Imran Iqbal
5e2fa1a5e6
Merge pull request #187 from baby-gnu/ci/validate_map.jinja
Ci/validate map.jinja
4 years ago
Daniel Dehennin
e4ab335077
feat(map): generate a YAML file to validate `map.jinja`
We provide a new `_mapdata` state which generate a
`/tmp/salt_mapdata_dump.yaml` to be validated by `Inspec`.
4 years ago
Daniel Dehennin
70389b5964
ci(kitchen): execute `_mapdata` state
4 years ago
Daniel Dehennin
0eafbd945c
test(inspec): verify `map.jinja` dump
We store validated `map.jinja` dump under the profile `files`
directory to access them with `inspec.profile.file('filename')` to
validate the content of the generated mapdata file.
The YAML files contain a value specific to each minion, its hostname,
so we use string format to expand `%{hostname}`.
The `default` inspec profile need to depends on `share` to access the
`system` and `salt_minion` libraries.
4 years ago
Daniel Dehennin
a8d61f4307
test(inspec): share library to access some minion informations
The `system.hostname` return the result of either `hostname -s` or
`hostnamectl --static` depending of the availability of each command.
The `system.platform` return a hash with tweaked `inspec.platform`
values:
- `system.platform[:family]` provides a family name for Arch
- `system.platform[:name]` modify `amazon` to `amazonlinux`
- `system.platform[:release]` tweak for Arch and Amazon Linux:
- `Arch` is always `base-later`
- `Amazon Linux` release `2018` became `1`
- `system.platform[:finger]` is just the concatenation of the name and
the first release number (except for Ubuntu which gives `20.04` for
example)
4 years ago
semantic-release-bot
6a882026d2
chore(release): 1.2.2 [skip ci]
## [1.2.2](https://github.com/saltstack-formulas/openssh-formula/compare/v1.2.1...v1.2.2 ) (2020-07-30)
### Bug Fixes
* **jinja:** omit_ip_address don't work on some platform ([b2d38ae
](b2d38aec9b
))
4 years ago
Imran Iqbal
27afecb96a
Merge pull request #188 from baby-gnu/fix/omit-ip-address-on-older-platform
fix(jinja): omit_ip_address don't work on some platform
4 years ago
Daniel Dehennin
b2d38aec9b
fix(jinja): omit_ip_address don't work on some platform
It apprears that the
`if not (omit_ip_address is sameas true or host in omit_ip_address)`
always returns `True` on older Jinja platforms:
- default-ubuntu-1604-3000-3-py2
- default-ubuntu-1604-2019-2-py3
- default-amazonlinux-1-2019-2-py2
Each part of the `or` conditional need to be surrounded by parenthesis.
4 years ago
semantic-release-bot
156a8a2cd8
chore(release): 1.2.1 [skip ci]
## [1.2.1](https://github.com/saltstack-formulas/openssh-formula/compare/v1.2.0...v1.2.1 ) (2020-07-21)
### Bug Fixes
* **known_hosts:** dig package does not install on Arch ([0b667cb
](0b667cbcf5
))
### Continuous Integration
* **kitchen:** execute `openssh.known_hosts` state ([644e616
](644e61651d
))
### Tests
* **config_spec:** verify /etc/ssh/ssh_known_hosts ([06ef24b
](06ef24b8e1
))
4 years ago
Imran Iqbal
9c8b77ca24
Merge pull request #185 from baby-gnu/feature/test-known_hosts
test(config_spec): verify the generation of /etc/ssh/ssh_known_hosts
4 years ago
Daniel Dehennin
0b667cbcf5
fix(known_hosts): dig package does not install on Arch
The conditionnal on `ensure dig is available` does not work on Arch
since the `which` command does not exists. As the `pkg.installed`
state is idempotent, we don't need an extra check which depends on the
environment.
The `dig` utility is provided by `bind` on Arch and no more by
`bind-tools`.
4 years ago
Daniel Dehennin
644e61651d
ci(kitchen): execute `openssh.known_hosts` state
4 years ago
Daniel Dehennin
06ef24b8e1
test(config_spec): verify /etc/ssh/ssh_known_hosts
4 years ago
semantic-release-bot
0c064b15bf
chore(release): 1.2.0 [skip ci]
# [1.2.0](https://github.com/saltstack-formulas/openssh-formula/compare/v1.1.0...v1.2.0 ) (2020-07-20)
### Bug Fixes
* **inspec:** the package name for Arch is openssh ([6b7d8df
](6b7d8df156
))
* **jinja:** encode context as json ([7a1f619
](7a1f6199d0
))
### Features
* **ci:** update travis and kitchen to latest formula standards ([7752132
](7752132275
))
### Styles
* **libtofs.jinja:** use Black-inspired Jinja formatting [skip ci] ([9d8228d
](9d8228d9db
))
4 years ago
Imran Iqbal
06f5f7ef2a
Merge pull request #182 from baby-gnu/feature/update-ci-to-latest-standards
feat(ci): update ci to latest standards
4 years ago
Daniel Dehennin
6b7d8df156
fix(inspec): the package name for Arch is openssh
For Arch, Inspec define `platform[:family]` as `linux` and
`platform[:name]` as `arch`.
4 years ago
Daniel Dehennin
7a1f6199d0
fix(jinja): encode context as json
Or with python2 the template are generated with `u'<string>'`.
4 years ago
Daniel Dehennin
7752132275
feat(ci): update travis and kitchen to latest formula standards
Import .travis.yml and kitchen.yml from `template-formula`.
4 years ago
Imran Iqbal
9d8228d9db
style(libtofs.jinja): use Black-inspired Jinja formatting [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/237
4 years ago
semantic-release-bot
3c23c42171
chore(release): 1.1.0 [skip ci]
# [1.1.0](https://github.com/saltstack-formulas/openssh-formula/compare/v1.0.0...v1.1.0 ) (2020-07-17)
### Bug Fixes
* **inspec:** make rubocop happy ([2cfb5a7
](2cfb5a74f3
))
### Features
* **test:** remove serverspec files ([049db2b
](049db2bc8e
))
4 years ago
Imran Iqbal
2d1804d7ce
Merge pull request #181 from baby-gnu/fix/make-rubocop-happy
fix(test): make rubocop happy
4 years ago
Daniel Dehennin
2cfb5a74f3
fix(inspec): make rubocop happy
* test/integration/default/controls/services_spec.rb: favor modifier
if usage when having a single-line body.
* test/integration/default/controls/config_spec.rb: add frozen string
literal comment.
* test/integration/default/controls/packages_spec.rb: ditoo.
* test/integration/default/controls/services_spec.rb: ditoo.
4 years ago
Daniel Dehennin
049db2bc8e
feat(test): remove serverspec files
All tests provided by Serverspec are covered by Inspec.
4 years ago
semantic-release-bot
d0d2864d13
chore(release): 1.0.0 [skip ci]
# [1.0.0](https://github.com/saltstack-formulas/openssh-formula/compare/v0.43.3...v1.0.0 ) (2020-07-17)
### Continuous Integration
* **kitchen:** use `saltimages` Docker Hub where available [skip ci] ([bb1ac71
](bb1ac71786
))
### Features
* **templates:** don't get openssh pillars in templates ([cb6e48f
](cb6e48feaa
))
### BREAKING CHANGES
* **templates:** Minimum Salt version support is now `2019.2` in line
with official upstream support; also use of the `traverse` Jinja filter.
4 years ago
Imran Iqbal
cf4046d999
Merge pull request #180 from baby-gnu/feature/pass-context-to-templates
feat(templates): don't get openssh pillars in templates
4 years ago
Daniel Dehennin
cb6e48feaa
feat(templates): don't get openssh pillars in templates
We pass the pillars via the template engine context, this avoid the
need to load `map.jinja` from the templates themselves and recude the
number of `pillar.get` calls.
* openssh/config.sls (sshd_config): pass `sshd_config` in the
context.
(ssh_config): pass `ssh_config` in the context.
* openssh/files/default/ssh_config: remove `map.jinja` import since
it's now in the context.
* openssh/files/default/sshd_config: ditoo.
* openssh/known_hosts.sls: pass `known_hosts` in the context.
* openssh/files/default/ssh_known_hosts: use `known_hosts` from the
context instead of calling `pillar.get` several times.
BREAKING CHANGE: Minimum Salt version support is now `2019.2` in line
with official upstream support; also use of the `traverse` Jinja filter.
4 years ago
Imran Iqbal
24049f3aab
chore(gemfile.lock): update to latest gem versions (2020-W27) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/235
4 years ago
Imran Iqbal
10dcec8676
chore(gemfile.lock): update to latest gem versions (2020-W26) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/233
4 years ago
Imran Iqbal
807a193f0e
chore(gemfile.lock): update to latest gem versions (2020-W25) [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/229
4 years ago
Imran Iqbal
bb1ac71786
ci(kitchen): use `saltimages` Docker Hub where available [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/223
4 years ago
Imran Iqbal
03bd059978
chore(gemfile.lock): update to latest gem versions [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/222
4 years ago
Imran Iqbal
b2e122933f
chore(gemfile.lock): update to latest gem versions [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/221
4 years ago
semantic-release-bot
f2042f42f2
chore(release): 0.43.3 [skip ci]
## [0.43.3](https://github.com/saltstack-formulas/openssh-formula/compare/v0.43.2...v0.43.3 ) (2020-06-04)
### Bug Fixes
* **config_ini:** stop failing after the first application ([c7777c7
](c7777c74b2
))
4 years ago
Imran Iqbal
857c7c0cdb
Merge pull request #179 from OrangeDog/patch-2
fix(config_ini): stop failing after the first application
4 years ago
James Howe
c7777c74b2
fix(config_ini): stop failing after the first application
The module is called `ini_manage` but the state prefix is `ini`.
4 years ago
semantic-release-bot
54d75b5b8f
chore(release): 0.43.2 [skip ci]
## [0.43.2](https://github.com/saltstack-formulas/openssh-formula/compare/v0.43.1...v0.43.2 ) (2020-06-04)
### Bug Fixes
* **config_ini:** ensure the tab replacement happens before the edit ([b26b99d
](b26b99d3d0
)), closes [#162 ](https://github.com/saltstack-formulas/openssh-formula/issues/162 )
* **libtofs:** “files_switch” mess up the variable exported by “map.jinja” [skip ci] ([053b787
](053b7879fd
))
### Continuous Integration
* **gemfile:** remove unused `rspec-retry` gem [skip ci] ([5be1c1f
](5be1c1f47c
))
* **gemfile.lock:** add to repo with updated `Gemfile` [skip ci] ([e53bcc1
](e53bcc14dc
))
* **kitchen+travis:** remove `master-py2-arch-base-latest` [skip ci] ([0977485
](0977485b6b
))
* **travis:** add notifications => zulip [skip ci] ([597aeb5
](597aeb5861
))
* **workflows/commitlint:** add to repo [skip ci] ([fa6c65b
](fa6c65b852
))
4 years ago
James Howe
b26b99d3d0
fix(config_ini): ensure the tab replacement happens before the edit
Otherwise #162 can still happen
4 years ago
Imran Iqbal
bfde73f8e3
chore(gemfile.lock): update to latest gem versions [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/202
4 years ago
Imran Iqbal
597aeb5861
ci(travis): add notifications => zulip [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/191
4 years ago
Imran Iqbal
aac36fa49b
chore(codeowners): update `semantic-release` related files [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/174
4 years ago
Imran Iqbal
c973577392
chore(codeowners): add to repo [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/173
4 years ago
Imran Iqbal
fa6c65b852
ci(workflows/commitlint): add to repo [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/172
4 years ago
Imran Iqbal
0977485b6b
ci(kitchen+travis): remove `master-py2-arch-base-latest` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/167
4 years ago
Imran Iqbal
e53bcc14dc
ci(gemfile.lock): add to repo with updated `Gemfile` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/163
4 years ago
Imran Iqbal
81c716ea29
chore(rubocop): use org-wide standard settings for `Metrics/BlockLength` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/158
4 years ago
Imran Iqbal
77c9605e8b
chore(gitignore): update from the `template-formula` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/132
4 years ago
Imran Iqbal
053b7879fd
fix(libtofs): “files_switch” mess up the variable exported by “map.jinja” [skip ci]
* Checked using https://github.com/myii/ssf-formula/pull/131
4 years ago
Imran Iqbal
928f5ec89a
chore(rubocop): move `LineLength` cop from `Metrics` to `Layout` [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/129
4 years ago
Imran Iqbal
5be1c1f47c
ci(gemfile): remove unused `rspec-retry` gem [skip ci]
* Automated using https://github.com/myii/ssf-formula/pull/126
4 years ago
semantic-release-bot
fecc777d23
chore(release): 0.43.1 [skip ci]
## [0.43.1](https://github.com/saltstack-formulas/openssh-formula/compare/v0.43.0...v0.43.1 ) (2020-02-07)
### Continuous Integration
* **gemfile:** update for Vagrant testing [skip ci] ([7257ade
](7257adefee
))
* **kitchen:** avoid using bootstrap for `master` instances [skip ci] ([ddbc3b2
](ddbc3b228b
))
### Tests
* **packages_spec:** prevent control for `bsd` family ([fe1af09
](fe1af098b3
))
4 years ago