kitchen-inspec 0.13.0 → 0.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 1550e107066496cc82de6a4c8fed0c30ad25e609
-  data.tar.gz: 27d3125555dfb9218339585fc28c8bdec9d02433
+  metadata.gz: 12e0244f6f8231b73abc271a20ae85f26d84d4b9
+  data.tar.gz: 8bf60418497ab80811e8bca84e6dd3f75a495712
 SHA512:
-  metadata.gz: f82e8302a41797b5af2c7760099329d377e2285942129e844840230ec78ca7981a79c66ce9d458f91c665e67955471daaef43896b3de86ee22a7e2bcbb504ce2
-  data.tar.gz: 754da22a5f8feb494d2b7329054d622c6c34fd9e04f0c449331054d76633f916b35dcbbd3e27c9bbca4f32258a4c0433d6cd5320782552457371bae1886749fc
+  metadata.gz: bcc928b7bc21bd215b60ba4886695c5dc8793e934934f3adc9b3411d72500f45fa70e539816e49fda381aa3619e688327c718158b0f407d960e45b380f819096
+  data.tar.gz: b22388950f4736a52017a66b057df4846540d62fbc2aba5e1496bbbc613bf7f93d51d4d2b01c58b8f44fd8dc919f9729057a4e385b110475b7579010830653ab

data/CHANGELOG.md

@@ -1,7 +1,20 @@
 # Change Log
 
-## [0.13.0](https://github.com/chef/kitchen-inspec/tree/0.13.0) (2016-05-10)
-[Full Changelog](https://github.com/chef/kitchen-inspec/compare/v0.12.5...0.13.0)
+## [0.14.0](https://github.com/chef/kitchen-inspec/tree/0.14.0) (2016-05-25)
+[Full Changelog](https://github.com/chef/kitchen-inspec/compare/v0.13.0...0.14.0)
+
+**Closed issues:**
+
+- How to verify with a local profile [\#88](https://github.com/chef/kitchen-inspec/issues/88)
+
+**Merged pull requests:**
+
+- update readme with remote profile handling [\#89](https://github.com/chef/kitchen-inspec/pull/89) ([chris-rock](https://github.com/chris-rock))
+- depend on inspec 0.22+ [\#87](https://github.com/chef/kitchen-inspec/pull/87) ([chris-rock](https://github.com/chris-rock))
+- support for sudo\_command [\#86](https://github.com/chef/kitchen-inspec/pull/86) ([jeremymv2](https://github.com/jeremymv2))
+
+## [v0.13.0](https://github.com/chef/kitchen-inspec/tree/v0.13.0) (2016-05-10)
+[Full Changelog](https://github.com/chef/kitchen-inspec/compare/v0.12.5...v0.13.0)
 
 **Implemented enhancements:**
 

data/README.md

@@ -30,6 +30,14 @@ verifier:
   name: inspec
 ```
 
+Optionally specify sudo and sudo_command
+```
+verifier:
+  name: inspec
+  sudo: true
+  sudo_command: 'skittles'
+```
+
 ### Directory Structure
 
 By default `kitchen-inspec` expects test to be in `test/integration/%suite%` directory structure (we use Chef as provisioner here):
@@ -92,6 +100,58 @@ If you need support with other testing frameworks, we recommend to place the tes
                 └── web_spec.rb
 ```
 
+### Use remote InSpec profiles
+
+In case you want to reuse tests across multiple cookbooks, they should become an extra artifact independent of a Chef cookbook, call [InSpec profiles](https://github.com/chef/inspec/blob/master/docs/profiles.rst). Those can be easiliy added to existing local tests as demonstrated in previous sections. To include remote profiles, adapt the `verifier` attributes in `.kitchen.yml`
+
+```
+suites:
+  - name: default
+    verifier:
+      inspec_tests:
+        - https://github.com/dev-sec/tests-ssh-hardening
+```
+
+`inspec_tests` accepts all values that `inspec exec profile` would expect. We support:
+
+* local directory eg. `/path/to/profile`
+* github url `https://github.com/dev-sec/tests-ssh-hardening`
+* Chef Supermarket `supermarket://hardening/ssh-hardening` (list all available profiles with `inspec supermarket profiles`)
+* Chef Compliance `compliance://base/ssh`
+
+The following example illustrates the usage in a `.kitchen.yml`
+
+```
+suites:
+  - name: contains_inspec
+    run_list:
+      - recipe[apt]
+      - recipe[yum]
+      - recipe[ssh-hardening]
+    verifier:
+      inspec_tests:
+        - https://github.com/dev-sec/tests-ssh-hardening
+  - name: supermarket
+    run_list:
+      - recipe[apt]
+      - recipe[yum]
+      - recipe[ssh-hardening]
+    verifier:
+      inspec_tests:
+        - supermarket://hardening/ssh-hardening
+  # before you are able to use the compliance plugin, you need to run
+  # insecure is only required if you use self-signed certificates
+  # $ inspec compliance login https://compliance.test --user admin --insecure --token ''
+  - name: compliance
+    run_list:
+      - recipe[apt]
+      - recipe[yum]
+      - recipe[ssh-hardening]
+    verifier:
+      inspec_tests:
+        - compliance://base/ssh
+```
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.

data/kitchen-inspec.gemspec

@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
   spec.bindir        = 'exe'
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
-  spec.add_dependency 'inspec', '>=0.20.0', '<1.0.0'
+  spec.add_dependency 'inspec', '>=0.22.0', '<1.0.0'
   spec.add_dependency 'test-kitchen', '~> 1.6'
   spec.add_development_dependency 'countloc', '~> 0.4'
   spec.add_development_dependency 'bundler', '~> 1.10'

data/lib/kitchen/verifier/inspec.rb

@@ -143,6 +143,7 @@ module Kitchen
           'logger' => logger,
           # pass-in sudo config from kitchen verifier
           'sudo' => config[:sudo],
+          'sudo_command' => config[:sudo_command],
           'host' => kitchen[:hostname],
           'port' => kitchen[:port],
           'user' => kitchen[:username],

data/lib/kitchen/verifier/inspec_version.rb

@@ -20,6 +20,6 @@
 module Kitchen
   module Verifier
     # Version string for InSpec Kitchen verifier
-    INSPEC_VERSION = '0.13.0'
+    INSPEC_VERSION = '0.14.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kitchen-inspec
 version: !ruby/object:Gem::Version
-  version: 0.13.0
+  version: 0.14.0
 platform: ruby
 authors:
 - Fletcher Nichol
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-05-10 00:00:00.000000000 Z
+date: 2016-05-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: inspec
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.22.0
     - - "<"
       - !ruby/object:Gem::Version
         version: 1.0.0
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.22.0
     - - "<"
       - !ruby/object:Gem::Version
         version: 1.0.0
@@ -172,7 +172,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.4.6
 signing_key: 
 specification_version: 4
 summary: A Test Kitchen Verifier for InSpec