Audit Cookbook Define Which Attributes File to Use

If you want to use the node foo var1 attribute in the bar cookbook then the bar cookbook should depend on the foo cookbook and not the other way round. Explicitly pass necessary data recommended Any data added to the nodeauditattributes hash will be passed as individual InSpec attributes.

Detect Correct With Chef Automate And The Audit Cookbook Chef Blog Chef

The configuration of the audit cookbook is done with attributes where you have to add the Chef Compliance server its token and the profile to check against.

. Prepare a waiver YAML file and use your Chef Infra cookbooks to deliver the file to your converging node for example using cookbook_file or remote_file. Use the cookbook_file resource to transfer files from a sub-directory of COOKBOOK_NAMEfiles to a specified path located on a host that is running Chef Infra Client. The file resource allows us to create and optionally define content for files on our systems.

When the interval enabled attribute is true we create a simple file named report_timingjson and read the create time of that file to calculate whether or not the profile is overdue to run. When the cookbook attributes take precedence over the default attributes Chef Infra Client applies those new settings and values during a Chef Infra. Defaultcookbookattribute original_value And then in a recipe you can mutate the node object by calling nodeset.

Get rid of the depends bar in foometadatarb and create barmetadatarb. Attributes that are defined in attribute files are first loaded according to cookbook order. Since this could change from cookbook to cookbook it makes sense to add the attributes to the Atom cookbook attributesdefaultrb.

You have the cookbook dependency reversed. For each cookbook attributes in the defaultrb file are loaded first and then additional attribute files if present are loaded in lexical sort order. It also allows us to define ownership modes which is what Ill need to do to resolve the issue my audit uncovered.

The file is selected according to file specificity which allows different source files to be used based on the hostname host platform operating system distro or as appropriate or platform version. Nodeauditdbacklog - backlog size default is 320 should be larger for busy systems. To that end Ive created a new recipe in my example cookbook.

There are two primary ways to pass Chef data to the InSpec run via the audit cookbook. If youre using one of the default rulesets set the correct attribute based on the ruleset desired one of. Nodesetcookbookattribute new_value This will save the current node state and persist.

This provides a clean interface between the Chef run and InSpec profile allowing for easy assignment. Show activity on this post. Each time you change a cookbook you must raise the version of the cookbook that is in its metadatarb.

Nodeauditdruleset - ruleset to use either default the default if unset or one of the provided examples. All cookbooks are versioned in the cookbooks metadatarb file. Chef incorporates the attributes into the node object and any recipe can use the attribute values by referencing the attribute.

It must be in the cookbooks attributes folder. You are correct in your attribute file define something like this note its common practice to namespace attributes after the cookbook. If you have chosen to configure compliance scans and kept the audit cookbook information in the policy file push the policy opsworks-demo to your server.

Then set the attribute default audit waiver_file to the location of the waiver file on. An attribute file is a Ruby application that assigns values to one or more attributes. You can define values separately from recipes by including an attribute file in your cookbook.

To enable interval reporting just set the defaultauditintervalenabled attribute to true and set your preferred timing using the defaultauditintervaltime attribute.

Github Chef Boneyard Audit Audit Cookbook For Chef Compliance

Detect Correct With Chef Automate And The Audit Cookbook Chef Blog Chef

Detect Correct With Chef Automate And The Audit Cookbook Chef Blog Chef