inspec 2.3.10 → 2.3.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +34 -13
- data/etc/plugin_filters.json +25 -0
- data/inspec.gemspec +3 -3
- data/lib/bundles/inspec-compliance/api.rb +3 -0
- data/lib/bundles/inspec-compliance/configuration.rb +3 -0
- data/lib/bundles/inspec-compliance/http.rb +3 -0
- data/lib/bundles/inspec-compliance/support.rb +3 -0
- data/lib/bundles/inspec-compliance/target.rb +3 -0
- data/lib/inspec/objects/attribute.rb +3 -0
- data/lib/inspec/plugin/v2.rb +3 -0
- data/lib/inspec/plugin/v2/filter.rb +62 -0
- data/lib/inspec/plugin/v2/installer.rb +21 -1
- data/lib/inspec/plugin/v2/loader.rb +4 -0
- data/lib/inspec/profile.rb +3 -1
- data/lib/inspec/version.rb +1 -1
- data/lib/plugins/inspec-plugin-manager-cli/lib/inspec-plugin-manager-cli/cli_command.rb +25 -3
- data/lib/plugins/inspec-plugin-manager-cli/test/functional/inspec-plugin_test.rb +65 -11
- data/lib/plugins/inspec-plugin-manager-cli/test/unit/cli_args_test.rb +5 -1
- data/lib/resources/package.rb +1 -1
- metadata +5 -253
- data/MAINTAINERS.toml +0 -52
- data/docs/.gitignore +0 -2
- data/docs/README.md +0 -41
- data/docs/dev/control-eval.md +0 -62
- data/docs/dev/filtertable-internals.md +0 -353
- data/docs/dev/filtertable-usage.md +0 -533
- data/docs/dev/integration-testing.md +0 -31
- data/docs/dev/plugins.md +0 -323
- data/docs/dsl_inspec.md +0 -354
- data/docs/dsl_resource.md +0 -100
- data/docs/glossary.md +0 -381
- data/docs/habitat.md +0 -193
- data/docs/inspec_and_friends.md +0 -114
- data/docs/matchers.md +0 -161
- data/docs/migration.md +0 -293
- data/docs/platforms.md +0 -119
- data/docs/plugin_kitchen_inspec.md +0 -60
- data/docs/plugins.md +0 -57
- data/docs/profiles.md +0 -576
- data/docs/reporters.md +0 -170
- data/docs/resources/aide_conf.md.erb +0 -86
- data/docs/resources/apache.md.erb +0 -77
- data/docs/resources/apache_conf.md.erb +0 -78
- data/docs/resources/apt.md.erb +0 -81
- data/docs/resources/audit_policy.md.erb +0 -57
- data/docs/resources/auditd.md.erb +0 -89
- data/docs/resources/auditd_conf.md.erb +0 -78
- data/docs/resources/aws_cloudtrail_trail.md.erb +0 -165
- data/docs/resources/aws_cloudtrail_trails.md.erb +0 -96
- data/docs/resources/aws_cloudwatch_alarm.md.erb +0 -101
- data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +0 -164
- data/docs/resources/aws_config_delivery_channel.md.erb +0 -111
- data/docs/resources/aws_config_recorder.md.erb +0 -96
- data/docs/resources/aws_ebs_volume.md.erb +0 -76
- data/docs/resources/aws_ebs_volumes.md.erb +0 -86
- data/docs/resources/aws_ec2_instance.md.erb +0 -122
- data/docs/resources/aws_ec2_instances.md.erb +0 -89
- data/docs/resources/aws_elb.md.erb +0 -154
- data/docs/resources/aws_elbs.md.erb +0 -252
- data/docs/resources/aws_flow_log.md.erb +0 -128
- data/docs/resources/aws_iam_access_key.md.erb +0 -139
- data/docs/resources/aws_iam_access_keys.md.erb +0 -214
- data/docs/resources/aws_iam_group.md.erb +0 -74
- data/docs/resources/aws_iam_groups.md.erb +0 -92
- data/docs/resources/aws_iam_password_policy.md.erb +0 -92
- data/docs/resources/aws_iam_policies.md.erb +0 -97
- data/docs/resources/aws_iam_policy.md.erb +0 -264
- data/docs/resources/aws_iam_role.md.erb +0 -79
- data/docs/resources/aws_iam_root_user.md.erb +0 -86
- data/docs/resources/aws_iam_user.md.erb +0 -130
- data/docs/resources/aws_iam_users.md.erb +0 -289
- data/docs/resources/aws_kms_key.md.erb +0 -187
- data/docs/resources/aws_kms_keys.md.erb +0 -99
- data/docs/resources/aws_rds_instance.md.erb +0 -76
- data/docs/resources/aws_route_table.md.erb +0 -63
- data/docs/resources/aws_route_tables.md.erb +0 -65
- data/docs/resources/aws_s3_bucket.md.erb +0 -156
- data/docs/resources/aws_s3_bucket_object.md.erb +0 -99
- data/docs/resources/aws_s3_buckets.md.erb +0 -69
- data/docs/resources/aws_security_group.md.erb +0 -323
- data/docs/resources/aws_security_groups.md.erb +0 -107
- data/docs/resources/aws_sns_subscription.md.erb +0 -140
- data/docs/resources/aws_sns_topic.md.erb +0 -79
- data/docs/resources/aws_sns_topics.md.erb +0 -68
- data/docs/resources/aws_subnet.md.erb +0 -150
- data/docs/resources/aws_subnets.md.erb +0 -142
- data/docs/resources/aws_vpc.md.erb +0 -135
- data/docs/resources/aws_vpcs.md.erb +0 -135
- data/docs/resources/azure_generic_resource.md.erb +0 -183
- data/docs/resources/azure_resource_group.md.erb +0 -294
- data/docs/resources/azure_virtual_machine.md.erb +0 -357
- data/docs/resources/azure_virtual_machine_data_disk.md.erb +0 -234
- data/docs/resources/bash.md.erb +0 -85
- data/docs/resources/bond.md.erb +0 -100
- data/docs/resources/bridge.md.erb +0 -67
- data/docs/resources/bsd_service.md.erb +0 -77
- data/docs/resources/chocolatey_package.md.erb +0 -68
- data/docs/resources/command.md.erb +0 -176
- data/docs/resources/cpan.md.erb +0 -89
- data/docs/resources/cran.md.erb +0 -74
- data/docs/resources/crontab.md.erb +0 -103
- data/docs/resources/csv.md.erb +0 -64
- data/docs/resources/dh_params.md.erb +0 -221
- data/docs/resources/directory.md.erb +0 -40
- data/docs/resources/docker.md.erb +0 -240
- data/docs/resources/docker_container.md.erb +0 -113
- data/docs/resources/docker_image.md.erb +0 -104
- data/docs/resources/docker_plugin.md.erb +0 -80
- data/docs/resources/docker_service.md.erb +0 -124
- data/docs/resources/elasticsearch.md.erb +0 -252
- data/docs/resources/etc_fstab.md.erb +0 -135
- data/docs/resources/etc_group.md.erb +0 -85
- data/docs/resources/etc_hosts.md.erb +0 -88
- data/docs/resources/etc_hosts_allow.md.erb +0 -84
- data/docs/resources/etc_hosts_deny.md.erb +0 -84
- data/docs/resources/file.md.erb +0 -543
- data/docs/resources/filesystem.md.erb +0 -51
- data/docs/resources/firewalld.md.erb +0 -117
- data/docs/resources/gem.md.erb +0 -108
- data/docs/resources/group.md.erb +0 -71
- data/docs/resources/grub_conf.md.erb +0 -111
- data/docs/resources/host.md.erb +0 -96
- data/docs/resources/http.md.erb +0 -207
- data/docs/resources/iis_app.md.erb +0 -132
- data/docs/resources/iis_site.md.erb +0 -145
- data/docs/resources/inetd_conf.md.erb +0 -104
- data/docs/resources/ini.md.erb +0 -86
- data/docs/resources/interface.md.erb +0 -68
- data/docs/resources/iptables.md.erb +0 -74
- data/docs/resources/json.md.erb +0 -73
- data/docs/resources/kernel_module.md.erb +0 -130
- data/docs/resources/kernel_parameter.md.erb +0 -63
- data/docs/resources/key_rsa.md.erb +0 -95
- data/docs/resources/launchd_service.md.erb +0 -67
- data/docs/resources/limits_conf.md.erb +0 -85
- data/docs/resources/login_defs.md.erb +0 -81
- data/docs/resources/mount.md.erb +0 -79
- data/docs/resources/mssql_session.md.erb +0 -78
- data/docs/resources/mysql_conf.md.erb +0 -109
- data/docs/resources/mysql_session.md.erb +0 -84
- data/docs/resources/nginx.md.erb +0 -89
- data/docs/resources/nginx_conf.md.erb +0 -148
- data/docs/resources/npm.md.erb +0 -78
- data/docs/resources/ntp_conf.md.erb +0 -70
- data/docs/resources/oneget.md.erb +0 -63
- data/docs/resources/oracledb_session.md.erb +0 -103
- data/docs/resources/os.md.erb +0 -153
- data/docs/resources/os_env.md.erb +0 -101
- data/docs/resources/package.md.erb +0 -130
- data/docs/resources/packages.md.erb +0 -77
- data/docs/resources/parse_config.md.erb +0 -113
- data/docs/resources/parse_config_file.md.erb +0 -148
- data/docs/resources/passwd.md.erb +0 -151
- data/docs/resources/pip.md.erb +0 -77
- data/docs/resources/port.md.erb +0 -147
- data/docs/resources/postgres_conf.md.erb +0 -89
- data/docs/resources/postgres_hba_conf.md.erb +0 -103
- data/docs/resources/postgres_ident_conf.md.erb +0 -86
- data/docs/resources/postgres_session.md.erb +0 -79
- data/docs/resources/powershell.md.erb +0 -112
- data/docs/resources/processes.md.erb +0 -119
- data/docs/resources/rabbitmq_config.md.erb +0 -51
- data/docs/resources/registry_key.md.erb +0 -197
- data/docs/resources/runit_service.md.erb +0 -67
- data/docs/resources/security_policy.md.erb +0 -57
- data/docs/resources/service.md.erb +0 -131
- data/docs/resources/shadow.md.erb +0 -267
- data/docs/resources/ssh_config.md.erb +0 -83
- data/docs/resources/sshd_config.md.erb +0 -93
- data/docs/resources/ssl.md.erb +0 -129
- data/docs/resources/sys_info.md.erb +0 -52
- data/docs/resources/systemd_service.md.erb +0 -67
- data/docs/resources/sysv_service.md.erb +0 -67
- data/docs/resources/upstart_service.md.erb +0 -67
- data/docs/resources/user.md.erb +0 -150
- data/docs/resources/users.md.erb +0 -137
- data/docs/resources/vbscript.md.erb +0 -65
- data/docs/resources/virtualization.md.erb +0 -67
- data/docs/resources/windows_feature.md.erb +0 -69
- data/docs/resources/windows_hotfix.md.erb +0 -63
- data/docs/resources/windows_task.md.erb +0 -95
- data/docs/resources/wmi.md.erb +0 -91
- data/docs/resources/x509_certificate.md.erb +0 -161
- data/docs/resources/xinetd_conf.md.erb +0 -166
- data/docs/resources/xml.md.erb +0 -95
- data/docs/resources/yaml.md.erb +0 -79
- data/docs/resources/yum.md.erb +0 -108
- data/docs/resources/zfs_dataset.md.erb +0 -63
- data/docs/resources/zfs_pool.md.erb +0 -57
- data/docs/shared/matcher_be.md.erb +0 -1
- data/docs/shared/matcher_cmp.md.erb +0 -43
- data/docs/shared/matcher_eq.md.erb +0 -3
- data/docs/shared/matcher_include.md.erb +0 -1
- data/docs/shared/matcher_match.md.erb +0 -1
- data/docs/shell.md +0 -217
- data/docs/style.md +0 -178
- data/examples/README.md +0 -8
- data/examples/custom-resource/README.md +0 -3
- data/examples/custom-resource/controls/example.rb +0 -7
- data/examples/custom-resource/inspec.yml +0 -8
- data/examples/custom-resource/libraries/batsignal.rb +0 -20
- data/examples/custom-resource/libraries/gordon.rb +0 -21
- data/examples/inheritance/README.md +0 -65
- data/examples/inheritance/controls/example.rb +0 -14
- data/examples/inheritance/inspec.yml +0 -16
- data/examples/kitchen-ansible/.kitchen.yml +0 -25
- data/examples/kitchen-ansible/Gemfile +0 -19
- data/examples/kitchen-ansible/README.md +0 -53
- data/examples/kitchen-ansible/files/nginx.repo +0 -6
- data/examples/kitchen-ansible/tasks/main.yml +0 -16
- data/examples/kitchen-ansible/test/integration/default/default.yml +0 -5
- data/examples/kitchen-ansible/test/integration/default/web_spec.rb +0 -28
- data/examples/kitchen-chef/.kitchen.yml +0 -20
- data/examples/kitchen-chef/Berksfile +0 -3
- data/examples/kitchen-chef/Gemfile +0 -19
- data/examples/kitchen-chef/README.md +0 -27
- data/examples/kitchen-chef/metadata.rb +0 -7
- data/examples/kitchen-chef/recipes/default.rb +0 -6
- data/examples/kitchen-chef/recipes/nginx.rb +0 -30
- data/examples/kitchen-chef/test/integration/default/web_spec.rb +0 -28
- data/examples/kitchen-puppet/.kitchen.yml +0 -23
- data/examples/kitchen-puppet/Gemfile +0 -20
- data/examples/kitchen-puppet/Puppetfile +0 -25
- data/examples/kitchen-puppet/README.md +0 -53
- data/examples/kitchen-puppet/manifests/site.pp +0 -33
- data/examples/kitchen-puppet/metadata.json +0 -11
- data/examples/kitchen-puppet/modules/.gitkeep +0 -0
- data/examples/kitchen-puppet/test/integration/default/web_spec.rb +0 -28
- data/examples/meta-profile/README.md +0 -37
- data/examples/meta-profile/controls/example.rb +0 -13
- data/examples/meta-profile/inspec.yml +0 -13
- data/examples/plugins/inspec-resource-lister/Gemfile +0 -12
- data/examples/plugins/inspec-resource-lister/LICENSE +0 -13
- data/examples/plugins/inspec-resource-lister/README.md +0 -62
- data/examples/plugins/inspec-resource-lister/Rakefile +0 -40
- data/examples/plugins/inspec-resource-lister/inspec-resource-lister.gemspec +0 -45
- data/examples/plugins/inspec-resource-lister/lib/inspec-resource-lister.rb +0 -16
- data/examples/plugins/inspec-resource-lister/lib/inspec-resource-lister/cli_command.rb +0 -70
- data/examples/plugins/inspec-resource-lister/lib/inspec-resource-lister/plugin.rb +0 -55
- data/examples/plugins/inspec-resource-lister/lib/inspec-resource-lister/version.rb +0 -10
- data/examples/plugins/inspec-resource-lister/test/fixtures/README.md +0 -24
- data/examples/plugins/inspec-resource-lister/test/functional/README.md +0 -18
- data/examples/plugins/inspec-resource-lister/test/functional/inspec_resource_lister_test.rb +0 -110
- data/examples/plugins/inspec-resource-lister/test/helper.rb +0 -26
- data/examples/plugins/inspec-resource-lister/test/unit/README.md +0 -17
- data/examples/plugins/inspec-resource-lister/test/unit/cli_args_test.rb +0 -64
- data/examples/plugins/inspec-resource-lister/test/unit/plugin_def_test.rb +0 -51
- data/examples/profile-attribute.yml +0 -2
- data/examples/profile-attribute/README.md +0 -14
- data/examples/profile-attribute/controls/example.rb +0 -11
- data/examples/profile-attribute/inspec.yml +0 -8
- data/examples/profile-aws/controls/iam_password_policy_expiration.rb +0 -8
- data/examples/profile-aws/controls/iam_password_policy_max_age.rb +0 -8
- data/examples/profile-aws/controls/iam_root_user_mfa.rb +0 -8
- data/examples/profile-aws/controls/iam_users_access_key_age.rb +0 -8
- data/examples/profile-aws/controls/iam_users_console_users_mfa.rb +0 -8
- data/examples/profile-aws/inspec.yml +0 -11
- data/examples/profile-azure/controls/azure_resource_group_example.rb +0 -24
- data/examples/profile-azure/controls/azure_vm_example.rb +0 -29
- data/examples/profile-azure/inspec.yml +0 -11
- data/examples/profile-sensitive/README.md +0 -29
- data/examples/profile-sensitive/controls/sensitive-failures.rb +0 -9
- data/examples/profile-sensitive/controls/sensitive.rb +0 -9
- data/examples/profile-sensitive/inspec.yml +0 -8
- data/examples/profile/README.md +0 -48
- data/examples/profile/controls/example.rb +0 -24
- data/examples/profile/controls/gordon.rb +0 -36
- data/examples/profile/controls/meta.rb +0 -36
- data/examples/profile/inspec.yml +0 -11
- data/examples/profile/libraries/gordon_config.rb +0 -59
@@ -1,234 +0,0 @@
|
|
1
|
-
---
|
2
|
-
title: About the azure_virtual_machine_datadisk Resource
|
3
|
-
platform: azure
|
4
|
-
---
|
5
|
-
|
6
|
-
# azure\_virtual\_machine\_datadisk
|
7
|
-
|
8
|
-
Use this resource to ensure that a specific data disk attached to a machine has been created properly.
|
9
|
-
|
10
|
-
## Availability
|
11
|
-
|
12
|
-
### Installation
|
13
|
-
|
14
|
-
This resource is distributed along with InSpec itself. You can use it automatically.
|
15
|
-
|
16
|
-
### Version
|
17
|
-
|
18
|
-
This resource first became available in v2.0.16 of InSpec.
|
19
|
-
|
20
|
-
## Syntax
|
21
|
-
|
22
|
-
The name of the resource group and machine are required to use this resource.
|
23
|
-
|
24
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'MyVM') do
|
25
|
-
its('property') { should eq 'value' }
|
26
|
-
end
|
27
|
-
|
28
|
-
where
|
29
|
-
|
30
|
-
* `MyVm` is the name of the virtual machine as seen in Azure. (It is **not** the hostname of the machine)
|
31
|
-
* `InSpec-Azure` is the name of the resource group that the machine is in.
|
32
|
-
* `property` is a resource property
|
33
|
-
* `value` is the expected output from the matcher
|
34
|
-
|
35
|
-
<br>
|
36
|
-
|
37
|
-
## Examples
|
38
|
-
|
39
|
-
The following examples show to use this InSpec audit resource.
|
40
|
-
|
41
|
-
### Check that the first data disk is of the correct size
|
42
|
-
|
43
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Linux-Internal-VM').where(number: 1) do
|
44
|
-
its('size') { should cmp >= 15 }
|
45
|
-
end
|
46
|
-
|
47
|
-
<br>
|
48
|
-
|
49
|
-
## Resource Parameters
|
50
|
-
|
51
|
-
* `group_name`, `name`, `apiversion`
|
52
|
-
|
53
|
-
## Parameter Examples
|
54
|
-
|
55
|
-
The options that can be passed to the resource are as follows.
|
56
|
-
|
57
|
-
### group_name (required)
|
58
|
-
|
59
|
-
Use this parameter to define the Azure Resource Group to be tested.
|
60
|
-
|
61
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure') do
|
62
|
-
...
|
63
|
-
end
|
64
|
-
|
65
|
-
### name
|
66
|
-
|
67
|
-
Use this parameter to define the name of the Azure resource to test.
|
68
|
-
|
69
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM') do
|
70
|
-
...
|
71
|
-
end
|
72
|
-
|
73
|
-
### apiversion
|
74
|
-
|
75
|
-
The API Version to use when querying the resource. Defaults to the latest version for the resource.
|
76
|
-
|
77
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM', apiversion: '2.0') do
|
78
|
-
...
|
79
|
-
end
|
80
|
-
|
81
|
-
These options can also be set using the environment variables:
|
82
|
-
|
83
|
-
* `AZURE_RESOURCE_GROUP_NAME`
|
84
|
-
* `AZURE_RESOURCE_NAME`
|
85
|
-
* `AZURE_RESOURCE_API_VERSION`
|
86
|
-
|
87
|
-
When the options have been set as well as the environment variables, the environment variables take priority.
|
88
|
-
|
89
|
-
<br>
|
90
|
-
|
91
|
-
## Filter Criteria
|
92
|
-
|
93
|
-
* `number`, `disk`
|
94
|
-
|
95
|
-
<br>
|
96
|
-
|
97
|
-
## Filter Examples
|
98
|
-
|
99
|
-
### disk
|
100
|
-
|
101
|
-
The zero based index of the disk attached to the machine.
|
102
|
-
|
103
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM').where(disk: 0)
|
104
|
-
end
|
105
|
-
|
106
|
-
### number
|
107
|
-
|
108
|
-
The '1' based index of the disk attached to the machine.
|
109
|
-
|
110
|
-
describe azure_virtual_machine_data_disk(group_name: 'InSpec-Azure', name: 'Windows-Internal-VM').where(number: 1)
|
111
|
-
end
|
112
|
-
|
113
|
-
<br>
|
114
|
-
|
115
|
-
## Properties
|
116
|
-
|
117
|
-
* `count`, `disk`, `number`, `name`, `size`, `lun`, `caching`, `create_option`, `is_managed_disk?`, `vhd_uri`, `storage_account_name`, `storage_account_type`, `id`, `subscription_id`, `resource_group`
|
118
|
-
|
119
|
-
<br>
|
120
|
-
|
121
|
-
## Property Examples
|
122
|
-
|
123
|
-
### count
|
124
|
-
|
125
|
-
Returns the number of data disks attached to the machine
|
126
|
-
|
127
|
-
its('count') { should eq 1 }
|
128
|
-
|
129
|
-
### name
|
130
|
-
|
131
|
-
Returns a string of the name of the disk.
|
132
|
-
|
133
|
-
its('name') { should cmp 'linux-external-datadisk-1' }
|
134
|
-
|
135
|
-
### size
|
136
|
-
|
137
|
-
Returns an integer of size of this disk in GB.
|
138
|
-
|
139
|
-
its('size') { should cmp >= 15 }
|
140
|
-
|
141
|
-
### lun
|
142
|
-
|
143
|
-
The disk number as reported by Azure. Has a zero-based index value.
|
144
|
-
|
145
|
-
its('lun') { should cmp 0 }
|
146
|
-
|
147
|
-
### caching
|
148
|
-
|
149
|
-
String stating the caching that has been set on the disk.
|
150
|
-
|
151
|
-
its('caching') { should cmp 'none' }
|
152
|
-
|
153
|
-
### create\_option
|
154
|
-
|
155
|
-
How the disk was created. Typically for data disks, this will be the string value 'Empty'.
|
156
|
-
|
157
|
-
its('create_option') { should cmp 'Empty' }
|
158
|
-
|
159
|
-
### is\_managed\_disk?
|
160
|
-
|
161
|
-
Boolean stating if the disk is a managed disk or not. If it is not a managed disk then it is one that is stored in a Storage Account.
|
162
|
-
|
163
|
-
its('is_managed_disk?') { should cmp 'false' }
|
164
|
-
|
165
|
-
### vhd\_uri
|
166
|
-
|
167
|
-
If this _not_ a managed disk, then the `vhd_uri` will be the full URI to the disk in the storage account.
|
168
|
-
|
169
|
-
its('vhd_uri') { should cmp '
|
170
|
-
https://primary_storage.blob.core.windows.net/container_name/vm_name.vhd' }
|
171
|
-
|
172
|
-
### storage\_account\_name
|
173
|
-
|
174
|
-
If this is _not_ a managed disk this will be the storage account name in which the disk is stored.
|
175
|
-
|
176
|
-
This derived from the `vhd_uri`.
|
177
|
-
|
178
|
-
its('storage_account_name') { should cmp 'primary_storage' }
|
179
|
-
|
180
|
-
### storage\_account\_type
|
181
|
-
|
182
|
-
If this is a managed disk this is the storage account type, e.g. `Standard_LRS`.
|
183
|
-
|
184
|
-
its('storage_account_type') { should cmp 'Standard_LRS' }
|
185
|
-
|
186
|
-
### id
|
187
|
-
|
188
|
-
If this is a managed disk then this is the fully qualified id for the disk in Azure.
|
189
|
-
|
190
|
-
its('id') { should cmp '/subscriptions/1234abcd-e567-890f-g123-456h78i9jkl0/resourceGroups/InSpec-Azure' }
|
191
|
-
|
192
|
-
### subscription\_id
|
193
|
-
|
194
|
-
If this is a managed disk, this returns the subscription id of where the disk is stored.
|
195
|
-
|
196
|
-
This is derived from the `id`.
|
197
|
-
|
198
|
-
its('subscription_id') { should cmp '1234abcd-e567-890f-g123-456h78i9jkl0' }
|
199
|
-
|
200
|
-
### resource\_group
|
201
|
-
|
202
|
-
If this is a managed disk, this returns the resource group in which the disk is stored.
|
203
|
-
|
204
|
-
This is derived from the `id`.
|
205
|
-
|
206
|
-
its('resource_group') { should cmp 'InSpec-Azure' }
|
207
|
-
|
208
|
-
<br>
|
209
|
-
|
210
|
-
## Matchers
|
211
|
-
|
212
|
-
This InSpec audit resource has the following special matchers. For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
213
|
-
|
214
|
-
The following properties are applied to the virtual machine itself and not specific disks.
|
215
|
-
|
216
|
-
### have\_data\_disks
|
217
|
-
|
218
|
-
Returns a boolean denoting if any data disks are attached to the machine.
|
219
|
-
|
220
|
-
it { should have_data_disks }
|
221
|
-
|
222
|
-
### have\_managed\_disks
|
223
|
-
|
224
|
-
Returns a boolean stating if the machine has Managed Disks for data disks.
|
225
|
-
|
226
|
-
it { should have_managed_disks }
|
227
|
-
|
228
|
-
<br>
|
229
|
-
|
230
|
-
## References
|
231
|
-
|
232
|
-
* [Azure Ruby SDK - Compute](https://github.com/Azure/azure-sdk-for-ruby/tree/master/management/azure_mgmt_compute)
|
233
|
-
* [Linux Internal Data Disks](https://github.com/chef/inspec/blob/master/test/azure/verify/controls/virtual_machine_linux_external_vm_datadisk.rb)
|
234
|
-
* [Windows Internal Data Disk](https://github.com/chef/inspec/blob/master/test/azure/verify/controls/virtual_machine_windows_internal_vm_datadisk.rb)
|
data/docs/resources/bash.md.erb
DELETED
@@ -1,85 +0,0 @@
|
|
1
|
-
---
|
2
|
-
title: About the bash Resource
|
3
|
-
platform: linux
|
4
|
-
---
|
5
|
-
|
6
|
-
# bash
|
7
|
-
|
8
|
-
Use the `bash` InSpec audit resource to test an arbitrary command that is run on the system using a Bash script.
|
9
|
-
|
10
|
-
<br>
|
11
|
-
|
12
|
-
## Availability
|
13
|
-
|
14
|
-
### Installation
|
15
|
-
|
16
|
-
This resource is distributed along with InSpec itself. You can use it automatically.
|
17
|
-
|
18
|
-
### Version
|
19
|
-
|
20
|
-
This resource first became available in v1.0.0 of InSpec.
|
21
|
-
|
22
|
-
## Syntax
|
23
|
-
|
24
|
-
A `command` resource block declares a command to be run, one (or more) expected outputs, and the location to which that output is sent:
|
25
|
-
|
26
|
-
describe bash('command') do
|
27
|
-
it { should exist }
|
28
|
-
its('property') { should eq 'expected value' }
|
29
|
-
end
|
30
|
-
|
31
|
-
where
|
32
|
-
|
33
|
-
* `'command'` must specify a command to be run
|
34
|
-
* `'property'` is one of `exit_status`, `stderr`, or `stdout`
|
35
|
-
* `'expected value'` tests the output of the command run on the system versus the expected output stated in the test
|
36
|
-
|
37
|
-
For example:
|
38
|
-
|
39
|
-
describe bash('ls -al /') do
|
40
|
-
its('stdout') { should match /bin/ }
|
41
|
-
its('stderr') { should eq '' }
|
42
|
-
its('exit_status') { should eq 0 }
|
43
|
-
end
|
44
|
-
|
45
|
-
<br>
|
46
|
-
|
47
|
-
## Properties
|
48
|
-
|
49
|
-
* `exit_status`, `stderr`, `stdout`
|
50
|
-
|
51
|
-
<br>
|
52
|
-
|
53
|
-
## Property Examples
|
54
|
-
|
55
|
-
### exit_status
|
56
|
-
|
57
|
-
The `exit_status` property tests the exit status for the command:
|
58
|
-
|
59
|
-
its('exit_status') { should eq 0 }
|
60
|
-
|
61
|
-
### stderr
|
62
|
-
|
63
|
-
The `stderr` property tests results of the command as returned in standard error (stderr):
|
64
|
-
|
65
|
-
its('stderr') { should eq '' }
|
66
|
-
|
67
|
-
### stdout
|
68
|
-
|
69
|
-
The `stdout` property tests results of the command as returned in standard output (stdout).
|
70
|
-
|
71
|
-
its('stdout') { should match /bin/ }
|
72
|
-
|
73
|
-
<br>
|
74
|
-
|
75
|
-
## Matchers
|
76
|
-
|
77
|
-
For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
78
|
-
|
79
|
-
### exist
|
80
|
-
|
81
|
-
If an absolute path is provided, the `exist` matcher tests if the command exists on the filesystem at the specified location. Otherwise, the `exist` matcher tests if the command is found in the PATH.
|
82
|
-
|
83
|
-
it { should exist }
|
84
|
-
|
85
|
-
|
data/docs/resources/bond.md.erb
DELETED
@@ -1,100 +0,0 @@
|
|
1
|
-
---
|
2
|
-
title: About the bond Resource
|
3
|
-
platform: linux
|
4
|
-
---
|
5
|
-
|
6
|
-
# bond
|
7
|
-
|
8
|
-
Use the `bond` InSpec audit resource to test a logical, bonded network interface (i.e. "two or more network interfaces aggregated into a single, logical network interface"). On Linux platforms, any value in the `/proc/net/bonding` directory may be tested.
|
9
|
-
|
10
|
-
<br>
|
11
|
-
|
12
|
-
## Availability
|
13
|
-
|
14
|
-
### Installation
|
15
|
-
|
16
|
-
This resource is distributed along with InSpec itself. You can use it automatically.
|
17
|
-
|
18
|
-
### Version
|
19
|
-
|
20
|
-
This resource first became available in v1.0.0 of InSpec.
|
21
|
-
|
22
|
-
## Syntax
|
23
|
-
|
24
|
-
A `bond` resource block declares a bonded network interface, and then specifies the properties of that bonded network interface to be tested:
|
25
|
-
|
26
|
-
describe bond('name') do
|
27
|
-
it { should exist }
|
28
|
-
end
|
29
|
-
|
30
|
-
where
|
31
|
-
|
32
|
-
* `'name'` is the name of the bonded network interface
|
33
|
-
* `{ should exist }` is a valid matcher for this resource
|
34
|
-
|
35
|
-
<br>
|
36
|
-
|
37
|
-
## Property Examples
|
38
|
-
|
39
|
-
The following examples show how to use this InSpec audit resource.
|
40
|
-
|
41
|
-
### content
|
42
|
-
|
43
|
-
The `content` matcher tests if contents in the file that defines the bonded network interface match the value specified in the test. The values of the `content` matcher are arbitrary.
|
44
|
-
|
45
|
-
its('content') { should match('value') }
|
46
|
-
|
47
|
-
### interfaces
|
48
|
-
|
49
|
-
The `interfaces` matcher tests if the named secondary interfaces are available.
|
50
|
-
|
51
|
-
its('interfaces') { should eq ['eth0', 'eth1', ...] }
|
52
|
-
|
53
|
-
### mode
|
54
|
-
|
55
|
-
The `mode` matcher tests the Bonding Mode.
|
56
|
-
|
57
|
-
its('mode') { should eq 'IEEE 802.3ad Dynamic link aggregation' }
|
58
|
-
|
59
|
-
### params
|
60
|
-
|
61
|
-
The `params` matcher tests arbitrary parameters for the bonded network interface.
|
62
|
-
|
63
|
-
its('params') { should eq 'value' }
|
64
|
-
|
65
|
-
### Test if eth0 is a secondary interface for bond0
|
66
|
-
|
67
|
-
describe bond('bond0') do
|
68
|
-
it { should exist }
|
69
|
-
it { should have_interface 'eth0' }
|
70
|
-
end
|
71
|
-
|
72
|
-
### Test parameters for bond0
|
73
|
-
|
74
|
-
describe bond('bond0') do
|
75
|
-
its('mode') { should eq 'IEEE 802.3ad Dynamic link aggregation' }
|
76
|
-
its('Transmit Hash Policy') { should eq 'layer3+4 (1)' }
|
77
|
-
its('MII Status') { should eq 'up' }
|
78
|
-
its('MII Polling Interval (ms)') { should eq '100' }
|
79
|
-
its('Up Delay (ms)') { should eq '0' }
|
80
|
-
its('Down Delay (ms)') { should eq '0' }
|
81
|
-
end
|
82
|
-
|
83
|
-
<br>
|
84
|
-
|
85
|
-
## Matchers
|
86
|
-
|
87
|
-
For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
88
|
-
|
89
|
-
### exist
|
90
|
-
|
91
|
-
The `exist` matcher tests if the bonded network interface is available:
|
92
|
-
|
93
|
-
it { should exist }
|
94
|
-
|
95
|
-
### have_interface
|
96
|
-
|
97
|
-
The `have_interface` matcher tests if the bonded network interface has one (or more) secondary interfaces:
|
98
|
-
|
99
|
-
it { should have_interface }
|
100
|
-
|
@@ -1,67 +0,0 @@
|
|
1
|
-
---
|
2
|
-
title: About the bridge Resource
|
3
|
-
platform: linux
|
4
|
-
---
|
5
|
-
|
6
|
-
# bridge
|
7
|
-
|
8
|
-
Use the `bridge` InSpec audit resource to test basic network bridge properties, such as name, if an interface is defined, and the associations for any defined interface.
|
9
|
-
|
10
|
-
<br>
|
11
|
-
|
12
|
-
## Availability
|
13
|
-
|
14
|
-
### Installation
|
15
|
-
|
16
|
-
This resource is distributed along with InSpec itself. You can use it automatically.
|
17
|
-
|
18
|
-
### Version
|
19
|
-
|
20
|
-
This resource first became available in v1.0.0 of InSpec.
|
21
|
-
|
22
|
-
## Syntax
|
23
|
-
|
24
|
-
A `bridge` resource block declares the bridge to be tested and what interface it should be associated with:
|
25
|
-
|
26
|
-
describe bridge('br0') do
|
27
|
-
it { should exist }
|
28
|
-
it { should have_interface 'eth0' }
|
29
|
-
end
|
30
|
-
|
31
|
-
<br>
|
32
|
-
|
33
|
-
## Properties
|
34
|
-
|
35
|
-
* On Linux platforms, any value in the `/sys/class/net/{interface}/bridge` directory may be tested
|
36
|
-
* On the Windows platform, the `Get-NetAdapter` cmdlet is associated with the `Get-NetAdapterBinding` cmdlet and returns the `ComponentID ms_bridge` value as a JSON object
|
37
|
-
|
38
|
-
<br>
|
39
|
-
|
40
|
-
## Property Examples
|
41
|
-
|
42
|
-
### interfaces
|
43
|
-
|
44
|
-
The `interfaces` property tests if the named interface is present:
|
45
|
-
|
46
|
-
its('interfaces') { should eq 'foo' }
|
47
|
-
its('interfaces') { should eq 'bar' }
|
48
|
-
its('interfaces') { should include('foo') }
|
49
|
-
|
50
|
-
<br>
|
51
|
-
|
52
|
-
## Matchers
|
53
|
-
|
54
|
-
For a full list of available matchers, please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
|
55
|
-
|
56
|
-
### exist
|
57
|
-
|
58
|
-
The `exist` matcher tests if the network bridge is available:
|
59
|
-
|
60
|
-
it { should exist }
|
61
|
-
|
62
|
-
### have_interface
|
63
|
-
|
64
|
-
The `have_interface` matcher tests if the named interface is defined for the network bridge:
|
65
|
-
|
66
|
-
it { should have_interface 'eth0' }
|
67
|
-
|