ufw-formula/kitchen.yml

# -*- coding: utf-8 -*-
# vim: ft=yaml
---
# For help on this file's format, see https://kitchen.ci/
driver:
  name: docker
  use_sudo: false
  privileged: true
  run_command: /lib/systemd/systemd

# Make sure the platforms listed below match up with
# the `env.matrix` instances defined in `.travis.yml`
platforms:
  ## SALT `develop`
  - name: debian-9-develop-py3
    driver:
      image: netmanagers/salt-develop-py3:debian-9
      provision_command:
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
  - name: ubuntu-1804-develop-py3
    driver:
      image: netmanagers/salt-develop-py3:ubuntu-18.04
      provision_command:
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
  - name: centos-7-develop-py3
    driver:
      image: netmanagers/salt-develop-py3:centos-7
      provision_command:
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
  - name: fedora-29-develop-py3
    driver:
      image: netmanagers/salt-develop-py3:fedora-29
      provision_command:
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
  - name: opensuse-leap-15-develop-py3
    driver:
      image: netmanagers/salt-develop-py3:opensuse-leap-15
      provision_command:
        - curl -o bootstrap-salt.sh -L https://bootstrap.saltstack.com
        - sh bootstrap-salt.sh -XdPbfrq -x python3 git develop
      run_command: /usr/lib/systemd/systemd

  ## SALT 2019.2
  - name: debian-9-2019-2-py3
    driver:
      image: netmanagers/salt-2019.2-py3:debian-9
  - name: ubuntu-1804-2019-2-py3
    driver:
      image: netmanagers/salt-2019.2-py3:ubuntu-18.04
  - name: centos-7-2019-2-py3
    driver:
      image: netmanagers/salt-2019.2-py3:centos-7
  - name: fedora-29-2019-2-py3
    driver:
      image: netmanagers/salt-2019.2-py3:fedora-29
  - name: opensuse-leap-15-2019-2-py3
    driver:
      image: netmanagers/salt-2019.2-py3:opensuse-leap-15
      run_command: /usr/lib/systemd/systemd

  ## SALT 2018.3
  - name: debian-9-2018-3-py2
    driver:
      image: netmanagers/salt-2018.3-py2:debian-9
  - name: ubuntu-1604-2018-3-py2
    driver:
      image: netmanagers/salt-2018.3-py2:ubuntu-16.04
  - name: centos-7-2018-3-py2
    driver:
      image: netmanagers/salt-2018.3-py2:centos-7
  - name: fedora-29-2018-3-py2
    driver:
      image: netmanagers/salt-2018.3-py2:fedora-29
  # TODO: Use this when fixed instead of `opensuse-leap-42`
  # Ref: https://github.com/netmanagers/salt-image-builder/issues/2
  # - name: opensuse-leap-15-2018-3-py2
  #   driver:
  #     image: netmanagers/salt-2018.3-py2:opensuse-leap-15
  #     run_command: /usr/lib/systemd/systemd
  - name: opensuse-leap-42-2018-3-py2
    driver:
      image: netmanagers/salt-2018.3-py2:opensuse-leap-42
      run_command: /usr/lib/systemd/systemd

  ## SALT 2017.7
  - name: debian-8-2017-7-py2
    driver:
      image: netmanagers/salt-2017.7-py2:debian-8
  - name: ubuntu-1604-2017-7-py2
    driver:
      image: netmanagers/salt-2017.7-py2:ubuntu-16.04
  - name: centos-6-2017-7-py2
    driver:
      image: netmanagers/salt-2017.7-py2:centos-6
      run_command: /sbin/init
  - name: fedora-28-2017-7-py2
    driver:
      image: netmanagers/salt-2017.7-py2:fedora-28
  - name: opensuse-leap-42-2017-7-py2
    driver:
      image: netmanagers/salt-2017.7-py2:opensuse-leap-42
      run_command: /usr/lib/systemd/systemd

provisioner:
  name: salt_solo
  log_level: info
  salt_install: none
  require_chef: false
  formula: ufw
  salt_copy_filter:
    - .kitchen
    - .git
  state_top:
    base:
      '*':
        - ufw
  pillars:
    top.sls:
      base:
        '*':
          - ufw
    ufw.sls:
      ufw:
        enabled: True
        settings:
          loglevel: 'low'
        applications:
          MySQL:
            comment: Allow MySQL
          Postgresql:
            limit: True
            comment: Limit Postgresql
          SSH223:
            deny: True
            comment: Deny Webscale SSH
          '*':
            deny: True
            from_addr: 10.0.0.0/8
        services:
          '*':
            deny: True
            from_addr:
              - 10.0.0.1
              - 10.0.0.2
          '22':
            protocol: tcp
            limit: True
            comment: Limit SSH
          '80':
            protocol: tcp
            deny: True
            comment: Deny HTTP
          '443':
            protocol: tcp
            comment: Allow HTTPS

verifier:
  # https://www.inspec.io/
  name: inspec
  sudo: true
  # cli, documentation, html, progress, json, json-min, json-rspec, junit
  reporter:
    - cli
  inspec_tests:
    - path: test/integration/default

suites:
  - name: default