inspec 2.0.32 → 2.0.45
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.rubocop.yml +101 -101
- data/CHANGELOG.md +2991 -2970
- data/Gemfile +55 -55
- data/LICENSE +14 -14
- data/MAINTAINERS.md +33 -33
- data/MAINTAINERS.toml +52 -52
- data/README.md +446 -437
- data/Rakefile +322 -322
- data/bin/inspec +12 -12
- data/docs/.gitignore +2 -2
- data/docs/README.md +40 -40
- data/docs/dsl_inspec.md +258 -258
- data/docs/dsl_resource.md +93 -93
- data/docs/glossary.md +99 -99
- data/docs/habitat.md +191 -191
- data/docs/inspec_and_friends.md +107 -107
- data/docs/matchers.md +169 -168
- data/docs/migration.md +293 -293
- data/docs/platforms.md +118 -118
- data/docs/plugin_kitchen_inspec.md +49 -49
- data/docs/profiles.md +370 -370
- data/docs/reporters.md +105 -105
- data/docs/resources/aide_conf.md.erb +75 -75
- data/docs/resources/apache.md.erb +67 -67
- data/docs/resources/apache_conf.md.erb +68 -68
- data/docs/resources/apt.md.erb +71 -71
- data/docs/resources/audit_policy.md.erb +47 -47
- data/docs/resources/auditd.md.erb +79 -79
- data/docs/resources/auditd_conf.md.erb +68 -68
- data/docs/resources/aws_cloudtrail_trail.md.erb +140 -140
- data/docs/resources/aws_cloudtrail_trails.md.erb +81 -81
- data/docs/resources/aws_cloudwatch_alarm.md.erb +86 -86
- data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +151 -151
- data/docs/resources/aws_config_recorder.md.erb +71 -71
- data/docs/resources/aws_ec2_instance.md.erb +106 -106
- data/docs/resources/aws_iam_access_key.md.erb +123 -123
- data/docs/resources/aws_iam_access_keys.md.erb +198 -198
- data/docs/resources/aws_iam_group.md.erb +46 -46
- data/docs/resources/aws_iam_groups.md.erb +43 -43
- data/docs/resources/aws_iam_password_policy.md.erb +76 -76
- data/docs/resources/aws_iam_policies.md.erb +82 -82
- data/docs/resources/aws_iam_policy.md.erb +144 -144
- data/docs/resources/aws_iam_role.md.erb +63 -63
- data/docs/resources/aws_iam_root_user.md.erb +58 -58
- data/docs/resources/aws_iam_user.md.erb +64 -64
- data/docs/resources/aws_iam_users.md.erb +89 -89
- data/docs/resources/aws_kms_keys.md.erb +84 -84
- data/docs/resources/aws_route_table.md.erb +47 -47
- data/docs/resources/aws_s3_bucket.md.erb +134 -134
- data/docs/resources/aws_security_group.md.erb +151 -151
- data/docs/resources/aws_security_groups.md.erb +91 -91
- data/docs/resources/aws_sns_topic.md.erb +63 -63
- data/docs/resources/aws_subnet.md.erb +133 -133
- data/docs/resources/aws_subnets.md.erb +126 -126
- data/docs/resources/aws_vpc.md.erb +120 -120
- data/docs/resources/aws_vpcs.md.erb +48 -48
- data/docs/resources/azure_generic_resource.md.erb +170 -170
- data/docs/resources/azure_resource_group.md.erb +284 -284
- data/docs/resources/azure_virtual_machine.md.erb +347 -347
- data/docs/resources/azure_virtual_machine_data_disk.md.erb +224 -224
- data/docs/resources/bash.md.erb +75 -75
- data/docs/resources/bond.md.erb +90 -90
- data/docs/resources/bridge.md.erb +57 -57
- data/docs/resources/bsd_service.md.erb +67 -67
- data/docs/resources/command.md.erb +138 -138
- data/docs/resources/cpan.md.erb +79 -79
- data/docs/resources/cran.md.erb +64 -64
- data/docs/resources/crontab.md.erb +89 -89
- data/docs/resources/csv.md.erb +54 -54
- data/docs/resources/dh_params.md.erb +205 -205
- data/docs/resources/directory.md.erb +30 -30
- data/docs/resources/docker.md.erb +219 -219
- data/docs/resources/docker_container.md.erb +104 -104
- data/docs/resources/docker_image.md.erb +94 -94
- data/docs/resources/docker_service.md.erb +114 -114
- data/docs/resources/elasticsearch.md.erb +242 -242
- data/docs/resources/etc_fstab.md.erb +125 -125
- data/docs/resources/etc_group.md.erb +75 -75
- data/docs/resources/etc_hosts.md.erb +78 -78
- data/docs/resources/etc_hosts_allow.md.erb +74 -74
- data/docs/resources/etc_hosts_deny.md.erb +74 -74
- data/docs/resources/file.md.erb +526 -515
- data/docs/resources/filesystem.md.erb +41 -41
- data/docs/resources/firewalld.md.erb +107 -107
- data/docs/resources/gem.md.erb +79 -79
- data/docs/resources/group.md.erb +61 -61
- data/docs/resources/grub_conf.md.erb +101 -101
- data/docs/resources/host.md.erb +86 -86
- data/docs/resources/http.md.erb +196 -196
- data/docs/resources/iis_app.md.erb +122 -122
- data/docs/resources/iis_site.md.erb +135 -135
- data/docs/resources/inetd_conf.md.erb +94 -94
- data/docs/resources/ini.md.erb +76 -76
- data/docs/resources/interface.md.erb +58 -58
- data/docs/resources/iptables.md.erb +64 -64
- data/docs/resources/json.md.erb +63 -63
- data/docs/resources/kernel_module.md.erb +120 -120
- data/docs/resources/kernel_parameter.md.erb +53 -53
- data/docs/resources/key_rsa.md.erb +85 -85
- data/docs/resources/launchd_service.md.erb +57 -57
- data/docs/resources/limits_conf.md.erb +75 -75
- data/docs/resources/login_def.md.erb +71 -71
- data/docs/resources/mount.md.erb +69 -69
- data/docs/resources/mssql_session.md.erb +60 -60
- data/docs/resources/mysql_conf.md.erb +99 -99
- data/docs/resources/mysql_session.md.erb +74 -74
- data/docs/resources/nginx.md.erb +79 -79
- data/docs/resources/nginx_conf.md.erb +128 -128
- data/docs/resources/npm.md.erb +60 -60
- data/docs/resources/ntp_conf.md.erb +60 -60
- data/docs/resources/oneget.md.erb +53 -53
- data/docs/resources/oracledb_session.md.erb +52 -52
- data/docs/resources/os.md.erb +141 -141
- data/docs/resources/os_env.md.erb +78 -78
- data/docs/resources/package.md.erb +120 -120
- data/docs/resources/packages.md.erb +67 -67
- data/docs/resources/parse_config.md.erb +103 -103
- data/docs/resources/parse_config_file.md.erb +138 -138
- data/docs/resources/passwd.md.erb +141 -141
- data/docs/resources/pip.md.erb +67 -67
- data/docs/resources/port.md.erb +137 -137
- data/docs/resources/postgres_conf.md.erb +79 -79
- data/docs/resources/postgres_hba_conf.md.erb +93 -93
- data/docs/resources/postgres_ident_conf.md.erb +76 -76
- data/docs/resources/postgres_session.md.erb +69 -69
- data/docs/resources/powershell.md.erb +102 -102
- data/docs/resources/processes.md.erb +109 -109
- data/docs/resources/rabbitmq_config.md.erb +41 -41
- data/docs/resources/registry_key.md.erb +158 -158
- data/docs/resources/runit_service.md.erb +57 -57
- data/docs/resources/security_policy.md.erb +47 -47
- data/docs/resources/service.md.erb +121 -121
- data/docs/resources/shadow.md.erb +146 -144
- data/docs/resources/ssh_config.md.erb +80 -80
- data/docs/resources/sshd_config.md.erb +83 -83
- data/docs/resources/ssl.md.erb +119 -119
- data/docs/resources/sys_info.md.erb +42 -42
- data/docs/resources/systemd_service.md.erb +57 -57
- data/docs/resources/sysv_service.md.erb +57 -57
- data/docs/resources/upstart_service.md.erb +57 -57
- data/docs/resources/user.md.erb +140 -140
- data/docs/resources/users.md.erb +127 -127
- data/docs/resources/vbscript.md.erb +55 -55
- data/docs/resources/virtualization.md.erb +57 -57
- data/docs/resources/windows_feature.md.erb +47 -47
- data/docs/resources/windows_hotfix.md.erb +53 -53
- data/docs/resources/windows_task.md.erb +95 -95
- data/docs/resources/wmi.md.erb +81 -81
- data/docs/resources/x509_certificate.md.erb +151 -151
- data/docs/resources/xinetd_conf.md.erb +156 -156
- data/docs/resources/xml.md.erb +85 -85
- data/docs/resources/yaml.md.erb +69 -69
- data/docs/resources/yum.md.erb +98 -98
- data/docs/resources/zfs_dataset.md.erb +53 -53
- data/docs/resources/zfs_pool.md.erb +47 -47
- data/docs/ruby_usage.md +203 -203
- data/docs/shared/matcher_be.md.erb +1 -1
- data/docs/shared/matcher_cmp.md.erb +43 -43
- data/docs/shared/matcher_eq.md.erb +3 -3
- data/docs/shared/matcher_include.md.erb +1 -1
- data/docs/shared/matcher_match.md.erb +1 -1
- data/docs/shell.md +215 -215
- data/examples/README.md +8 -8
- data/examples/inheritance/README.md +65 -65
- data/examples/inheritance/controls/example.rb +14 -14
- data/examples/inheritance/inspec.yml +15 -15
- data/examples/kitchen-ansible/.kitchen.yml +25 -25
- data/examples/kitchen-ansible/Gemfile +19 -19
- data/examples/kitchen-ansible/README.md +53 -53
- data/examples/kitchen-ansible/files/nginx.repo +6 -6
- data/examples/kitchen-ansible/tasks/main.yml +16 -16
- data/examples/kitchen-ansible/test/integration/default/default.yml +5 -5
- data/examples/kitchen-ansible/test/integration/default/web_spec.rb +28 -28
- data/examples/kitchen-chef/.kitchen.yml +20 -20
- data/examples/kitchen-chef/Berksfile +3 -3
- data/examples/kitchen-chef/Gemfile +19 -19
- data/examples/kitchen-chef/README.md +27 -27
- data/examples/kitchen-chef/metadata.rb +7 -7
- data/examples/kitchen-chef/recipes/default.rb +6 -6
- data/examples/kitchen-chef/recipes/nginx.rb +30 -30
- data/examples/kitchen-chef/test/integration/default/web_spec.rb +28 -28
- data/examples/kitchen-puppet/.kitchen.yml +22 -22
- data/examples/kitchen-puppet/Gemfile +20 -20
- data/examples/kitchen-puppet/Puppetfile +25 -25
- data/examples/kitchen-puppet/README.md +53 -53
- data/examples/kitchen-puppet/manifests/site.pp +33 -33
- data/examples/kitchen-puppet/metadata.json +11 -11
- data/examples/kitchen-puppet/test/integration/default/web_spec.rb +28 -28
- data/examples/meta-profile/README.md +37 -37
- data/examples/meta-profile/controls/example.rb +13 -13
- data/examples/meta-profile/inspec.yml +13 -13
- data/examples/profile-attribute.yml +2 -2
- data/examples/profile-attribute/README.md +14 -14
- data/examples/profile-attribute/controls/example.rb +11 -11
- data/examples/profile-attribute/inspec.yml +8 -8
- data/examples/profile-aws/controls/iam_password_policy_expiration.rb +8 -8
- data/examples/profile-aws/controls/iam_password_policy_max_age.rb +8 -8
- data/examples/profile-aws/controls/iam_root_user_mfa.rb +8 -8
- data/examples/profile-aws/controls/iam_users_access_key_age.rb +8 -8
- data/examples/profile-aws/controls/iam_users_console_users_mfa.rb +8 -8
- data/examples/profile-aws/inspec.yml +11 -11
- data/examples/profile-azure/controls/azure_resource_group_example.rb +24 -24
- data/examples/profile-azure/controls/azure_vm_example.rb +29 -29
- data/examples/profile-azure/inspec.yml +11 -11
- data/examples/profile-sensitive/README.md +29 -29
- data/examples/profile-sensitive/controls/sensitive-failures.rb +9 -9
- data/examples/profile-sensitive/controls/sensitive.rb +9 -9
- data/examples/profile-sensitive/inspec.yml +8 -8
- data/examples/profile/README.md +48 -48
- data/examples/profile/controls/example.rb +23 -23
- data/examples/profile/controls/gordon.rb +36 -36
- data/examples/profile/controls/meta.rb +34 -34
- data/examples/profile/inspec.yml +10 -10
- data/examples/profile/libraries/gordon_config.rb +53 -53
- data/inspec.gemspec +47 -47
- data/lib/bundles/README.md +3 -3
- data/lib/bundles/inspec-artifact.rb +7 -7
- data/lib/bundles/inspec-artifact/README.md +1 -1
- data/lib/bundles/inspec-artifact/cli.rb +277 -277
- data/lib/bundles/inspec-compliance.rb +16 -16
- data/lib/bundles/inspec-compliance/.kitchen.yml +20 -20
- data/lib/bundles/inspec-compliance/README.md +185 -185
- data/lib/bundles/inspec-compliance/api.rb +316 -316
- data/lib/bundles/inspec-compliance/api/login.rb +152 -152
- data/lib/bundles/inspec-compliance/bootstrap.sh +41 -41
- data/lib/bundles/inspec-compliance/cli.rb +254 -254
- data/lib/bundles/inspec-compliance/configuration.rb +103 -103
- data/lib/bundles/inspec-compliance/http.rb +86 -86
- data/lib/bundles/inspec-compliance/support.rb +36 -36
- data/lib/bundles/inspec-compliance/target.rb +98 -98
- data/lib/bundles/inspec-compliance/test/integration/default/cli.rb +93 -93
- data/lib/bundles/inspec-habitat.rb +12 -12
- data/lib/bundles/inspec-habitat/cli.rb +36 -36
- data/lib/bundles/inspec-habitat/log.rb +10 -10
- data/lib/bundles/inspec-habitat/profile.rb +390 -390
- data/lib/bundles/inspec-init.rb +8 -8
- data/lib/bundles/inspec-init/README.md +31 -31
- data/lib/bundles/inspec-init/cli.rb +97 -97
- data/lib/bundles/inspec-init/templates/profile/README.md +3 -3
- data/lib/bundles/inspec-init/templates/profile/controls/example.rb +19 -19
- data/lib/bundles/inspec-init/templates/profile/inspec.yml +8 -8
- data/lib/bundles/inspec-supermarket.rb +13 -13
- data/lib/bundles/inspec-supermarket/README.md +45 -45
- data/lib/bundles/inspec-supermarket/api.rb +84 -84
- data/lib/bundles/inspec-supermarket/cli.rb +73 -73
- data/lib/bundles/inspec-supermarket/target.rb +34 -34
- data/lib/fetchers/git.rb +163 -163
- data/lib/fetchers/local.rb +74 -74
- data/lib/fetchers/mock.rb +35 -35
- data/lib/fetchers/url.rb +204 -204
- data/lib/inspec.rb +24 -24
- data/lib/inspec/archive/tar.rb +29 -29
- data/lib/inspec/archive/zip.rb +19 -19
- data/lib/inspec/backend.rb +92 -92
- data/lib/inspec/base_cli.rb +355 -350
- data/lib/inspec/cached_fetcher.rb +66 -66
- data/lib/inspec/cli.rb +292 -292
- data/lib/inspec/completions/bash.sh.erb +45 -45
- data/lib/inspec/completions/fish.sh.erb +34 -34
- data/lib/inspec/completions/zsh.sh.erb +61 -61
- data/lib/inspec/control_eval_context.rb +179 -179
- data/lib/inspec/dependencies/cache.rb +72 -72
- data/lib/inspec/dependencies/dependency_set.rb +92 -92
- data/lib/inspec/dependencies/lockfile.rb +115 -115
- data/lib/inspec/dependencies/requirement.rb +123 -123
- data/lib/inspec/dependencies/resolver.rb +86 -86
- data/lib/inspec/describe.rb +27 -27
- data/lib/inspec/dsl.rb +66 -66
- data/lib/inspec/dsl_shared.rb +33 -33
- data/lib/inspec/env_printer.rb +157 -157
- data/lib/inspec/errors.rb +13 -13
- data/lib/inspec/exceptions.rb +12 -12
- data/lib/inspec/expect.rb +45 -45
- data/lib/inspec/fetcher.rb +45 -45
- data/lib/inspec/file_provider.rb +275 -275
- data/lib/inspec/formatters.rb +3 -3
- data/lib/inspec/formatters/base.rb +250 -250
- data/lib/inspec/formatters/json_rspec.rb +20 -20
- data/lib/inspec/formatters/show_progress.rb +12 -12
- data/lib/inspec/library_eval_context.rb +58 -58
- data/lib/inspec/log.rb +11 -11
- data/lib/inspec/metadata.rb +247 -247
- data/lib/inspec/method_source.rb +24 -24
- data/lib/inspec/objects.rb +14 -14
- data/lib/inspec/objects/attribute.rb +65 -65
- data/lib/inspec/objects/control.rb +61 -61
- data/lib/inspec/objects/describe.rb +92 -92
- data/lib/inspec/objects/each_loop.rb +36 -36
- data/lib/inspec/objects/list.rb +15 -15
- data/lib/inspec/objects/or_test.rb +40 -40
- data/lib/inspec/objects/ruby_helper.rb +15 -15
- data/lib/inspec/objects/tag.rb +27 -27
- data/lib/inspec/objects/test.rb +87 -87
- data/lib/inspec/objects/value.rb +27 -27
- data/lib/inspec/plugins.rb +60 -60
- data/lib/inspec/plugins/cli.rb +24 -24
- data/lib/inspec/plugins/fetcher.rb +86 -86
- data/lib/inspec/plugins/resource.rb +135 -135
- data/lib/inspec/plugins/secret.rb +15 -15
- data/lib/inspec/plugins/source_reader.rb +40 -40
- data/lib/inspec/polyfill.rb +12 -12
- data/lib/inspec/profile.rb +510 -510
- data/lib/inspec/profile_context.rb +207 -207
- data/lib/inspec/profile_vendor.rb +66 -66
- data/lib/inspec/reporters.rb +54 -50
- data/lib/inspec/reporters/base.rb +24 -24
- data/lib/inspec/reporters/cli.rb +356 -356
- data/lib/inspec/reporters/json.rb +116 -116
- data/lib/inspec/reporters/json_min.rb +48 -48
- data/lib/inspec/reporters/junit.rb +77 -77
- data/lib/inspec/require_loader.rb +33 -33
- data/lib/inspec/resource.rb +186 -186
- data/lib/inspec/rule.rb +266 -266
- data/lib/inspec/runner.rb +345 -345
- data/lib/inspec/runner_mock.rb +41 -41
- data/lib/inspec/runner_rspec.rb +175 -175
- data/lib/inspec/runtime_profile.rb +26 -26
- data/lib/inspec/schema.rb +213 -213
- data/lib/inspec/secrets.rb +19 -19
- data/lib/inspec/secrets/yaml.rb +30 -30
- data/lib/inspec/shell.rb +220 -220
- data/lib/inspec/shell_detector.rb +90 -90
- data/lib/inspec/source_reader.rb +29 -29
- data/lib/inspec/version.rb +8 -8
- data/lib/matchers/matchers.rb +339 -339
- data/lib/resource_support/aws.rb +41 -41
- data/lib/resource_support/aws/aws_backend_base.rb +12 -12
- data/lib/resource_support/aws/aws_backend_factory_mixin.rb +12 -12
- data/lib/resource_support/aws/aws_plural_resource_mixin.rb +21 -21
- data/lib/resource_support/aws/aws_resource_mixin.rb +66 -66
- data/lib/resource_support/aws/aws_singular_resource_mixin.rb +24 -24
- data/lib/resources/aide_conf.rb +159 -160
- data/lib/resources/apache.rb +48 -48
- data/lib/resources/apache_conf.rb +156 -156
- data/lib/resources/apt.rb +149 -149
- data/lib/resources/audit_policy.rb +63 -63
- data/lib/resources/auditd.rb +231 -231
- data/lib/resources/auditd_conf.rb +55 -55
- data/lib/resources/aws/aws_cloudtrail_trail.rb +77 -77
- data/lib/resources/aws/aws_cloudtrail_trails.rb +47 -47
- data/lib/resources/aws/aws_cloudwatch_alarm.rb +62 -62
- data/lib/resources/aws/aws_cloudwatch_log_metric_filter.rb +100 -100
- data/lib/resources/aws/aws_config_recorder.rb +98 -98
- data/lib/resources/aws/aws_ec2_instance.rb +157 -157
- data/lib/resources/aws/aws_iam_access_key.rb +106 -106
- data/lib/resources/aws/aws_iam_access_keys.rb +149 -144
- data/lib/resources/aws/aws_iam_group.rb +56 -56
- data/lib/resources/aws/aws_iam_groups.rb +52 -45
- data/lib/resources/aws/aws_iam_password_policy.rb +116 -116
- data/lib/resources/aws/aws_iam_policies.rb +53 -46
- data/lib/resources/aws/aws_iam_policy.rb +125 -119
- data/lib/resources/aws/aws_iam_role.rb +51 -51
- data/lib/resources/aws/aws_iam_root_user.rb +60 -60
- data/lib/resources/aws/aws_iam_user.rb +111 -111
- data/lib/resources/aws/aws_iam_users.rb +108 -96
- data/lib/resources/aws/aws_kms_keys.rb +53 -46
- data/lib/resources/aws/aws_route_table.rb +61 -61
- data/lib/resources/aws/aws_s3_bucket.rb +115 -115
- data/lib/resources/aws/aws_security_group.rb +93 -93
- data/lib/resources/aws/aws_security_groups.rb +68 -68
- data/lib/resources/aws/aws_sns_topic.rb +53 -53
- data/lib/resources/aws/aws_subnet.rb +88 -88
- data/lib/resources/aws/aws_subnets.rb +53 -53
- data/lib/resources/aws/aws_vpc.rb +69 -69
- data/lib/resources/aws/aws_vpcs.rb +45 -45
- data/lib/resources/azure/azure_backend.rb +377 -377
- data/lib/resources/azure/azure_generic_resource.rb +59 -59
- data/lib/resources/azure/azure_resource_group.rb +152 -152
- data/lib/resources/azure/azure_virtual_machine.rb +264 -264
- data/lib/resources/azure/azure_virtual_machine_data_disk.rb +136 -136
- data/lib/resources/bash.rb +35 -35
- data/lib/resources/bond.rb +68 -68
- data/lib/resources/bridge.rb +122 -122
- data/lib/resources/command.rb +73 -69
- data/lib/resources/cpan.rb +58 -58
- data/lib/resources/cran.rb +64 -64
- data/lib/resources/crontab.rb +169 -170
- data/lib/resources/csv.rb +60 -60
- data/lib/resources/dh_params.rb +82 -82
- data/lib/resources/directory.rb +25 -25
- data/lib/resources/docker.rb +236 -236
- data/lib/resources/docker_container.rb +89 -89
- data/lib/resources/docker_image.rb +83 -83
- data/lib/resources/docker_object.rb +57 -57
- data/lib/resources/docker_service.rb +90 -90
- data/lib/resources/elasticsearch.rb +169 -169
- data/lib/resources/etc_fstab.rb +101 -102
- data/lib/resources/etc_group.rb +152 -156
- data/lib/resources/etc_hosts.rb +82 -81
- data/lib/resources/etc_hosts_allow_deny.rb +122 -123
- data/lib/resources/file.rb +298 -298
- data/lib/resources/filesystem.rb +31 -31
- data/lib/resources/firewalld.rb +143 -144
- data/lib/resources/gem.rb +70 -70
- data/lib/resources/groups.rb +215 -215
- data/lib/resources/grub_conf.rb +237 -237
- data/lib/resources/host.rb +306 -300
- data/lib/resources/http.rb +251 -250
- data/lib/resources/iis_app.rb +101 -104
- data/lib/resources/iis_site.rb +148 -148
- data/lib/resources/inetd_conf.rb +62 -62
- data/lib/resources/ini.rb +29 -29
- data/lib/resources/interface.rb +129 -129
- data/lib/resources/iptables.rb +80 -69
- data/lib/resources/json.rb +117 -117
- data/lib/resources/kernel_module.rb +107 -107
- data/lib/resources/kernel_parameter.rb +58 -58
- data/lib/resources/key_rsa.rb +67 -67
- data/lib/resources/limits_conf.rb +55 -55
- data/lib/resources/login_def.rb +66 -66
- data/lib/resources/mount.rb +88 -88
- data/lib/resources/mssql_session.rb +101 -101
- data/lib/resources/mysql.rb +81 -81
- data/lib/resources/mysql_conf.rb +134 -134
- data/lib/resources/mysql_session.rb +71 -71
- data/lib/resources/nginx.rb +96 -96
- data/lib/resources/nginx_conf.rb +227 -227
- data/lib/resources/npm.rb +48 -48
- data/lib/resources/ntp_conf.rb +58 -58
- data/lib/resources/oneget.rb +71 -71
- data/lib/resources/oracledb_session.rb +139 -139
- data/lib/resources/os.rb +36 -36
- data/lib/resources/os_env.rb +76 -76
- data/lib/resources/package.rb +370 -370
- data/lib/resources/packages.rb +111 -111
- data/lib/resources/parse_config.rb +116 -116
- data/lib/resources/passwd.rb +74 -74
- data/lib/resources/pip.rb +89 -89
- data/lib/resources/platform.rb +109 -109
- data/lib/resources/port.rb +771 -771
- data/lib/resources/postgres.rb +130 -130
- data/lib/resources/postgres_conf.rb +121 -121
- data/lib/resources/postgres_hba_conf.rb +99 -100
- data/lib/resources/postgres_ident_conf.rb +76 -78
- data/lib/resources/postgres_session.rb +71 -71
- data/lib/resources/powershell.rb +53 -57
- data/lib/resources/processes.rb +204 -204
- data/lib/resources/rabbitmq_conf.rb +52 -52
- data/lib/resources/registry_key.rb +296 -296
- data/lib/resources/security_policy.rb +180 -180
- data/lib/resources/service.rb +789 -789
- data/lib/resources/shadow.rb +146 -140
- data/lib/resources/ssh_conf.rb +102 -102
- data/lib/resources/ssl.rb +99 -99
- data/lib/resources/sys_info.rb +28 -28
- data/lib/resources/toml.rb +32 -32
- data/lib/resources/users.rb +654 -654
- data/lib/resources/vbscript.rb +68 -69
- data/lib/resources/virtualization.rb +247 -247
- data/lib/resources/windows_feature.rb +84 -84
- data/lib/resources/windows_hotfix.rb +35 -35
- data/lib/resources/windows_task.rb +102 -105
- data/lib/resources/wmi.rb +110 -113
- data/lib/resources/x509_certificate.rb +143 -143
- data/lib/resources/xinetd.rb +111 -111
- data/lib/resources/xml.rb +46 -46
- data/lib/resources/yaml.rb +47 -47
- data/lib/resources/yum.rb +180 -180
- data/lib/resources/zfs_dataset.rb +60 -60
- data/lib/resources/zfs_pool.rb +49 -49
- data/lib/source_readers/flat.rb +39 -39
- data/lib/source_readers/inspec.rb +75 -75
- data/lib/utils/command_wrapper.rb +27 -27
- data/lib/utils/convert.rb +12 -12
- data/lib/utils/database_helpers.rb +77 -77
- data/lib/utils/erlang_parser.rb +192 -192
- data/lib/utils/filter.rb +272 -272
- data/lib/utils/filter_array.rb +27 -27
- data/lib/utils/find_files.rb +44 -44
- data/lib/utils/hash.rb +41 -41
- data/lib/utils/json_log.rb +18 -18
- data/lib/utils/latest_version.rb +22 -22
- data/lib/utils/modulator.rb +12 -12
- data/lib/utils/nginx_parser.rb +85 -85
- data/lib/utils/object_traversal.rb +49 -49
- data/lib/utils/parser.rb +274 -274
- data/lib/utils/plugin_registry.rb +93 -93
- data/lib/utils/simpleconfig.rb +120 -120
- data/lib/utils/spdx.rb +13 -13
- data/lib/utils/spdx.txt +343 -343
- metadata +2 -2
|
@@ -1,224 +1,224 @@
|
|
|
1
|
-
---
|
|
2
|
-
title: About the azure_virtual_machine_datadisk Resource
|
|
3
|
-
platform: azure
|
|
4
|
-
---
|
|
5
|
-
|
|
6
|
-
# azure\_virtual\_machine\_datadisk
|
|
7
|
-
|
|
8
|
-
Use this resource to ensure that a specific data disk attached to a machine has been created properly.
|
|
9
|
-
|
|
10
|
-
## Syntax
|
|
11
|
-
|
|
12
|
-
The name of the resource group and machine are required to use this resource.
|
|
13
|
-
|
|
14
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'MyVM') do
|
|
15
|
-
its('property') { should eq 'value' }
|
|
16
|
-
end
|
|
17
|
-
|
|
18
|
-
where
|
|
19
|
-
|
|
20
|
-
* `MyVm` is the name of the virtual machine as seen in Azure. (It is **not** the hostname of the machine)
|
|
21
|
-
* `InSpec-Azure` is the name of the resouce group that the machine is in.
|
|
22
|
-
* `property` is a resource property
|
|
23
|
-
* `value` is the expected output from the matcher
|
|
24
|
-
|
|
25
|
-
<br>
|
|
26
|
-
|
|
27
|
-
## Examples
|
|
28
|
-
|
|
29
|
-
The following examples show to use this InSpec audit resource.
|
|
30
|
-
|
|
31
|
-
### Check that the first data disk is of the correct size
|
|
32
|
-
|
|
33
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Linux-Internal-VM').where(number: 1) do
|
|
34
|
-
its('size') { should cmp >= 15 }
|
|
35
|
-
end
|
|
36
|
-
|
|
37
|
-
<br>
|
|
38
|
-
|
|
39
|
-
## Resource Parameters
|
|
40
|
-
|
|
41
|
-
* `group_name`, `name`, `apiversion`
|
|
42
|
-
|
|
43
|
-
## Parameter Examples
|
|
44
|
-
|
|
45
|
-
The options that can be passed to the resource are as follows.
|
|
46
|
-
|
|
47
|
-
### group_name (required)
|
|
48
|
-
|
|
49
|
-
Use this parameter to define the Azure Resource Group to be tested.
|
|
50
|
-
|
|
51
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure') do
|
|
52
|
-
...
|
|
53
|
-
end
|
|
54
|
-
|
|
55
|
-
### name
|
|
56
|
-
|
|
57
|
-
Use this parameter to define the name of the Azure resource to test.
|
|
58
|
-
|
|
59
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM') do
|
|
60
|
-
...
|
|
61
|
-
end
|
|
62
|
-
|
|
63
|
-
### apiversion
|
|
64
|
-
|
|
65
|
-
The API Version to use when querying the resource. Defaults to the latest version for the
|
|
66
|
-
|
|
67
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM', apiversion: '2.0') do
|
|
68
|
-
...
|
|
69
|
-
end
|
|
70
|
-
|
|
71
|
-
These options can also be set using the environment variables:
|
|
72
|
-
|
|
73
|
-
* `AZURE_RESOURCE_GROUP_NAME`
|
|
74
|
-
* `AZURE_RESOURCE_NAME`
|
|
75
|
-
* `AZURE_RESOURCE_API_VERSION`
|
|
76
|
-
|
|
77
|
-
When the options have been set as well as the environment variables, the environment variables take priority.
|
|
78
|
-
|
|
79
|
-
<br>
|
|
80
|
-
|
|
81
|
-
## Filter Criteria
|
|
82
|
-
|
|
83
|
-
* `number`, `disk`
|
|
84
|
-
|
|
85
|
-
<br>
|
|
86
|
-
|
|
87
|
-
## Filter Examples
|
|
88
|
-
|
|
89
|
-
### disk
|
|
90
|
-
|
|
91
|
-
The zero based index of the disk attached to the machine.
|
|
92
|
-
|
|
93
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM').where(disk: 0)
|
|
94
|
-
end
|
|
95
|
-
|
|
96
|
-
### number
|
|
97
|
-
|
|
98
|
-
The '1' based index of the disk attached to the machine.
|
|
99
|
-
|
|
100
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM').where(number: 1)
|
|
101
|
-
end
|
|
102
|
-
|
|
103
|
-
<br>
|
|
104
|
-
|
|
105
|
-
## Properties
|
|
106
|
-
|
|
107
|
-
* `count`, `disk`, `number`, `name`, `size`, `lun`, `caching`, `create_option`, `is_managed_disk?`, `vhd_uri`, `storage_account_name`, `storage_account_type`, `id`, `subscription_id`, `resource_group`
|
|
108
|
-
|
|
109
|
-
<br>
|
|
110
|
-
|
|
111
|
-
## Property Examples
|
|
112
|
-
|
|
113
|
-
### count
|
|
114
|
-
|
|
115
|
-
Returns the number of data disks attached to the machine
|
|
116
|
-
|
|
117
|
-
its('count') { should eq 1 }
|
|
118
|
-
|
|
119
|
-
### name
|
|
120
|
-
|
|
121
|
-
Returns a string of the name of the disk.
|
|
122
|
-
|
|
123
|
-
its('name') { should cmp 'linux-external-datadisk-1' }
|
|
124
|
-
|
|
125
|
-
### size
|
|
126
|
-
|
|
127
|
-
Returns an integer of size of this disk in GB.
|
|
128
|
-
|
|
129
|
-
its('size') { should cmp >= 15 }
|
|
130
|
-
|
|
131
|
-
### lun
|
|
132
|
-
|
|
133
|
-
The disk number as reported by Azure. Has a zero-based index value.
|
|
134
|
-
|
|
135
|
-
its('lun') { should cmp 0 }
|
|
136
|
-
|
|
137
|
-
### caching
|
|
138
|
-
|
|
139
|
-
String stating the caching that has been set on the disk.
|
|
140
|
-
|
|
141
|
-
its('caching') { should cmp 'none' }
|
|
142
|
-
|
|
143
|
-
### create\_option
|
|
144
|
-
|
|
145
|
-
How the disk was created. Typically for data disks, this will be the string value 'Empty'.
|
|
146
|
-
|
|
147
|
-
its('create_option') { should cmp 'Empty' }
|
|
148
|
-
|
|
149
|
-
### is\_managed\_disk?
|
|
150
|
-
|
|
151
|
-
Boolean stating if the disk is a managed disk or not. If it is not a managed disk then it is one that is stored in a Storage Account.
|
|
152
|
-
|
|
153
|
-
its('is_managed_disk?') { should cmp 'false' }
|
|
154
|
-
|
|
155
|
-
### vhd\_uri
|
|
156
|
-
|
|
157
|
-
If this _not_ a managed disk, then the `vhd_uri` will be the full URI to the disk in the storage account.
|
|
158
|
-
|
|
159
|
-
its('vhd_uri') { should cmp '
|
|
160
|
-
https://primary_storage.blob.core.windows.net/container_name/vm_name.vhd' }
|
|
161
|
-
|
|
162
|
-
### storage\_account\_name
|
|
163
|
-
|
|
164
|
-
If this is _not_ a managed disk this will be the storage account name in which the disk is stored.
|
|
165
|
-
|
|
166
|
-
This derived from the `vhd_uri`.
|
|
167
|
-
|
|
168
|
-
its('storage_account_name') { should cmp 'primary_storage' }
|
|
169
|
-
|
|
170
|
-
### storage\_account\_type
|
|
171
|
-
|
|
172
|
-
If this is a managed disk this is the storage account type, e.g. `Standard_LRS`.
|
|
173
|
-
|
|
174
|
-
its('storage_account_type') { should cmp 'Standard_LRS' }
|
|
175
|
-
|
|
176
|
-
### id
|
|
177
|
-
|
|
178
|
-
If this is a managed disk then this is the fully qualified id for the disk in Azure.
|
|
179
|
-
|
|
180
|
-
its('id') { should cmp '/subscriptions/1234abcd-e567-890f-g123-456h78i9jkl0/resourceGroups/InSpec-Azure' }
|
|
181
|
-
|
|
182
|
-
### subscription\_id
|
|
183
|
-
|
|
184
|
-
If this is a managed disk, this returns the subscription id of where the disk is stored.
|
|
185
|
-
|
|
186
|
-
This is derived from the `id`.
|
|
187
|
-
|
|
188
|
-
its('subscription_id') { should cmp '1234abcd-e567-890f-g123-456h78i9jkl0' }
|
|
189
|
-
|
|
190
|
-
### resource\_group
|
|
191
|
-
|
|
192
|
-
If this is a managed disk, this returns the resource group in which the disk is stored.
|
|
193
|
-
|
|
194
|
-
This is derived from the `id`.
|
|
195
|
-
|
|
196
|
-
its('resource_group') { should cmp 'InSpec-Azure' }
|
|
197
|
-
|
|
198
|
-
<br>
|
|
199
|
-
|
|
200
|
-
## Matchers
|
|
201
|
-
|
|
202
|
-
This InSpec audit resource has the following special matchers. For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
|
203
|
-
|
|
204
|
-
The following properties are applied to the virtual machine itself and not specfic disks.
|
|
205
|
-
|
|
206
|
-
### have\_data\_disks
|
|
207
|
-
|
|
208
|
-
Returns a boolean denoting if any data disks are attached to the machine.
|
|
209
|
-
|
|
210
|
-
it { should have_data_disks }
|
|
211
|
-
|
|
212
|
-
### have\_managed\_disks
|
|
213
|
-
|
|
214
|
-
Returns a boolean stating if the machine has Managed Disks for data disks.
|
|
215
|
-
|
|
216
|
-
it { should have_managed_disks }
|
|
217
|
-
|
|
218
|
-
<br>
|
|
219
|
-
|
|
220
|
-
## References
|
|
221
|
-
|
|
222
|
-
* [Azure Ruby SDK - Compute](https://github.com/Azure/azure-sdk-for-ruby/tree/master/management/azure_mgmt_compute)
|
|
223
|
-
* [Linux Internal Data Disks](https://github.com/chef/inspec/blob/master/test/azure/verify/controls/virtual_machine_linux_external_vm_datadisk.rb)
|
|
224
|
-
* [Windows Internal Data Disk](https://github.com/chef/inspec/blob/master/test/azure/verify/controls/virtual_machine_windows_internal_vm_datadisk.rb)
|
|
1
|
+
---
|
|
2
|
+
title: About the azure_virtual_machine_datadisk Resource
|
|
3
|
+
platform: azure
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# azure\_virtual\_machine\_datadisk
|
|
7
|
+
|
|
8
|
+
Use this resource to ensure that a specific data disk attached to a machine has been created properly.
|
|
9
|
+
|
|
10
|
+
## Syntax
|
|
11
|
+
|
|
12
|
+
The name of the resource group and machine are required to use this resource.
|
|
13
|
+
|
|
14
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'MyVM') do
|
|
15
|
+
its('property') { should eq 'value' }
|
|
16
|
+
end
|
|
17
|
+
|
|
18
|
+
where
|
|
19
|
+
|
|
20
|
+
* `MyVm` is the name of the virtual machine as seen in Azure. (It is **not** the hostname of the machine)
|
|
21
|
+
* `InSpec-Azure` is the name of the resouce group that the machine is in.
|
|
22
|
+
* `property` is a resource property
|
|
23
|
+
* `value` is the expected output from the matcher
|
|
24
|
+
|
|
25
|
+
<br>
|
|
26
|
+
|
|
27
|
+
## Examples
|
|
28
|
+
|
|
29
|
+
The following examples show to use this InSpec audit resource.
|
|
30
|
+
|
|
31
|
+
### Check that the first data disk is of the correct size
|
|
32
|
+
|
|
33
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Linux-Internal-VM').where(number: 1) do
|
|
34
|
+
its('size') { should cmp >= 15 }
|
|
35
|
+
end
|
|
36
|
+
|
|
37
|
+
<br>
|
|
38
|
+
|
|
39
|
+
## Resource Parameters
|
|
40
|
+
|
|
41
|
+
* `group_name`, `name`, `apiversion`
|
|
42
|
+
|
|
43
|
+
## Parameter Examples
|
|
44
|
+
|
|
45
|
+
The options that can be passed to the resource are as follows.
|
|
46
|
+
|
|
47
|
+
### group_name (required)
|
|
48
|
+
|
|
49
|
+
Use this parameter to define the Azure Resource Group to be tested.
|
|
50
|
+
|
|
51
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure') do
|
|
52
|
+
...
|
|
53
|
+
end
|
|
54
|
+
|
|
55
|
+
### name
|
|
56
|
+
|
|
57
|
+
Use this parameter to define the name of the Azure resource to test.
|
|
58
|
+
|
|
59
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM') do
|
|
60
|
+
...
|
|
61
|
+
end
|
|
62
|
+
|
|
63
|
+
### apiversion
|
|
64
|
+
|
|
65
|
+
The API Version to use when querying the resource. Defaults to the latest version for the resource.
|
|
66
|
+
|
|
67
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM', apiversion: '2.0') do
|
|
68
|
+
...
|
|
69
|
+
end
|
|
70
|
+
|
|
71
|
+
These options can also be set using the environment variables:
|
|
72
|
+
|
|
73
|
+
* `AZURE_RESOURCE_GROUP_NAME`
|
|
74
|
+
* `AZURE_RESOURCE_NAME`
|
|
75
|
+
* `AZURE_RESOURCE_API_VERSION`
|
|
76
|
+
|
|
77
|
+
When the options have been set as well as the environment variables, the environment variables take priority.
|
|
78
|
+
|
|
79
|
+
<br>
|
|
80
|
+
|
|
81
|
+
## Filter Criteria
|
|
82
|
+
|
|
83
|
+
* `number`, `disk`
|
|
84
|
+
|
|
85
|
+
<br>
|
|
86
|
+
|
|
87
|
+
## Filter Examples
|
|
88
|
+
|
|
89
|
+
### disk
|
|
90
|
+
|
|
91
|
+
The zero based index of the disk attached to the machine.
|
|
92
|
+
|
|
93
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM').where(disk: 0)
|
|
94
|
+
end
|
|
95
|
+
|
|
96
|
+
### number
|
|
97
|
+
|
|
98
|
+
The '1' based index of the disk attached to the machine.
|
|
99
|
+
|
|
100
|
+
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM').where(number: 1)
|
|
101
|
+
end
|
|
102
|
+
|
|
103
|
+
<br>
|
|
104
|
+
|
|
105
|
+
## Properties
|
|
106
|
+
|
|
107
|
+
* `count`, `disk`, `number`, `name`, `size`, `lun`, `caching`, `create_option`, `is_managed_disk?`, `vhd_uri`, `storage_account_name`, `storage_account_type`, `id`, `subscription_id`, `resource_group`
|
|
108
|
+
|
|
109
|
+
<br>
|
|
110
|
+
|
|
111
|
+
## Property Examples
|
|
112
|
+
|
|
113
|
+
### count
|
|
114
|
+
|
|
115
|
+
Returns the number of data disks attached to the machine
|
|
116
|
+
|
|
117
|
+
its('count') { should eq 1 }
|
|
118
|
+
|
|
119
|
+
### name
|
|
120
|
+
|
|
121
|
+
Returns a string of the name of the disk.
|
|
122
|
+
|
|
123
|
+
its('name') { should cmp 'linux-external-datadisk-1' }
|
|
124
|
+
|
|
125
|
+
### size
|
|
126
|
+
|
|
127
|
+
Returns an integer of size of this disk in GB.
|
|
128
|
+
|
|
129
|
+
its('size') { should cmp >= 15 }
|
|
130
|
+
|
|
131
|
+
### lun
|
|
132
|
+
|
|
133
|
+
The disk number as reported by Azure. Has a zero-based index value.
|
|
134
|
+
|
|
135
|
+
its('lun') { should cmp 0 }
|
|
136
|
+
|
|
137
|
+
### caching
|
|
138
|
+
|
|
139
|
+
String stating the caching that has been set on the disk.
|
|
140
|
+
|
|
141
|
+
its('caching') { should cmp 'none' }
|
|
142
|
+
|
|
143
|
+
### create\_option
|
|
144
|
+
|
|
145
|
+
How the disk was created. Typically for data disks, this will be the string value 'Empty'.
|
|
146
|
+
|
|
147
|
+
its('create_option') { should cmp 'Empty' }
|
|
148
|
+
|
|
149
|
+
### is\_managed\_disk?
|
|
150
|
+
|
|
151
|
+
Boolean stating if the disk is a managed disk or not. If it is not a managed disk then it is one that is stored in a Storage Account.
|
|
152
|
+
|
|
153
|
+
its('is_managed_disk?') { should cmp 'false' }
|
|
154
|
+
|
|
155
|
+
### vhd\_uri
|
|
156
|
+
|
|
157
|
+
If this _not_ a managed disk, then the `vhd_uri` will be the full URI to the disk in the storage account.
|
|
158
|
+
|
|
159
|
+
its('vhd_uri') { should cmp '
|
|
160
|
+
https://primary_storage.blob.core.windows.net/container_name/vm_name.vhd' }
|
|
161
|
+
|
|
162
|
+
### storage\_account\_name
|
|
163
|
+
|
|
164
|
+
If this is _not_ a managed disk this will be the storage account name in which the disk is stored.
|
|
165
|
+
|
|
166
|
+
This derived from the `vhd_uri`.
|
|
167
|
+
|
|
168
|
+
its('storage_account_name') { should cmp 'primary_storage' }
|
|
169
|
+
|
|
170
|
+
### storage\_account\_type
|
|
171
|
+
|
|
172
|
+
If this is a managed disk this is the storage account type, e.g. `Standard_LRS`.
|
|
173
|
+
|
|
174
|
+
its('storage_account_type') { should cmp 'Standard_LRS' }
|
|
175
|
+
|
|
176
|
+
### id
|
|
177
|
+
|
|
178
|
+
If this is a managed disk then this is the fully qualified id for the disk in Azure.
|
|
179
|
+
|
|
180
|
+
its('id') { should cmp '/subscriptions/1234abcd-e567-890f-g123-456h78i9jkl0/resourceGroups/InSpec-Azure' }
|
|
181
|
+
|
|
182
|
+
### subscription\_id
|
|
183
|
+
|
|
184
|
+
If this is a managed disk, this returns the subscription id of where the disk is stored.
|
|
185
|
+
|
|
186
|
+
This is derived from the `id`.
|
|
187
|
+
|
|
188
|
+
its('subscription_id') { should cmp '1234abcd-e567-890f-g123-456h78i9jkl0' }
|
|
189
|
+
|
|
190
|
+
### resource\_group
|
|
191
|
+
|
|
192
|
+
If this is a managed disk, this returns the resource group in which the disk is stored.
|
|
193
|
+
|
|
194
|
+
This is derived from the `id`.
|
|
195
|
+
|
|
196
|
+
its('resource_group') { should cmp 'InSpec-Azure' }
|
|
197
|
+
|
|
198
|
+
<br>
|
|
199
|
+
|
|
200
|
+
## Matchers
|
|
201
|
+
|
|
202
|
+
This InSpec audit resource has the following special matchers. For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
|
203
|
+
|
|
204
|
+
The following properties are applied to the virtual machine itself and not specfic disks.
|
|
205
|
+
|
|
206
|
+
### have\_data\_disks
|
|
207
|
+
|
|
208
|
+
Returns a boolean denoting if any data disks are attached to the machine.
|
|
209
|
+
|
|
210
|
+
it { should have_data_disks }
|
|
211
|
+
|
|
212
|
+
### have\_managed\_disks
|
|
213
|
+
|
|
214
|
+
Returns a boolean stating if the machine has Managed Disks for data disks.
|
|
215
|
+
|
|
216
|
+
it { should have_managed_disks }
|
|
217
|
+
|
|
218
|
+
<br>
|
|
219
|
+
|
|
220
|
+
## References
|
|
221
|
+
|
|
222
|
+
* [Azure Ruby SDK - Compute](https://github.com/Azure/azure-sdk-for-ruby/tree/master/management/azure_mgmt_compute)
|
|
223
|
+
* [Linux Internal Data Disks](https://github.com/chef/inspec/blob/master/test/azure/verify/controls/virtual_machine_linux_external_vm_datadisk.rb)
|
|
224
|
+
* [Windows Internal Data Disk](https://github.com/chef/inspec/blob/master/test/azure/verify/controls/virtual_machine_windows_internal_vm_datadisk.rb)
|
data/docs/resources/bash.md.erb
CHANGED
|
@@ -1,75 +1,75 @@
|
|
|
1
|
-
---
|
|
2
|
-
title: About the bash Resource
|
|
3
|
-
platform: linux
|
|
4
|
-
---
|
|
5
|
-
|
|
6
|
-
# bash
|
|
7
|
-
|
|
8
|
-
Use the `bash` InSpec audit resource to test an arbitrary command that is run on the system using a Bash script.
|
|
9
|
-
|
|
10
|
-
<br>
|
|
11
|
-
|
|
12
|
-
## Syntax
|
|
13
|
-
|
|
14
|
-
A `command` resource block declares a command to be run, one (or more) expected outputs, and the location to which that output is sent:
|
|
15
|
-
|
|
16
|
-
describe bash('command') do
|
|
17
|
-
it { should exist }
|
|
18
|
-
its('property') { should eq 'expected value' }
|
|
19
|
-
end
|
|
20
|
-
|
|
21
|
-
where
|
|
22
|
-
|
|
23
|
-
* `'command'` must specify a command to be run
|
|
24
|
-
* `'property'` is one of `exit_status`, `stderr`, or `stdout`
|
|
25
|
-
* `'expected value'` tests the output of the command run on the system versus the expected output stated in the test
|
|
26
|
-
|
|
27
|
-
For example:
|
|
28
|
-
|
|
29
|
-
describe bash('ls -al /') do
|
|
30
|
-
its('stdout') { should match /bin/ }
|
|
31
|
-
its('stderr') { should eq '' }
|
|
32
|
-
its('exit_status') { should eq 0 }
|
|
33
|
-
end
|
|
34
|
-
|
|
35
|
-
<br>
|
|
36
|
-
|
|
37
|
-
## Properties
|
|
38
|
-
|
|
39
|
-
* `exit_status`, `stderr`, `stdout`
|
|
40
|
-
|
|
41
|
-
<br>
|
|
42
|
-
|
|
43
|
-
## Property Examples
|
|
44
|
-
|
|
45
|
-
### exit_status
|
|
46
|
-
|
|
47
|
-
The `exit_status` property tests the exit status for the command:
|
|
48
|
-
|
|
49
|
-
its('exit_status') { should eq 0 }
|
|
50
|
-
|
|
51
|
-
### stderr
|
|
52
|
-
|
|
53
|
-
The `stderr` property tests results of the command as returned in standard error (stderr):
|
|
54
|
-
|
|
55
|
-
its('stderr') { should eq '' }
|
|
56
|
-
|
|
57
|
-
### stdout
|
|
58
|
-
|
|
59
|
-
The `stdout` property tests results of the command as returned in standard output (stdout).
|
|
60
|
-
|
|
61
|
-
its('stdout') { should match /bin/ }
|
|
62
|
-
|
|
63
|
-
<br>
|
|
64
|
-
|
|
65
|
-
## Matchers
|
|
66
|
-
|
|
67
|
-
For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
|
68
|
-
|
|
69
|
-
### exist
|
|
70
|
-
|
|
71
|
-
If an absolute path is provided, the `exist` matcher tests if the command exists on the filesystem at the specified location. Otherwise, the `exist` matcher tests if the command is found in the PATH.
|
|
72
|
-
|
|
73
|
-
it { should exist }
|
|
74
|
-
|
|
75
|
-
|
|
1
|
+
---
|
|
2
|
+
title: About the bash Resource
|
|
3
|
+
platform: linux
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# bash
|
|
7
|
+
|
|
8
|
+
Use the `bash` InSpec audit resource to test an arbitrary command that is run on the system using a Bash script.
|
|
9
|
+
|
|
10
|
+
<br>
|
|
11
|
+
|
|
12
|
+
## Syntax
|
|
13
|
+
|
|
14
|
+
A `command` resource block declares a command to be run, one (or more) expected outputs, and the location to which that output is sent:
|
|
15
|
+
|
|
16
|
+
describe bash('command') do
|
|
17
|
+
it { should exist }
|
|
18
|
+
its('property') { should eq 'expected value' }
|
|
19
|
+
end
|
|
20
|
+
|
|
21
|
+
where
|
|
22
|
+
|
|
23
|
+
* `'command'` must specify a command to be run
|
|
24
|
+
* `'property'` is one of `exit_status`, `stderr`, or `stdout`
|
|
25
|
+
* `'expected value'` tests the output of the command run on the system versus the expected output stated in the test
|
|
26
|
+
|
|
27
|
+
For example:
|
|
28
|
+
|
|
29
|
+
describe bash('ls -al /') do
|
|
30
|
+
its('stdout') { should match /bin/ }
|
|
31
|
+
its('stderr') { should eq '' }
|
|
32
|
+
its('exit_status') { should eq 0 }
|
|
33
|
+
end
|
|
34
|
+
|
|
35
|
+
<br>
|
|
36
|
+
|
|
37
|
+
## Properties
|
|
38
|
+
|
|
39
|
+
* `exit_status`, `stderr`, `stdout`
|
|
40
|
+
|
|
41
|
+
<br>
|
|
42
|
+
|
|
43
|
+
## Property Examples
|
|
44
|
+
|
|
45
|
+
### exit_status
|
|
46
|
+
|
|
47
|
+
The `exit_status` property tests the exit status for the command:
|
|
48
|
+
|
|
49
|
+
its('exit_status') { should eq 0 }
|
|
50
|
+
|
|
51
|
+
### stderr
|
|
52
|
+
|
|
53
|
+
The `stderr` property tests results of the command as returned in standard error (stderr):
|
|
54
|
+
|
|
55
|
+
its('stderr') { should eq '' }
|
|
56
|
+
|
|
57
|
+
### stdout
|
|
58
|
+
|
|
59
|
+
The `stdout` property tests results of the command as returned in standard output (stdout).
|
|
60
|
+
|
|
61
|
+
its('stdout') { should match /bin/ }
|
|
62
|
+
|
|
63
|
+
<br>
|
|
64
|
+
|
|
65
|
+
## Matchers
|
|
66
|
+
|
|
67
|
+
For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
|
68
|
+
|
|
69
|
+
### exist
|
|
70
|
+
|
|
71
|
+
If an absolute path is provided, the `exist` matcher tests if the command exists on the filesystem at the specified location. Otherwise, the `exist` matcher tests if the command is found in the PATH.
|
|
72
|
+
|
|
73
|
+
it { should exist }
|
|
74
|
+
|
|
75
|
+
|