inspec 0.9.10 → 0.9.11

data/lib/extras/compliance/README.md

@@ -1,15 +0,0 @@
-# InSpec Extension for Chef Compliance
-
-This extensions offers the following features:
-
- - list profiles available in Chef Compliance
- - execute profiles from Chef Compliance
- - upload a local profile to Chef Compliance
-
-To use the CLI, this extra package adds the following commands:
-
- * `$ inspec compliance login user password` - retieves a authentication token from Chef Compliance
- * `$ inspec compliance list` - list all available profiles in Chef Compliance
- * `$ inspec exec profile` - runs a profile that is stored on Chef Compliance
- * `$ inspec compliance upload path/to/local/profile` - uploads a local command to Chef Compliance
- * `$ inspec compliance logout` - removes the authentication token from the local cache and logs out of the Chef Compliance server

data/lib/extras/compliance/compliance.rb

@@ -1,245 +0,0 @@
-#!/usr/bin/env ruby
-# encoding: utf-8
-# author: Christoph Hartmann
-
-require 'thor'
-require 'net/http'
-require 'uri'
-
-# TODO:
-# - invalidate token
-# - fix file upload and genereate tar if required
-# - hook into exec with a new target helper
-
-class ComplianceCLI < Thor
-  namespace 'compliance'
-
-  desc 'login SERVER', 'Log in to a Chef Compliance SERVER'
-  options :username => :required, :password => :required
-  def login(server)
-    config = Compliance::Configuration.new
-    config['server'] = server
-    url = "#{server}/oauth/token"
-
-    data = post(url, options['username'], options['password'])
-    if !data.nil?
-      tokendata = JSON.parse(data)
-      if tokendata['access_token']
-        config['token'] = tokendata['access_token']
-        puts "Successfully authenticated"
-      else
-        puts 'Reponse does not include a token'
-      end
-    else
-      puts "Authentication failed for Server: #{url}"
-    end
-    config.store
-  end
-
-  desc 'list', 'list all available profiles in Chef Compliance'
-  def list
-    profiles = get_profiles
-    if !profiles.empty?
-      # iterate over profiles
-      puts "Available profiles: "
-      profiles.each { |profile|
-        puts " * #{profile[:org]}/#{profile[:name]}"
-      }
-    else
-      puts "Could not reach server #{url}"
-    end
-  end
-
-  desc 'exec PROFILE', 'executes a profile from Chef Compliance'
-  def exec(profile)
-    config = Compliance::Configuration.new
-    profiles = get_profiles
-    if !profiles.empty?
-      # 1. verify that the profile exists (list)
-      index = profiles.index { |p| "#{p[:org]}/#{p[:name]}" == profile }
-      if index >= 0
-        p = profiles[index]
-        # 2. execute the profile with the proper url, inject `inspec exec` with the suitable params`
-        url = "#{config['server']}/owners/#{p[:org]}/compliance/#{p[:name]}/tar"
-        puts "b bin/inspec exec #{url} --user #{config['token']}"
-      end
-    else
-      puts "The profile #{profile} is not available"
-    end
-  end
-
-  desc 'upload PATH', 'uploads a local profile to Chef Compliance'
-  def upload(path)
-    # 1. detect if tar or folder
-    # 2. archive if folder
-    # 3. check if tar is a compliance profile
-    # 4. show result and confirm upload to the user (skip with --force)
-    # 5. upload tar to server
-
-    # find the tar
-    config = Compliance::Configuration.new
-    tar_path = File.join(Dir.pwd, 'profile.tar.gz')
-
-    owner = 'admin'
-    profile = 'profile'
-    url = "#{config['server']}/owners/#{owner}/compliance/#{profile}/tar"
-
-    puts "Uploading to #{url}"
-    if post_file(url, config['token'], '', tar_path)
-      puts "Successfully uploaded profile"
-    else
-      puts "Error during profile upload"
-    end
-  end
-
-  desc 'version', 'displays the version of the Chef Compliance server'
-  def version
-    config = Compliance::Configuration.new
-    url = "#{config['server']}/version"
-
-    data = get(url, nil, nil)
-    if !data.nil?
-      info = JSON.parse(data)
-      puts "Chef Compliance version: #{info['version']}"
-    else
-      puts "Could not reach server #{url}"
-    end
-  end
-
-  desc 'logout', 'user logout from Chef Compliance'
-  def logout
-    config = Compliance::Configuration.new
-    url = "#{config['server']}/logout"
-    data = post(url, config['token'], nil)
-    if !data.nil?
-      puts "Successfully logged out"
-    else
-      puts "Could not log out"
-    end
-    config.destroy
-  end
-
-  private
-
-  def get_profiles
-    config = Compliance::Configuration.new
-
-    url = "#{config['server']}/user/compliance"
-    data = get(url, config['token'], '')
-
-    if !data.nil?
-      profiles = JSON.parse(data)
-      val = []
-      # iterate over profiles
-      profiles.each_key { |org|
-        profiles[org].each_key { |name|
-          val.push({ org: org, name: name})
-        }
-      }
-      val
-    else
-      []
-    end
-  end
-
-  def get(url, username, password)
-    uri = URI.parse(url)
-    req = Net::HTTP::Get.new(uri.path)
-    req.basic_auth username, password
-
-    send_request(uri, req)
-  end
-
-  def post(url, username, password)
-    # form request
-    uri = URI.parse(url)
-    req = Net::HTTP::Post.new(uri.path)
-    req.basic_auth username, password
-    req.form_data={}
-
-    send_request(uri, req)
-  end
-
-  # upload a file
-  def post_file(url, username, password, file_path)
-    uri = URI.parse(url)
-    http = Net::HTTP.new(uri.host, uri.port)
-    req = Net::HTTP::Post.new(uri.path)
-    req.basic_auth username, password
-
-    req.body_stream=File.open(file_path)
-    req["Content-Type"] = "multipart/form-data"
-    req.add_field('Content-Length', File.size(file_path))
-    req.add_field('Content-Type', 'application/x-gtar')
-
-    boundary = "INSPEC-PROFILE-UPLOAD"
-    req.add_field('session', boundary)
-    res=http.request(req)
-
-    # puts "Response #{response.code} #{response.message}"
-    # puts "#{response.body}"
-    # puts "Headers: #{response.to_hash.inspect}"
-
-    res.is_a?(Net::HTTPSuccess)
-  end
-
-  def send_request(uri, req)
-    # send request
-    res = Net::HTTP.start(uri.host, uri.port, :use_ssl => uri.scheme == 'https') {|http|
-      http.request(req)
-    }
-    if res.is_a?(Net::HTTPSuccess)
-      res.body
-    else
-      nil
-    end
-  end
-end
-
-module Compliance
-  class Configuration
-
-    def initialize
-      @config_path = File.join(ENV['HOME'], '/.inspec')
-      # ensure the directory is available
-      unless File.directory?(@config_path)
-        FileUtils.mkdir_p(@config_path)
-      end
-      # set config file pasth
-      @config_file = File.join(@config_path, '/config.json')
-      @config = {}
-
-      # load the data
-      get
-    end
-
-    # direct access to config
-    def [](key)
-      @config[key]
-    end
-
-    def []=(key, value)
-      @config[key] = value
-    end
-
-    # return the json data
-    def get
-      if File.exists?(@config_file)
-        file = File.read(@config_file)
-        @config = JSON.parse(file)
-      end
-      @config
-    end
-
-    # stores a hash to json
-    def store
-      File.open(@config_file,"w") do |f|
-        f.write(@config.to_json)
-      end
-    end
-
-    def destroy
-      File.delete(@config_file)
-    end
-  end
-end

data/test/integration/.kitchen/default-aws-linux.yml

@@ -1,4 +0,0 @@
----
-server_id: i-645bddd8
-hostname: ec2-52-29-45-159.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-centos-7.yml

@@ -1,4 +0,0 @@
----
-server_id: i-cd5adc71
-hostname: ec2-52-58-14-5.eu-central-1.compute.amazonaws.com
-last_action: setup

data/test/integration/.kitchen/default-debian-8.yml

@@ -1,4 +0,0 @@
----
-server_id: i-fb58de47
-hostname: ec2-52-29-199-226.eu-central-1.compute.amazonaws.com
-last_action: setup

data/test/integration/.kitchen/default-fedora-22.yml

@@ -1,4 +0,0 @@
----
-server_id: i-565bddea
-hostname: ec2-52-29-81-120.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-redhat-65.yml

@@ -1,4 +0,0 @@
----
-server_id: i-bc5bdd00
-hostname: ec2-52-29-169-254.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-redhat-71.yml

@@ -1,4 +0,0 @@
----
-server_id: i-f558de49
-hostname: ec2-52-58-13-178.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-suse-11sp3.yml

@@ -1,4 +0,0 @@
----
-server_id: i-615bdddd
-hostname: ec2-52-58-17-235.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-suse-12.yml

@@ -1,4 +0,0 @@
----
-server_id: i-ad59df11
-hostname: ec2-52-28-162-79.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-ubuntu-1204.yml

@@ -1,3 +0,0 @@
----
-server_id: i-6258dede
-hostname: ''

data/test/integration/.kitchen/default-ubuntu-1404.yml

@@ -1,4 +0,0 @@
----
-server_id: i-395bdd85
-hostname: ec2-52-28-206-244.eu-central-1.compute.amazonaws.com
-last_action: converge

data/test/integration/.kitchen/default-windows-2012r2.yml

@@ -1,2 +0,0 @@
----
-username: administrator

data/test/integration/.kitchen/kitchen-vagrant/kitchen-integration-default-fedora-22/.vagrant/machines/default/virtualbox/action_set_name

@@ -1 +0,0 @@
-1447703787

data/test/integration/.kitchen/kitchen-vagrant/kitchen-integration-default-fedora-22/.vagrant/machines/default/virtualbox/id

@@ -1 +0,0 @@
-770084ca-8622-45fc-9f86-9eff5d9f6662

data/test/integration/.kitchen/kitchen-vagrant/kitchen-integration-default-fedora-22/.vagrant/machines/default/virtualbox/index_uuid

@@ -1 +0,0 @@
-f51e44a0bf9e44db901d78ce3ecd74af

data/test/integration/.kitchen/kitchen-vagrant/kitchen-integration-default-fedora-22/.vagrant/machines/default/virtualbox/private_key

@@ -1,27 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEAwLGEO0LYDlsK9XekX6zmTVq0Elm/NwUtKQ7rFcBtGXzdpee0
-XyhnpgnEIVL1MYL3gu3xxqNUKCrcoM1PPw8cZZqI9rT/GEEoy708wAkBbkLD81D8
-ABUJ7SyP24Gj8sewuTkppkgFvYwM5yIqyP8WjCnCGr4KRUC1HCAH1U+9LJfaaarW
-a5EJVDbfsrz9YoUG1fLm1nSReECFtgl7z1ZYdamjl1nd3m+OFJ5I9TRs38VEP0qg
-L6XhdCyYwLqKhcF3pGF/CXkuBmlv4p722PAa/dL3RhoE2pAHAbncPuzySY/KQgLo
-lsLN48LVpSBcwhXzZeyzsnr7XcsyP1s6V6ntfQIDAQABAoIBAEStgFGWy2aicE94
-qu8mspaTY2a+8fXsNGJT3NnN0ZSp+l2tLY5U2kxFYs/1v0o8QXc601dW0yHV1PjC
-9CGngxl7cKFtdRXx81ZaRhKzovzncut/y7FDzlvn7AXyOLrJDWWWyA9p0BH0noyq
-ktE8iY6/O11IqmRwYZx6lhAi8Wu4vQ4ytVQhv15qNubka65RR9ylq0+dTPV4OIoW
-H9tASvvTh3vb/zpBcBKvX4x9n6F9I2Vf0GgXwA+2E+/1frnatYqU8VjgXsc4D0yC
-pWQyumGrytS6/jBnd64laqnvT1QFitaWob08WPHWYnXiBr0mlHGRpl5iz6l3sJKV
-6a3LX8kCgYEA7J8jpd/ONFuPQDTrPQQJ7coDL0Dmxu5ihUVDgT/FfAz4OM9KF+ej
-ptiDbl/UrSZQm1GcT3CwLOevgPcsK7rTBFOBwRxvi9Wf3I6g4QozeXcPEcZWmDAn
-u+Lg6fMceKu8lwbTBLLqf02wk2IJkXgixXJJ6khxRy0qPujgQqERjbsCgYEA0Hln
-6lmTOlN+mMs5pPu43ZRNy//QVUKBdOsZjyOnU3mydHRr+j1e3wN4csX6odBU2D9X
-JKqd2Xep1biTGPEZjRnqgVeGzHpoDJTgGaJevhr2WZ+zySEmbIInTOtS/jGvhwG9
-y23Zr5nIeVJGJ91eBT7GidjDYo7YvFabRjuXoicCgYAqR20ZMFop5Mo90LbPmi8j
-+9qB0PjrRqD36x5as8hXmAGqNO+qQctt/nXNfPYFUjlI51Yko5/3BhbH1mJgFeuq
-dDlVBf2wYKVFxX5dd3MnGuzoYiYK31/aJHnHk5bcwOLboW6HAmkAAiOw0e2fvnWI
-DhnC8Nq8uwc3YmjfvuPiDQKBgDJFBCy7WsgWuBEp+AVzeXlcuIG3dsoIVmUWB7y/
-USrMzp5MMHlP8R9/m7y5Rp1cOglHBMFfrt5wf3B8qGO8R3gBxs1XiLan0Y0vHPax
-c30NzVeBLf4S00wY+lcO651F59h7MAPswjAYugGfODGGrJRBNeipbzvFzDdl/t0p
-o3/DAoGAPM0tH/0E71pE3X2DGIAxgcma/waVurPGxw9+QqgksQW3+tkCg2EYuN8V
-dAKKa9aI739+1Em3S0Cr4dfSon8zyEBpyZhxlpY+/KypzrQgTEYS/l8u4Vdk0L74
-wL55wMiM0la2sLqUtgFF5zqSGCg7LLWNMc6owmlG5RZrneDjams=
------END RSA PRIVATE KEY-----