Salt/openssh-formula
0
0
Fork 0
mirror of https://github.com/saltstack-formulas/openssh-formula.git synced 2026-07-15 08:37:48 +02:00
Code Issues Activity
395 Commits 3 Branches 29 Tags
8cb31c6967f736f2068ec55911bd177f5ad6ee87
Commit Graph
395 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Dehennin 8cb31c6967 test(inspec): no more need to mangle mapdata for hostname 
We force the hostname in `kitchen` so the `_mapdata` files can be
static.
 2020-09-08 21:23:21 +02:00
Daniel Dehennin 208f87380c ci(kitchen): force the hostname of the containers 2020-09-08 18:25:35 +02:00
semantic-release-bot b49824b343 chore(release): 2.0.2 [skip ci] 
## [2.0.2](https://github.com/saltstack-formulas/openssh-formula/compare/v2.0.1...v2.0.2) (2020-08-26)

### Tests

* **inspec:** display proper diff when `_mapdata` mismatch ([1c99556](https://github.com/saltstack-formulas/openssh-formula/commit/1c99556695a633c706d852dd20cfcc25397eba35))
v2.0.2 		2020-08-26 14:40:48 +00:00
Imran IqbalandGitHub a472db6913 Merge pull request #192 from baby-gnu/test/mapdata-proper-inspec-diff 
test(inspec): display proper diff when `_mapdata` mismatch
 2020-08-26 15:29:50 +01:00
Daniel Dehennin 1c99556695 test(inspec): display proper diff when _mapdata mismatch 
The use of `eq` instead of `include` premits to have a nice diff after
the `expected/got` oneliners.
 2020-08-26 10:06:13 +02:00
semantic-release-bot 34a9c8f703 chore(release): 2.0.1 [skip ci] 
## [2.0.1](https://github.com/saltstack-formulas/openssh-formula/compare/v2.0.0...v2.0.1) (2020-08-21)

### Bug Fixes

* **map:** `path_join` can be used only for local file access ([3845d5f](https://github.com/saltstack-formulas/openssh-formula/commit/3845d5ff618f936700d5180ce9ff11ba1b037bcc))
v2.0.1 		2020-08-21 16:41:46 +00:00
Javier BértoliandGitHub 27c527a172 Merge pull request #190 from baby-gnu/fix/no-path_join-for-salt-url 
fix(map): `path_join` can be used only for local file access
 2020-08-21 13:34:11 -03:00
Daniel Dehennin 3845d5ff61 fix(map): path_join can be used only for local file access 
On windows machines, the `path_join` build wrong URL by using
backslash as separator.

URL used for fileserver access must use only slashes `/`.
 2020-08-21 16:00:56 +02:00
semantic-release-bot b32ec9819c chore(release): 2.0.0 [skip ci] 
# [2.0.0](https://github.com/saltstack-formulas/openssh-formula/compare/v1.3.1...v2.0.0) (2020-08-01)

### Features

* **map:** `config.get` lookups from configurable roots ([ad4385b](https://github.com/saltstack-formulas/openssh-formula/commit/ad4385b077b1fe2b22ab5888ab6b598cb8478658))
* **map:** update to v4 “map.jinja” ([df477b2](https://github.com/saltstack-formulas/openssh-formula/commit/df477b25c27c521610a8809528ebcba038db673e))
v2.0.0 		2020-08-01 13:59:26 +00:00
Imran IqbalandGitHub db67ce6f42 Merge pull request #186 from baby-gnu/feature/v4-map.jinja 
feat(map): update to v4 and add config.get lookup from multiple roots
 2020-08-01 14:51:21 +01:00
Imran Iqbal a0af21a996 chore: add breaking change message for new map.jinja 
BREAKING CHANGE: `map.jinja` has been upgraded from using `pillar.get`
to `config.get`.
 2020-08-01 14:26:07 +01:00
Daniel Dehennin ad4385b077 feat(map): config.get lookups from configurable roots 
We avoid compatibility break with user pillars by looking up
configuration values using `config.get` in configurable roots.

We provide a new parameter `map_jinja:config_get_roots` in the formula
`parameters/defaults.yaml`to retrives values not only from
`tplroot=openssh` but from `sshd_config` and `ssh_config` too.

We need to update the `_mapdata` reference files to include the new
`map_jinja:config_get_roots`.
 2020-07-31 12:59:33 +02:00
Daniel Dehennin df477b25c2 feat(map): update to v4 “map.jinja” 
The `map.jinja` now exports a single variable called `mapdata`.

We extract the `openssh`, `sshd_config` and `ssh_config` from it to
minimize the changes to `.sls` files.
 2020-07-31 10:54:40 +02:00
semantic-release-bot a8cd7370df chore(release): 1.3.1 [skip ci] 
## [1.3.1](https://github.com/saltstack-formulas/openssh-formula/compare/v1.3.0...v1.3.1) (2020-07-31)

### Bug Fixes

* **inspec:** use the name `_mapdata` everywhere for coherency ([14e843e](https://github.com/saltstack-formulas/openssh-formula/commit/14e843ec2b756923e13daf21a0dabe480e289339))
v1.3.1 		2020-07-31 06:19:53 +00:00
Imran IqbalandGitHub 94a12d86d9 Merge pull request #189 from baby-gnu/fix/rename-mapdata-test-directory 
fix(inspec): use the name `_mapdata` everywhere for coherency
 2020-07-31 07:11:50 +01:00
Daniel Dehennin 14e843ec2b fix(inspec): use the name _mapdata everywhere for coherency 2020-07-31 08:01:27 +02:00
semantic-release-bot 9f3c2f2686 chore(release): 1.3.0 [skip ci] 
# [1.3.0](https://github.com/saltstack-formulas/openssh-formula/compare/v1.2.2...v1.3.0) (2020-07-30)

### Continuous Integration

* **kitchen:** execute `_mapdata` state ([70389b5](https://github.com/saltstack-formulas/openssh-formula/commit/70389b5964100cc964d3031dd652f547461a9ab2))

### Features

* **map:** generate a YAML file to validate `map.jinja` ([e4ab335](https://github.com/saltstack-formulas/openssh-formula/commit/e4ab3350773b79f84b6c36042d2015bd21bd9681))

### Tests

* **inspec:** share library to access some minion informations ([a8d61f4](https://github.com/saltstack-formulas/openssh-formula/commit/a8d61f43072485b8da289442b675fb84be93cf4d))
* **inspec:** verify `map.jinja` dump ([0eafbd9](https://github.com/saltstack-formulas/openssh-formula/commit/0eafbd945c1ccaa89eee305ac2f02adf8797a733))
v1.3.0 		2020-07-30 23:39:55 +00:00
Imran IqbalandGitHub 5e2fa1a5e6 Merge pull request #187 from baby-gnu/ci/validate_map.jinja 
Ci/validate map.jinja
 2020-07-31 00:31:34 +01:00
Daniel Dehennin e4ab335077 feat(map): generate a YAML file to validate map.jinja 
We provide a new `_mapdata` state which generate a
`/tmp/salt_mapdata_dump.yaml` to be validated by `Inspec`.
 2020-07-30 22:05:24 +02:00
Daniel Dehennin 70389b5964 ci(kitchen): execute _mapdata state 2020-07-30 22:02:10 +02:00
Daniel Dehennin 0eafbd945c test(inspec): verify map.jinja dump 
We store validated `map.jinja` dump under the profile `files`
directory to access them with `inspec.profile.file('filename')` to
validate the content of the generated mapdata file.

The YAML files contain a value specific to each minion, its hostname,
so we use string format to expand `%{hostname}`.

The `default` inspec profile need to depends on `share` to access the
`system` and `salt_minion` libraries.
 2020-07-30 22:00:18 +02:00
Daniel Dehennin a8d61f4307 test(inspec): share library to access some minion informations 
The `system.hostname` return the result of either `hostname -s` or
`hostnamectl --static` depending of the availability of each command.

The `system.platform` return a hash with tweaked `inspec.platform`
values:

- `system.platform[:family]` provides a family name for Arch
- `system.platform[:name]` modify `amazon` to `amazonlinux`
- `system.platform[:release]` tweak for Arch and Amazon Linux:
  - `Arch` is always `base-later`
  - `Amazon Linux` release `2018` became `1`
- `system.platform[:finger]` is just the concatenation of the name and
  the first release number (except for Ubuntu which gives `20.04` for
  example)
 2020-07-30 18:00:57 +02:00
semantic-release-bot 6a882026d2 chore(release): 1.2.2 [skip ci] 
## [1.2.2](https://github.com/saltstack-formulas/openssh-formula/compare/v1.2.1...v1.2.2) (2020-07-30)

### Bug Fixes

* **jinja:** omit_ip_address don't work on some platform ([b2d38ae](https://github.com/saltstack-formulas/openssh-formula/commit/b2d38aec9bd46a64965be0ecb66e7c912a1bf3c6))
v1.2.2 		2020-07-30 11:05:19 +00:00
Imran IqbalandGitHub 27afecb96a Merge pull request #188 from baby-gnu/fix/omit-ip-address-on-older-platform 
fix(jinja): omit_ip_address don't work on some platform
 2020-07-30 11:57:22 +01:00
Daniel Dehennin b2d38aec9b fix(jinja): omit_ip_address don't work on some platform 
It apprears that the

  `if not (omit_ip_address is sameas true or host in omit_ip_address)`

always returns `True` on older Jinja platforms:

- default-ubuntu-1604-3000-3-py2
- default-ubuntu-1604-2019-2-py3
- default-amazonlinux-1-2019-2-py2

Each part of the `or` conditional need to be surrounded by parenthesis.
 2020-07-30 12:25:34 +02:00
semantic-release-bot 156a8a2cd8 chore(release): 1.2.1 [skip ci] 
## [1.2.1](https://github.com/saltstack-formulas/openssh-formula/compare/v1.2.0...v1.2.1) (2020-07-21)

### Bug Fixes

* **known_hosts:** dig package does not install on Arch ([0b667cb](https://github.com/saltstack-formulas/openssh-formula/commit/0b667cbcf5e6560d3e92dc5d36b6649c629bfcd7))

### Continuous Integration

* **kitchen:** execute `openssh.known_hosts` state ([644e616](https://github.com/saltstack-formulas/openssh-formula/commit/644e61651d1cee2bc6ea9f7fdc5a7a51ffe342ff))

### Tests

* **config_spec:** verify /etc/ssh/ssh_known_hosts ([06ef24b](https://github.com/saltstack-formulas/openssh-formula/commit/06ef24b8e15a8c27433c639846d88d11835209ec))
v1.2.1 		2020-07-21 14:18:58 +00:00
Imran IqbalandGitHub 9c8b77ca24 Merge pull request #185 from baby-gnu/feature/test-known_hosts 
test(config_spec): verify the generation of /etc/ssh/ssh_known_hosts
 2020-07-21 15:11:44 +01:00
Daniel Dehennin 0b667cbcf5 fix(known_hosts): dig package does not install on Arch 
The conditionnal on `ensure dig is available` does not work on Arch
since the `which` command does not exists. As the `pkg.installed`
state is idempotent, we don't need an extra check which depends on the
environment.

The `dig` utility is provided by `bind` on Arch and no more by
`bind-tools`.
 2020-07-21 11:49:22 +02:00
Daniel Dehennin 644e61651d ci(kitchen): execute openssh.known_hosts state 2020-07-21 10:52:32 +02:00
Daniel Dehennin 06ef24b8e1 test(config_spec): verify /etc/ssh/ssh_known_hosts 2020-07-21 10:52:03 +02:00
semantic-release-bot 0c064b15bf chore(release): 1.2.0 [skip ci] 
# [1.2.0](https://github.com/saltstack-formulas/openssh-formula/compare/v1.1.0...v1.2.0) (2020-07-20)

### Bug Fixes

* **inspec:** the package name for Arch is openssh ([6b7d8df](https://github.com/saltstack-formulas/openssh-formula/commit/6b7d8df1560091f615e2138a56d4cb8e50b7ab5c))
* **jinja:** encode context as json ([7a1f619](https://github.com/saltstack-formulas/openssh-formula/commit/7a1f6199d0ed32d6df6249ec9ec3710614642e62))

### Features

* **ci:** update travis and kitchen to latest formula standards ([7752132](https://github.com/saltstack-formulas/openssh-formula/commit/7752132275db8fa1e3faa0f58974dbb5d44fb0f8))

### Styles

* **libtofs.jinja:** use Black-inspired Jinja formatting [skip ci] ([9d8228d](https://github.com/saltstack-formulas/openssh-formula/commit/9d8228d9dbd4d6affaf5084db26ba3f852724740))
v1.2.0 		2020-07-20 14:42:57 +00:00
Imran IqbalandGitHub 06f5f7ef2a Merge pull request #182 from baby-gnu/feature/update-ci-to-latest-standards 
feat(ci): update ci to latest standards
 2020-07-20 15:34:45 +01:00
Daniel Dehennin 6b7d8df156 fix(inspec): the package name for Arch is openssh 
For Arch, Inspec define `platform[:family]` as `linux` and
`platform[:name]` as `arch`.
 2020-07-20 16:28:28 +02:00
Daniel Dehennin 7a1f6199d0 fix(jinja): encode context as json 
Or with python2 the template are generated with `u'<string>'`.
 2020-07-20 16:28:22 +02:00
Daniel Dehennin 7752132275 feat(ci): update travis and kitchen to latest formula standards 
Import .travis.yml and kitchen.yml from `template-formula`.
 2020-07-20 16:28:19 +02:00
Imran Iqbal 9d8228d9db style(libtofs.jinja): use Black-inspired Jinja formatting [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/237
 2020-07-19 23:27:51 +01:00
semantic-release-bot 3c23c42171 chore(release): 1.1.0 [skip ci] 
# [1.1.0](https://github.com/saltstack-formulas/openssh-formula/compare/v1.0.0...v1.1.0) (2020-07-17)

### Bug Fixes

* **inspec:** make rubocop happy ([2cfb5a7](https://github.com/saltstack-formulas/openssh-formula/commit/2cfb5a74f32fa0f429b62a0c2053278859463418))

### Features

* **test:** remove serverspec files ([049db2b](https://github.com/saltstack-formulas/openssh-formula/commit/049db2bc8edbe224a6f47c623d7afe939e5b7992))
v1.1.0 		2020-07-17 18:54:57 +00:00
Imran IqbalandGitHub 2d1804d7ce Merge pull request #181 from baby-gnu/fix/make-rubocop-happy 
fix(test): make rubocop happy
 2020-07-17 19:47:32 +01:00
Daniel Dehennin 2cfb5a74f3 fix(inspec): make rubocop happy 
* test/integration/default/controls/services_spec.rb: favor modifier
  if usage when having a single-line body.

* test/integration/default/controls/config_spec.rb: add frozen string
  literal comment.

* test/integration/default/controls/packages_spec.rb: ditoo.

* test/integration/default/controls/services_spec.rb: ditoo.
 2020-07-17 16:31:46 +02:00
Daniel Dehennin 049db2bc8e feat(test): remove serverspec files 
All tests provided by Serverspec are covered by Inspec.
 2020-07-17 16:31:33 +02:00
semantic-release-bot d0d2864d13 chore(release): 1.0.0 [skip ci] 
# [1.0.0](https://github.com/saltstack-formulas/openssh-formula/compare/v0.43.3...v1.0.0) (2020-07-17)

### Continuous Integration

* **kitchen:** use `saltimages` Docker Hub where available [skip ci] ([bb1ac71](https://github.com/saltstack-formulas/openssh-formula/commit/bb1ac717862a2c659800c4163a0d56f035c08ed7))

### Features

* **templates:** don't get openssh pillars in templates ([cb6e48f](https://github.com/saltstack-formulas/openssh-formula/commit/cb6e48feaad2649fd008bf71071e5b803b59628e))

### BREAKING CHANGES

* **templates:** Minimum Salt version support is now `2019.2` in line
with official upstream support; also use of the `traverse` Jinja filter.
v1.0.0 		2020-07-17 12:23:42 +00:00
Imran IqbalandGitHub cf4046d999 Merge pull request #180 from baby-gnu/feature/pass-context-to-templates 
feat(templates): don't get openssh pillars in templates
 2020-07-17 13:15:17 +01:00
Daniel Dehennin cb6e48feaa feat(templates): don't get openssh pillars in templates 
We pass the pillars via the template engine context, this avoid the
need to load `map.jinja` from the templates themselves and recude the
number of `pillar.get` calls.

* openssh/config.sls (sshd_config): pass `sshd_config` in the
  context.
  (ssh_config): pass `ssh_config` in the context.

* openssh/files/default/ssh_config: remove `map.jinja` import since
  it's now in the context.

* openssh/files/default/sshd_config: ditoo.

* openssh/known_hosts.sls: pass `known_hosts` in the context.

* openssh/files/default/ssh_known_hosts: use `known_hosts` from the
  context instead of calling `pillar.get` several times.

BREAKING CHANGE: Minimum Salt version support is now `2019.2` in line
with official upstream support; also use of the `traverse` Jinja filter.
 2020-07-17 10:48:32 +02:00
Imran Iqbal 24049f3aab chore(gemfile.lock): update to latest gem versions (2020-W27) [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/235
 2020-07-06 14:29:42 +01:00
Imran Iqbal 10dcec8676 chore(gemfile.lock): update to latest gem versions (2020-W26) [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/233
 2020-06-26 12:46:01 +01:00
Imran Iqbal 807a193f0e chore(gemfile.lock): update to latest gem versions (2020-W25) [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/229
 2020-06-21 12:58:18 +01:00
Imran Iqbal bb1ac71786 ci(kitchen): use saltimages Docker Hub where available [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/223
 2020-06-15 16:57:41 +01:00
Imran Iqbal 03bd059978 chore(gemfile.lock): update to latest gem versions [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/222
 2020-06-15 15:08:39 +01:00
Imran Iqbal b2e122933f chore(gemfile.lock): update to latest gem versions [skip ci] 
* Automated using https://github.com/myii/ssf-formula/pull/221
 2020-06-05 22:18:19 +01:00
semantic-release-bot f2042f42f2 chore(release): 0.43.3 [skip ci] 
## [0.43.3](https://github.com/saltstack-formulas/openssh-formula/compare/v0.43.2...v0.43.3) (2020-06-04)

### Bug Fixes

* **config_ini:** stop failing after the first application ([c7777c7](https://github.com/saltstack-formulas/openssh-formula/commit/c7777c74b27192d8d04a038e56db312d176ef08a))
v0.43.3 		2020-06-04 17:14:28 +00:00