cuken 0.1.11 → 0.1.12

data/Gemfile

@@ -5,7 +5,7 @@ source "http://rubygems.org"
 group :default do
   gem 'aruba', "~> 0.3.6"
   gem "cucumber", ">= 0"
-  gem 'chef', "~>0.10.0.rc.0"
+  gem 'chef', "~>0.10.0"
   gem 'grit', "~>2.4.1"
   gem 'rvm', "~>1.5.2"
   gem 'open4'

data/Gemfile.lock

@@ -9,11 +9,11 @@ GEM
       rspec (>= 2.5.0)
     builder (3.0.0)
     bunny (0.6.0)
-    chef (0.10.0.rc.1)
+    chef (0.10.0)
       bunny (>= 0.6.0)
       erubis
       highline
-      json (>= 1.4.4, <= 1.5.2)
+      json (<= 1.5.2, >= 1.4.4)
       mixlib-authentication (>= 1.1.0)
       mixlib-cli (>= 1.1.0)
       mixlib-config (>= 1.1.2)
@@ -22,7 +22,7 @@ GEM
       net-ssh (~> 2.1.3)
       net-ssh-multi (~> 1.0.1)
       ohai (>= 0.6.0)
-      rest-client (>= 1.0.4, < 1.7.0)
+      rest-client (< 1.7.0, >= 1.0.4)
       treetop (~> 1.4.9)
       uuidtools
     childprocess (0.1.7)
@@ -36,10 +36,10 @@ GEM
     diff-lcs (1.1.2)
     erubis (2.6.6)
       abstract (>= 1.0.0)
-    fakefs (0.3.1)
+    fakefs (0.3.2)
     ffi (0.6.3)
       rake (>= 0.8.7)
-    gherkin (2.3.6)
+    gherkin (2.3.7)
       json (>= 1.4.6)
     git (1.2.5)
     grit (2.4.1)
@@ -63,12 +63,12 @@ GEM
     net-scp (1.0.4)
       net-ssh (>= 1.99.1)
     net-ssh (2.1.4)
-    net-ssh-gateway (1.0.1)
+    net-ssh-gateway (1.1.0)
       net-ssh (>= 1.99.1)
     net-ssh-multi (1.0.1)
       net-ssh (>= 1.99.2)
       net-ssh-gateway (>= 0.99.0)
-    ohai (0.6.2)
+    ohai (0.6.4)
       mixlib-cli
       mixlib-config
       mixlib-log
@@ -129,7 +129,7 @@ PLATFORMS
 DEPENDENCIES
   aruba (~> 0.3.6)
   bundler (~> 1.0.11)
-  chef (~> 0.10.0.rc.0)
+  chef (~> 0.10.0)
   cucumber
   fakefs (~> 0.3.1)
   grit (~> 2.4.1)

data/VERSION

@@ -1 +1 @@
-0.1.11
+0.1.12

data/cuken.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{cuken}
-  s.version = "0.1.11"
+  s.version = "0.1.12"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Hedgehog"]
-  s.date = %q{2011-05-02}
+  s.date = %q{2011-05-03}
   s.description = %q{Reusable Cucumber steps and API for post-convergence system integration descriptions}
   s.email = %q{hedgehogshiatus@gmail.com}
   s.extra_rdoc_files = [
@@ -39,6 +39,9 @@ Gem::Specification.new do |s|
     "features/chef_examples/cookbooks_repo.feature",
     "features/chef_examples/knife_admin_client.feature",
     "features/chef_examples/knife_client_create.feature",
+    "features/chef_examples/zenoss/01_chef_server_setup.feature",
+    "features/chef_examples/zenoss/02_monitor_vm_setup.feature",
+    "features/chef_examples/zenoss/03_monitor_chef_setup.feature",
     "features/chef_steps/common_steps.feature",
     "features/chef_steps/cookbook_steps.feature",
     "features/chef_steps/knife_steps.feature",
@@ -402,7 +405,9 @@ Gem::Specification.new do |s|
     "lib/cuken/api/chef.rb",
     "lib/cuken/api/chef/common.rb",
     "lib/cuken/api/chef/cookbook.rb",
+    "lib/cuken/api/chef/data_bag.rb",
     "lib/cuken/api/chef/knife.rb",
+    "lib/cuken/api/chef/role.rb",
     "lib/cuken/api/cmd.rb",
     "lib/cuken/api/common.rb",
     "lib/cuken/api/file.rb",
@@ -410,6 +415,9 @@ Gem::Specification.new do |s|
     "lib/cuken/api/ssh-forever.rb",
     "lib/cuken/api/ssh.rb",
     "lib/cuken/api/ssh/password.rb",
+    "lib/cuken/api/vagrant.rb",
+    "lib/cuken/api/vagrant/common.rb",
+    "lib/cuken/api/vagrant/v_m.rb",
     "lib/cuken/chef.rb",
     "lib/cuken/cmd.rb",
     "lib/cuken/common.rb",
@@ -441,11 +449,17 @@ Gem::Specification.new do |s|
     "lib/cuken/cucumber/cmd.rb",
     "lib/cuken/cucumber/common.rb",
     "lib/cuken/cucumber/file.rb",
+    "lib/cuken/cucumber/git/hooks.rb",
     "lib/cuken/cucumber/rvm.rb",
     "lib/cuken/cucumber/ssh.rb",
+    "lib/cuken/cucumber/ssh/hooks.rb",
+    "lib/cuken/cucumber/vagrant.rb",
+    "lib/cuken/cucumber/vagrant/common.rb",
+    "lib/cuken/cucumber/vagrant/hooks.rb",
     "lib/cuken/file.rb",
     "lib/cuken/rvm.rb",
     "lib/cuken/ssh.rb",
+    "lib/cuken/vagrant.rb",
     "spec/api/knife_spec.rb",
     "spec/api/rvm_spec.rb",
     "spec/api/rvmrc_processor_spec.rb",
@@ -472,7 +486,7 @@ Gem::Specification.new do |s|
     if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
       s.add_runtime_dependency(%q<aruba>, ["~> 0.3.6"])
       s.add_runtime_dependency(%q<cucumber>, [">= 0"])
-      s.add_runtime_dependency(%q<chef>, ["~> 0.10.0.rc.0"])
+      s.add_runtime_dependency(%q<chef>, ["~> 0.10.0"])
       s.add_runtime_dependency(%q<grit>, ["~> 2.4.1"])
       s.add_runtime_dependency(%q<rvm>, ["~> 1.5.2"])
       s.add_runtime_dependency(%q<open4>, [">= 0"])
@@ -490,7 +504,7 @@ Gem::Specification.new do |s|
     else
       s.add_dependency(%q<aruba>, ["~> 0.3.6"])
       s.add_dependency(%q<cucumber>, [">= 0"])
-      s.add_dependency(%q<chef>, ["~> 0.10.0.rc.0"])
+      s.add_dependency(%q<chef>, ["~> 0.10.0"])
       s.add_dependency(%q<grit>, ["~> 2.4.1"])
       s.add_dependency(%q<rvm>, ["~> 1.5.2"])
       s.add_dependency(%q<open4>, [">= 0"])
@@ -509,7 +523,7 @@ Gem::Specification.new do |s|
   else
     s.add_dependency(%q<aruba>, ["~> 0.3.6"])
     s.add_dependency(%q<cucumber>, [">= 0"])
-    s.add_dependency(%q<chef>, ["~> 0.10.0.rc.0"])
+    s.add_dependency(%q<chef>, ["~> 0.10.0"])
     s.add_dependency(%q<grit>, ["~> 2.4.1"])
     s.add_dependency(%q<rvm>, ["~> 1.5.2"])
     s.add_dependency(%q<open4>, [">= 0"])

data/features/about.md

@@ -17,45 +17,82 @@ The Chef steps assume you have Chef server accessible on `localhost:4040`.
 If you have ideas to clarify or improve any of these cucumber features,
 please submit an [issue][9] or [pull request][8].
 
-## The Chef JSON Issue
-Due to several JSON gem conflicts between various gems, Cuken is only intended
+## The Chef vs Vagrant/Aruba JSON Issue
+Due to several JSON gem conflicts between Chef and the Vagrant/Aruba gems, Cuken is only intended
 to work with the 0.10 series of Chef.  Of course you are free to work whatever
-magic you wish.
+magic you wish for the 0.9.x releases.
 
 ## Opinons
 Virtual machines are [Vagrant][11] VM's.
 Vagrant VM's are all named.
 Configuration management and system integration is done with [Opscode's Chef][12].
-Chef Cookbooks are sourced from the the [Cookbooks account][13] on Github.
+Chef Cookbooks are sourced from the [Cookbooks account][13] on Github.
+
+## Multiple Vagrant Multi-VM Environemts in one Scenario
+Vagrant allows you to have Multi-VM environemnts in one Vagrantfile.
+Cuken allows you to have multiple Vangrant Multi-VM environments in one scenario.
+However there can be a performance penalty, so use this judiciously.  To illustrate the performance hit
+the Zenoss example (02_monitor_vm_setup.rb) has a multiple Vagrant environment as a Background - this gets run before
+each scenario.  This example also serves to demonstrate the steps neccessary to switch between Vagrant environments
+(Vagrantfiles).  Note the convention is that the Vagrant file resides in the Chef-project root directory.
+
+  Background:
+    Given the Chef root directory "/tmp/chef" exists
+      And the state of VM "chef" is "running"
+      And I switch Vagrant environment
+      And the Chef root directory "/tmp/monitor" exists
+      And the state of VM "monitor" is not "running"
+
+NOTE:
+The Zenoss example is intended to exercise steps and illustrate some useage.
+It is certainly not an illustrattion of best practice.
 
 ## Conventions
-Rather than repeatedly refer to Chef and Vagrant in step definitions, where it is unambiguous,
-we simply treat the item or attribute as the pro-noun, and capitalize it.
+
+### Generic
+Rather than repeatedly refer to Chef, Vagrant, etc. in each step, where it is unambiguous,
+we treat the item or attribute as a pronoun, but capitalize to indicate the specialized substitution.
+So, while there are many virtual machines and data bags in the world, here they refer to
+Vagrant (VirtualBox) and Chef.
+
 Examples:
 
-    Given the VM "chef" is not running
+    Given the state of VM "chef" is not "running"
     Given I create the Data Bag "user"
 
-Aruba will timeout if a command takes too long.  A convention is to tag Features/Scenarios
-according to the size of the timeout threshold:
+### Place and Placed Files and Folders
+The convention is to carry out all file and folder CRUD inside Aruba's scratch directory.
+Given that Aruba deletes its tmporary working folder at the start of each scenario, it is  neccessary to transfer any
+files and folders you wish to keep.
+We refer to this transfer of files and folders as 'placing'.  Since a copy does not exists beyond the Scenario's life,
+and since we verify the contents of placed files, it is not a file or folder copy nor move.
+Placing and placed files and folders refer to taking a file from Aruba's scratch folder, moving it
+outside of that ephemeral area and verifying the contents.
 
-    no tag:  3 seconds (Aruba default)
-    @slow
-    @glacial
-    @cosmic
+### Chef
+In most cases Chef operations refer to the remote server, e.g. 'I create the Data Bag "...".  The reason we leave remote
+implicit in these steps, are:
+a) to keep steps descriptions succint yet informative/accurate.
+b) a 'local' version of this step is not accurate because local, filesystem, operations are properly done with the file
+and directory steps and API, and are not done through Chef/Knife.
 
-Aruba will timeout if IO takes too long.  This affects interactive SSH connections.
+Cookbooks are are checked out into the branch 'cuken'.
+Once you are happy with your changes, you can [rebase][14] ([interactively][15]) then push your changes to your fork
+There are other ways, here is one [Git ver. 1.7.5]):
 
-    no tag:      0.1 seconds (Aruba default)
-    @ssh_local
-    @ssh_remote
-    @ssh_pigeon
+    git checkout cuken  # Just in case. Cuken leaves this branch checked-out
+    git rebase qa
+    git push origin qa
 
-The default before blocks are in some of the Cucumber files. Example:
+Then, on Github, issue a pull request from the qa branch of your fork.
+To see a listing of the changes (before you rebase): `git diff qa..cuken`
 
-    ./lib/cuken/cucumber/chef.rb
+### Vagrant
+The Vagrantfile is required to be in the Chef-project root directory.  Consequently the step
+'the Chef root directory "/tmp/chef" exists' is required before any Vagrant steps.
 
-If you need to change a default, add to your features/support/env.rb:
+## Hooks
+If you need to change a default hook, add your variation of the following to your project's features/support/env.rb:
 
     Before do
       @aruba_timeout_seconds.nil? || @aruba_timeout_seconds < 3 ? @aruba_timeout_seconds = 3 : @aruba_timeout_seconds
@@ -65,19 +102,61 @@ If you need to change a default, add to your features/support/env.rb:
       @aruba_timeout_seconds.nil? || @aruba_timeout_seconds < 3600 ? @aruba_timeout_seconds = 3600 : @aruba_timeout_seconds
     end
 
+### Aruba
+Aruba will timeout if a command takes too long.  A convention is to tag Features/Scenarios
+according to the size of the timeout threshold:
+See lib/cuken/vagrant/hooks.rb:
+
+    no tag:  3 seconds (Aruba default)
+    @fast    6 seconds
+    @quick   20 seconds
+    @slow    60 seconds
+    @glacial 600 seconds
+    @cosmic  3600 seconds
 
-## Step contributions:
-- Ideally the API methods should be covered by RSpec (I've been slack
-on this simply because I'm trying to get over the initial backlog of
-steps to port).
-- Have a feature/scenario that illustrates its use.
+Aruba will timeout if IO takes too long.  This affects interactive SSH connections.
+See lib/cuken/ssh/hooks.rb:
+
+    no tag:      0.1 second (Aruba default)
+    @ssh_local   0.3 second
+    @ssh_remote  1 second
+    @ssh_pigeon  3 seconds
+    @ssh_dodo    10 seconds
+
+### Git/Grit
+See lib/cuken/git/hooks.rb:
+
+    no tag:  10 seconds (Grit default)
+    @git_quick   20 seconds
+    @git_slow    60 seconds
+    @git_glacial 600 seconds
+    @git_cosmic  3600 seconds
+
+## Gotcha's
+Unicorns are a dream, but Dragons are real...
+### Aruba
+Aruba doesn't yet handle generic script execution, and that includes Bash and friends.  There is some support for Ruby.
+No trouble, you just need to use this syntax, if you want to fix it, see [here][16]:
+
+    And I run `bash -c 'cp ~/chef/vagrant/lucid64.box /tmp/monitor'`
+
+## API and Step contributions:
+- Ideally the API methods should be covered by RSpec (I've been slack due to the backlog of pre-existing steps to port).
+- Have a feature/scenario that illustrates its use, this is the psuedo specs I've been relying on.  If you are not
+convinced this approach is a long term disaster, review Bundler's code base circa v1.0.10.
+- Refactoring an API method is discouraged before a spec fully describing the current behavior exists.
+
+## TODO
+- General passwordless and interactive SSH steps (currently Vagrant VM specific)
+- Cloud launch and basic management steps, i.e. CRUD operations for Cloud VM
+- Updating packages on a VM, and repackaging the VM, essentialy CRUD too.
 
 ## Prior Art:
 - [Aruba][2] confirmed the utility of reusable steps.
 - [Auxesis' Cucumber-Nagios][4] served as launch pad, and [had this idea early on][10].
 - [Chef][5] steps are being ported.
 - [Virtualbox][6] steps are planned to be ported.
-- [SSH-Forever][7] serves as the API-base for passwordless SSH steps.
+- [SSH-Forever][7] copied as the API-base for passwordless SSH steps.
 
 [0]: https://github.com/aslakhellesoy/cucumber
 [1]: https://github.com/hedgehog/cuken
@@ -93,3 +172,7 @@ steps to port).
 [11]: http://vagrantup.com/
 [12]: http://wiki.opscode.com/display/chef/Home
 [13]: https://github.com/cookbooks/
+[14]: http://book.git-scm.com/4_rebasing.html
+[15]: http://book.git-scm.com/4_interactive_rebasing.html
+[16]: https://github.com/aslakhellesoy/aruba/issues/69
+

data/features/chef_examples/cookbooks_cookbook.feature

@@ -29,8 +29,8 @@ Feature: Cookbook Validity
   Scenario: Clone non-existant Cookbooks from a Cookbooks URI
     Given the remote Cookbooks URI "git://github.com/cookbooks/"
      When I clone the Cookbooks:
-     | cookbook | branch | tag       | ref        | destination                         |
-     | hfgrt    |        | 37s.0.1.0 |            | ckbk/scratch/myapp/cookbooks/hosts3 |
+     | cookbook | tag       | destination                         |
+     | hfgrt    | 37s.0.1.0 | ckbk/scratch/myapp/cookbooks/hosts3 |
      Then the output should contain "Could not find Repository cookbooks/hfgrt"
 
   Scenario: Clone multiple Cookbooks from a Cookbooks URI

data/features/chef_examples/zenoss/01_chef_server_setup.feature

@@ -0,0 +1,205 @@
+@announce
+Feature: Zenoss Monitoring
+  In order to launch a Zenoss server
+  As a admin/developer
+  I want to define the Chef admin client configuration via executable features
+
+  Scenario: Create the Chef server Node's Vagrantfile
+   Given the file "Vagrantfile" contains nothing
+    When I write to "Vagrantfile":
+    """
+    Vagrant::Config.run do |config|
+
+      @cs_root_path      = File.dirname(File.absolute_path(__FILE__))
+      @cs_box            = "chef"
+      @cs_box_url        = (Pathname(@cs_root_path) + 'lucid64.box').to_s
+      @cs_nodename       = "chef"
+      @cs_tld            = "private.org"
+      @cs_ip             = "33.33.33.254"   # Host-only networking
+      @cs_port           = 4000
+      @cs_ssh_port       = 2200
+      @cs_webui_port     = 4040
+      @cs_kitchen        = @cs_root_path
+      @cs_validation_client_name = "chef-validator"
+
+      config.vm.define :chef do |csc|
+
+        csc.send :eval, IO.read("#{@cs_root_path}/hobos/vm.bo")
+
+        csc.vm.box = "#{@cs_box}"
+        csc.vm.box_url = "#{@cs_box_url}"
+        csc.vm.forward_port("chefs", @cs_port, @cs_port)
+        csc.vm.forward_port("chefs_web", @cs_webui_port, @cs_webui_port)
+        csc.vm.forward_port("ssh", 22, @cs_ssh_port, :auto => true)
+        csc.vm.network(@cs_ip)
+        csc.vm.share_folder("chef", "~/chef", "#{@cs_root_path}/mnt/chef")
+        csc.vm.share_folder("chef-server-etc", "/etc/chef", "#{@cs_kitchen}/mnt/etc" )
+        csc.vm.share_folder("chef-cookbooks-0", "/tmp/vagrant-chef/cookbooks-0", "#{@cs_kitchen}/site-cookbooks")
+        csc.vm.share_folder("chef-cookbooks-1", "/tmp/vagrant-chef/cookbooks-1", "#{@cs_kitchen}/cookbooks")
+        csc.vm.provision :chef_solo do |chef|
+          chef.log_level = :debug # :info or :debug
+          chef.node_name = @cs_nodename
+          chef.cookbooks_path = [
+              File.expand_path("#{@cs_kitchen}/site-cookbooks"),
+              File.expand_path("#{@cs_kitchen}/cookbooks")]
+          chef.add_recipe("hosts::chefserver")
+          chef.add_recipe("apt")
+          chef.add_recipe("build-essential")
+          chef.add_recipe("chef-server::rubygems-install")
+          chef.json.merge!({
+              :chef_server=> {
+              :name=> @cs_nodename,
+              :validation_client_name=> @cs_validation_client_name,
+              :url_type=>"http",
+              :server_fqdn=> "#{@cs_nodename}.#{@cs_tld}",
+              :server_port=> "#{@cs_port}",
+              :webui_port=> "#{@cs_webui_port}",
+              :webui_enabled=> true,
+              :umask => '0644'
+             }
+            })
+        end
+      end
+    end
+    """
+    Then I place "Vagrantfile" in "/tmp/chef"
+
+  Scenario: Create some shared Vagrant configuration details
+    Given the directory "hobos"
+      And the file "hobos/vm.bo" contains nothing
+     When I write to "hobos/vm.bo":
+      """
+      vm.customize do |cvm|
+        cvm.memory_size = 1024
+        cvm.vram_size = 12
+        cvm.cpu_count = 2
+        cvm.accelerate_3d_enabled = false
+        cvm.accelerate_2d_video_enabled = false
+        cvm.monitor_count = 1
+
+        cvm.bios.acpi_enabled = true
+        cvm.bios.io_apic_enabled = false
+
+        cvm.cpu.pae = true
+
+        cvm.hw_virt.enabled = false
+        cvm.hw_virt.nested_paging = false
+        # STORAGE
+      end
+      """
+    And I place "hobos/vm.bo" in "/tmp/chef"
+
+  Scenario: Clone a Chef skeleton repository
+    Given the remote Chef repository "git://github.com/cookbooks/chef-repo.git"
+     When I clone the remote Chef repository branch "master" to "chef"
+      And the local Chef repository exists
+     Then I place all in "chef" in "/tmp/chef"
+
+  Scenario: Download Cookbooks from a Cookbooks URI
+    Given the remote Cookbooks URI "git://github.com/cookbooks/"
+     When I clone the Cookbooks:
+          | cookbook         | branch | destination                    |
+          | apache2          | master | chef/cookbooks/apache2         |
+          | apt              | master | chef/cookbooks/apt             |
+          | bluepill         | master | chef/cookbooks/bluepill        |
+          | build-essential  | master | chef/cookbooks/build-essential |
+          | chef-client      | master | chef/cookbooks/chef-client     |
+          | chef-server      | master | chef/cookbooks/chef-server     |
+          | couchdb          | master | chef/cookbooks/couchdb         |
+          | daemontools      | master | chef/cookbooks/daemontools     |
+          | erlang           | master | chef/cookbooks/erlang          |
+          | gecode           | master | chef/cookbooks/gecode          |
+          | hosts            | master | chef/cookbooks/hosts           |
+          | java             | master | chef/cookbooks/java            |
+          | openssl          | master | chef/cookbooks/openssl         |
+          | rabbitmq         | master | chef/cookbooks/rabbitmq        |
+          | runit            | master | chef/cookbooks/runit           |
+          | ucspi-tcp        | master | chef/cookbooks/ucspi-tcp       |
+          | xml              | master | chef/cookbooks/xml             |
+          | zlib             | master | chef/cookbooks/zlib            |
+      And these local Cookbooks exist:
+         | cookbook         |
+         | apache2          |
+         | apt              |
+         | bluepill         |
+         | build-essential  |
+         | chef-client      |
+         | chef-server      |
+         | couchdb          |
+         | daemontools      |
+         | erlang           |
+         | gecode           |
+         | hosts            |
+         | java             |
+         | openssl          |
+         | rabbitmq         |
+         | runit            |
+         | ucspi-tcp        |
+         | xml              |
+         | zlib             |
+     Then I place all in "chef" in "/tmp/chef"
+
+  Scenario: Download Site-Cookbooks from a Cookbooks URI
+    Given the remote Cookbooks URI "git@github.com:hedgehog/"
+     When I clone the Cookbooks:
+         | cookbook         | branch | destination               |
+         | hosts            | qa     | chef/site-cookbooks/hosts |
+         | java             | qa     | chef/site-cookbooks/java  |
+      And these local Cookbooks exist:
+         | site-cookbook    |
+         | hosts            |
+         | java             |
+     Then I place all in "chef" in "/tmp/chef"
+
+  Scenario: Configure Knife file for the Chef administrator's client certificate
+      Given I write to ".chef/knife.rb":
+    """
+    current_dir = File.dirname(__FILE__)
+    user = ENV['CHEF_USER'] || ENV['OPSCODE_USER'] || ENV['USER'] || `whoami`
+    org = ENV['CHEF_ORGNAME'] || 'Private'
+    email =  ENV['CHEF_EMAIL'] || "#{user}@mailinator.com"
+    log_path = "#{current_dir}/../log"
+
+    current_dir = File.dirname(__FILE__)
+    node_name                "chef-webui"
+    log_location             "#{log_path}/client_#{node_name}.log"
+    log_level                :debug
+    verbose_logging          true
+    client_key               "#{File.dirname(current_dir)}/mnt/etc/webui.pem"
+    chef_server_url          "http://localhost:4000"
+    cache_type               'BasicFile'
+    cache_options            :path => "#{log_path}/checksums"
+    cookbook_path ["#{current_dir}/../cookbooks","#{current_dir}/../site-cookbooks"]
+
+    """
+     And I place ".chef/knife.rb" in "/tmp/chef"
+
+  Scenario: Start the Chef server VM
+    Given the Chef root directory "/tmp/chef" exists
+      And the VM "chef" is not "running"
+      And the Vagrantfile "/tmp/chef/Vagrantfile" exists
+     When I launch the VM "chef"
+     Then the state of VM "chef" is "running"
+
+  @ssh_local
+  Scenario: Fix the Chef server key/certificate permissions
+    Given the Chef root directory "/tmp/chef" exists
+      And the Vagrantfile "/tmp/chef/Vagrantfile" exists
+      And the state of VM "chef" is "running"
+     When I ssh to VM "chef"
+      And I type "sudo chmod 0644 /etc/chef/webui.pem"
+      And I type "sudo chmod 0644 /etc/chef/certificates/key.pem"
+      And I type "stat -c %A /etc/chef/webui.pem"
+      And I type "stat -c %A /etc/chef/certificates/key.pem"
+     Then the output should contain:
+          """
+          -rw-r--r--
+          -rw-r--r--
+          """
+
+  Scenario: Create the admin client monitor
+    Given the Chef root directory "/tmp/chef" exists
+      And the state of VM "chef" is "running"
+     When I create the Chef admin client "monitor"
+     Then the placed file "/tmp/chef/.chef/monitor.pem" contains "-----END RSA PRIVATE KEY-----"
+