (255):  (Net::SCP::Error)
 | 
			
		||||
    transport:
 | 
			
		||||
      max_ssh_sessions: 1
 | 
			
		||||
  - name: amazonlinux-2-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2017.7-py2:amazonlinux-2
 | 
			
		||||
  - name: arch-base-latest-2017-7-py2
 | 
			
		||||
    driver:
 | 
			
		||||
      image: netmanagers/salt-2017.7-py2:arch-base-latest
 | 
			
		||||
      run_command: /usr/lib/systemd/systemd
 | 
			
		||||
 | 
			
		||||
provisioner:
 | 
			
		||||
  name: salt_solo
 | 
			
		||||
  log_level: debug
 | 
			
		||||
  salt_install: none
 | 
			
		||||
  require_chef: false
 | 
			
		||||
  formula: apache
 | 
			
		||||
  salt_copy_filter:
 | 
			
		||||
    - .kitchen
 | 
			
		||||
    - .git
 | 
			
		||||
 | 
			
		||||
verifier:
 | 
			
		||||
  # https://www.inspec.io/
 | 
			
		||||
  name: inspec
 | 
			
		||||
  sudo: true
 | 
			
		||||
  # cli, documentation, html, progress, json, json-min, json-rspec, junit
 | 
			
		||||
  reporter:
 | 
			
		||||
    - cli
 | 
			
		||||
 | 
			
		||||
suites:
 | 
			
		||||
  - name: default
 | 
			
		||||
    provisioner:
 | 
			
		||||
      state_top:
 | 
			
		||||
        base:
 | 
			
		||||
          '*':
 | 
			
		||||
            - apache
 | 
			
		||||
            - apache.mod_security
 | 
			
		||||
      pillars:
 | 
			
		||||
        top.sls:
 | 
			
		||||
          base:
 | 
			
		||||
            '*':
 | 
			
		||||
              - apache
 | 
			
		||||
      pillars_from_files:
 | 
			
		||||
        apache.sls: test/salt/pillar/default.sls
 | 
			
		||||
    verifier:
 | 
			
		||||
      inspec_tests:
 | 
			
		||||
        - path: test/integration/default
 | 
			
		||||
							
								
								
									
										30
									
								
								pre-commit_semantic-release.sh
									
									
									
									
									
										Executable file
									
								
							
							
						
						
									
										30
									
								
								pre-commit_semantic-release.sh
									
									
									
									
									
										Executable file
									
								
							@ -0,0 +1,30 @@
 | 
			
		||||
#!/bin/sh
 | 
			
		||||
 | 
			
		||||
###############################################################################
 | 
			
		||||
# (A) Update `FORMULA` with `${nextRelease.version}`
 | 
			
		||||
###############################################################################
 | 
			
		||||
sed -i -e "s_^\(version:\).*_\1 ${1}_" FORMULA
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
###############################################################################
 | 
			
		||||
# (B) Use `m2r` to convert automatically produced `.md` docs to `.rst`
 | 
			
		||||
###############################################################################
 | 
			
		||||
 | 
			
		||||
# Install `m2r`
 | 
			
		||||
sudo -H pip install m2r
 | 
			
		||||
 | 
			
		||||
# Copy and then convert the `.md` docs
 | 
			
		||||
cp *.md docs/
 | 
			
		||||
cd docs/
 | 
			
		||||
m2r --overwrite *.md
 | 
			
		||||
 | 
			
		||||
# Change excess `H1` headings to `H2` in converted `CHANGELOG.rst`
 | 
			
		||||
sed -i -e '/^=.*$/s/=/-/g' CHANGELOG.rst
 | 
			
		||||
sed -i -e '1,4s/-/=/g' CHANGELOG.rst
 | 
			
		||||
 | 
			
		||||
# Use for debugging output, when required
 | 
			
		||||
# cat AUTHORS.rst
 | 
			
		||||
# cat CHANGELOG.rst
 | 
			
		||||
 | 
			
		||||
# Return back to the main directory
 | 
			
		||||
cd ..
 | 
			
		||||
							
								
								
									
										18
									
								
								release-rules.js
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										18
									
								
								release-rules.js
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,18 @@
 | 
			
		||||
// No release is triggered for the types commented out below.
 | 
			
		||||
// Commits using these types will be incorporated into the next release.
 | 
			
		||||
//
 | 
			
		||||
// NOTE: Any changes here must be reflected in `CONTRIBUTING.md`.
 | 
			
		||||
module.exports = [
 | 
			
		||||
  {breaking: true, release: 'major'},
 | 
			
		||||
  // {type: 'build', release: 'patch'},
 | 
			
		||||
  // {type: 'chore', release: 'patch'},
 | 
			
		||||
  // {type: 'ci', release: 'patch'},
 | 
			
		||||
  {type: 'docs', release: 'patch'},
 | 
			
		||||
  {type: 'feat', release: 'minor'},
 | 
			
		||||
  {type: 'fix', release: 'patch'},
 | 
			
		||||
  {type: 'perf', release: 'patch'},
 | 
			
		||||
  {type: 'refactor', release: 'patch'},
 | 
			
		||||
  {type: 'revert', release: 'patch'},
 | 
			
		||||
  {type: 'style', release: 'patch'},
 | 
			
		||||
  {type: 'test', release: 'patch'},
 | 
			
		||||
];
 | 
			
		||||
							
								
								
									
										106
									
								
								release.config.js
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										106
									
								
								release.config.js
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,106 @@
 | 
			
		||||
module.exports = {
 | 
			
		||||
  branch: 'master',
 | 
			
		||||
  plugins: [
 | 
			
		||||
      ['@semantic-release/commit-analyzer', {
 | 
			
		||||
        preset: 'angular',
 | 
			
		||||
        releaseRules: './release-rules.js',
 | 
			
		||||
      }],
 | 
			
		||||
      '@semantic-release/release-notes-generator',
 | 
			
		||||
      ['@semantic-release/changelog', {
 | 
			
		||||
        changelogFile: 'CHANGELOG.md',
 | 
			
		||||
        changelogTitle: '# Changelog',
 | 
			
		||||
      }],
 | 
			
		||||
      ['@semantic-release/exec', {
 | 
			
		||||
        prepareCmd: 'sh ./pre-commit_semantic-release.sh ${nextRelease.version}',
 | 
			
		||||
      }],
 | 
			
		||||
      ['@semantic-release/git', {
 | 
			
		||||
        assets: ['*.md', 'docs/*.rst', 'FORMULA'],
 | 
			
		||||
      }],
 | 
			
		||||
      '@semantic-release/github',
 | 
			
		||||
  ],
 | 
			
		||||
  generateNotes: {
 | 
			
		||||
    preset: 'angular',
 | 
			
		||||
    writerOpts: {
 | 
			
		||||
      // Required due to upstream bug preventing all types being displayed.
 | 
			
		||||
      // Bug: https://github.com/conventional-changelog/conventional-changelog/issues/317
 | 
			
		||||
      // Fix: https://github.com/conventional-changelog/conventional-changelog/pull/410
 | 
			
		||||
      transform: (commit, context) => {
 | 
			
		||||
          const issues = []
 | 
			
		||||
 | 
			
		||||
          commit.notes.forEach(note => {
 | 
			
		||||
              note.title = `BREAKING CHANGES`
 | 
			
		||||
          })
 | 
			
		||||
 | 
			
		||||
          // NOTE: Any changes here must be reflected in `CONTRIBUTING.md`.
 | 
			
		||||
          if (commit.type === `feat`) {
 | 
			
		||||
              commit.type = `Features`
 | 
			
		||||
          } else if (commit.type === `fix`) {
 | 
			
		||||
              commit.type = `Bug Fixes`
 | 
			
		||||
          } else if (commit.type === `perf`) {
 | 
			
		||||
              commit.type = `Performance Improvements`
 | 
			
		||||
          } else if (commit.type === `revert`) {
 | 
			
		||||
              commit.type = `Reverts`
 | 
			
		||||
          } else if (commit.type === `docs`) {
 | 
			
		||||
              commit.type = `Documentation`
 | 
			
		||||
          } else if (commit.type === `style`) {
 | 
			
		||||
              commit.type = `Styles`
 | 
			
		||||
          } else if (commit.type === `refactor`) {
 | 
			
		||||
              commit.type = `Code Refactoring`
 | 
			
		||||
          } else if (commit.type === `test`) {
 | 
			
		||||
              commit.type = `Tests`
 | 
			
		||||
          } else if (commit.type === `build`) {
 | 
			
		||||
              commit.type = `Build System`
 | 
			
		||||
          // } else if (commit.type === `chore`) {
 | 
			
		||||
          //     commit.type = `Maintenance`
 | 
			
		||||
          } else if (commit.type === `ci`) {
 | 
			
		||||
              commit.type = `Continuous Integration`
 | 
			
		||||
          } else {
 | 
			
		||||
              return
 | 
			
		||||
          }
 | 
			
		||||
 | 
			
		||||
          if (commit.scope === `*`) {
 | 
			
		||||
              commit.scope = ``
 | 
			
		||||
          }
 | 
			
		||||
 | 
			
		||||
          if (typeof commit.hash === `string`) {
 | 
			
		||||
              commit.hash = commit.hash.substring(0, 7)
 | 
			
		||||
          }
 | 
			
		||||
 | 
			
		||||
          if (typeof commit.subject === `string`) {
 | 
			
		||||
              let url = context.repository
 | 
			
		||||
                  ? `${context.host}/${context.owner}/${context.repository}`
 | 
			
		||||
                  : context.repoUrl
 | 
			
		||||
              if (url) {
 | 
			
		||||
                  url = `${url}/issues/`
 | 
			
		||||
                  // Issue URLs.
 | 
			
		||||
                  commit.subject = commit.subject.replace(/#([0-9]+)/g, (_, issue) => {
 | 
			
		||||
                      issues.push(issue)
 | 
			
		||||
                      return `[#${issue}](${url}${issue})`
 | 
			
		||||
                  })
 | 
			
		||||
              }
 | 
			
		||||
              if (context.host) {
 | 
			
		||||
                  // User URLs.
 | 
			
		||||
                  commit.subject = commit.subject.replace(/\B@([a-z0-9](?:-?[a-z0-9/]){0,38})/g, (_, username) => {
 | 
			
		||||
                  if (username.includes('/')) {
 | 
			
		||||
                      return `@${username}`
 | 
			
		||||
                  }
 | 
			
		||||
 | 
			
		||||
                  return `[@${username}](${context.host}/${username})`
 | 
			
		||||
                  })
 | 
			
		||||
              }
 | 
			
		||||
          }
 | 
			
		||||
 | 
			
		||||
          // remove references that already appear in the subject
 | 
			
		||||
          commit.references = commit.references.filter(reference => {
 | 
			
		||||
              if (issues.indexOf(reference.issue) === -1) {
 | 
			
		||||
                  return true
 | 
			
		||||
              }
 | 
			
		||||
 | 
			
		||||
              return false
 | 
			
		||||
          })
 | 
			
		||||
 | 
			
		||||
          return commit
 | 
			
		||||
      },
 | 
			
		||||
    },
 | 
			
		||||
  },
 | 
			
		||||
};
 | 
			
		||||
							
								
								
									
										50
									
								
								test/integration/default/README.md
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										50
									
								
								test/integration/default/README.md
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,50 @@
 | 
			
		||||
# InSpec Profile: `default`
 | 
			
		||||
 | 
			
		||||
This shows the implementation of the `default` InSpec [profile](https://github.com/inspec/inspec/blob/master/docs/profiles.md).
 | 
			
		||||
 | 
			
		||||
## Verify a profile
 | 
			
		||||
 | 
			
		||||
InSpec ships with built-in features to verify a profile structure.
 | 
			
		||||
 | 
			
		||||
```bash
 | 
			
		||||
$ inspec check default
 | 
			
		||||
Summary
 | 
			
		||||
-------
 | 
			
		||||
Location: default
 | 
			
		||||
Profile: profile
 | 
			
		||||
Controls: 4
 | 
			
		||||
Timestamp: 2019-06-24T23:09:01+00:00
 | 
			
		||||
Valid: true
 | 
			
		||||
 | 
			
		||||
Errors
 | 
			
		||||
------
 | 
			
		||||
 | 
			
		||||
Warnings
 | 
			
		||||
--------
 | 
			
		||||
```
 | 
			
		||||
 | 
			
		||||
## Execute a profile
 | 
			
		||||
 | 
			
		||||
To run all **supported** controls on a local machine use `inspec exec /path/to/profile`.
 | 
			
		||||
 | 
			
		||||
```bash
 | 
			
		||||
$ inspec exec default
 | 
			
		||||
..
 | 
			
		||||
 | 
			
		||||
Finished in 0.0025 seconds (files took 0.12449 seconds to load)
 | 
			
		||||
8 examples, 0 failures
 | 
			
		||||
```
 | 
			
		||||
 | 
			
		||||
## Execute a specific control from a profile
 | 
			
		||||
 | 
			
		||||
To run one control from the profile use `inspec exec /path/to/profile --controls name`.
 | 
			
		||||
 | 
			
		||||
```bash
 | 
			
		||||
$ inspec exec default --controls package
 | 
			
		||||
.
 | 
			
		||||
 | 
			
		||||
Finished in 0.0025 seconds (files took 0.12449 seconds to load)
 | 
			
		||||
1 examples, 0 failures
 | 
			
		||||
```
 | 
			
		||||
 | 
			
		||||
See an [example control here](https://github.com/inspec/inspec/blob/master/examples/profile/controls/example.rb).
 | 
			
		||||
@ -1,5 +1,3 @@
 | 
			
		||||
require_relative '../../../kitchen/data/spec_helper'
 | 
			
		||||
 | 
			
		||||
describe 'apache.mod_security' do
 | 
			
		||||
 | 
			
		||||
  case os[:family]
 | 
			
		||||
							
								
								
									
										18
									
								
								test/integration/default/inspec.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										18
									
								
								test/integration/default/inspec.yml
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,18 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
name: default
 | 
			
		||||
title: apache formula
 | 
			
		||||
maintainer: SaltStack Formulas
 | 
			
		||||
license: Apache-2.0
 | 
			
		||||
summary: Verify that the apache formula is setup and configured correctly
 | 
			
		||||
supports:
 | 
			
		||||
  - platform-name: debian
 | 
			
		||||
  - platform-name: ubuntu
 | 
			
		||||
  - platform-name: centos
 | 
			
		||||
  - platform-name: fedora
 | 
			
		||||
  - platform-name: opensuse
 | 
			
		||||
  - platform-name: suse
 | 
			
		||||
  - platform-name: freebsd
 | 
			
		||||
  - platform-name: amazon
 | 
			
		||||
  - platform-name: arch
 | 
			
		||||
							
								
								
									
										17
									
								
								test/salt/pillar/default.sls
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										17
									
								
								test/salt/pillar/default.sls
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,17 @@
 | 
			
		||||
# -*- coding: utf-8 -*-
 | 
			
		||||
# vim: ft=yaml
 | 
			
		||||
---
 | 
			
		||||
apache:
 | 
			
		||||
  manage_service_states: False
 | 
			
		||||
  mod_security:
 | 
			
		||||
    crs_install: True
 | 
			
		||||
    manage_config: True
 | 
			
		||||
    sec_rule_engine: 'On'
 | 
			
		||||
    sec_request_body_access: 'On'
 | 
			
		||||
    sec_request_body_limit: '14000000'
 | 
			
		||||
    sec_request_body_no_files_limit: '114002'
 | 
			
		||||
    sec_request_body_in_memory_limit: '114002'
 | 
			
		||||
    sec_request_body_limit_action: 'Reject'
 | 
			
		||||
    sec_pcre_match_limit: '15000'
 | 
			
		||||
    sec_pcre_match_limit_recursion: '15000'
 | 
			
		||||
    sec_debug_log_level: '3'
 | 
			
		||||
@ -1,9 +0,0 @@
 | 
			
		||||
require "serverspec"
 | 
			
		||||
require "pathname"
 | 
			
		||||
 | 
			
		||||
# Set backend type
 | 
			
		||||
set :backend, :exec
 | 
			
		||||
 | 
			
		||||
RSpec.configure do |c|
 | 
			
		||||
  c.path = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
 | 
			
		||||
end
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user