chef automate workflow demo
TRANSCRIPT
control 'cis-3.1' doimpact 0.7title 'Set Daemon umask’desc 'Set the default umask for all processes
started at boot time.'
describe file('/etc/sysconfig/init') doits('content') {should match 'umask 027'}
endend
InSpec Testing Framework
Compliance as Code
Compliance as Code
Compliance
Security
DevOps
How do we write and test our intended change?
Infrastructure as Code
On Linux based OSes:package "apache2" do
action :installend
template ”/var/www/index.html" dosource ”index.html.erb”mode "0644"
end
service "apache2" doaction [ :enable, :start ]
end
One path for change
Test the ArtifactsTest the Code
VERIFY BUILD ACCEPTANCE REHEARSAL DELIVEREDUNION
SubmitChange
One path for change
VERIFY BUILD ACCEPTANCE REHEARSAL DELIVEREDUNIONAPPROVE DELIVER
Lint
Syntax
Unit
Security
Quality
Publish
Lint
Syntax
Unit
Provision
Deploy
Smoke
Functional
Provision
Deploy
Smoke
Functional
Provision
Deploy
Smoke
Functional
Provision
Deploy
Smoke
Functional
SubmitChange
Does thiscode
changelook good?
Do we want
to ship this?
One path for change
VERIFY BUILD ACCEPTANCE REHEARSAL DELIVEREDUNIONAPPROVE DELIVER
Lint
Syntax
Unit
Security
Quality
Publish
Lint
Syntax
Unit
SubmitChange
Does thiscode
changelook good?
One path for change
VERIFY BUILD ACCEPTANCE REHEARSAL DELIVEREDUNIONAPPROVE DELIVER
Lint
Syntax
Unit
Security
Quality
Publish
Lint
Syntax
Unit
Provision
Deploy
Smoke
Functional
SubmitChange
Does thiscode
changelook good?
Do we want
to ship this?
Shared Workflow
Subscription
Includes:• Premium Features
• 24x7 Support
• Supported Content
Infrastructure Automation Application Automation Compliance Automation
Workflow Visibility ComplianceH
igh Availability
Content (Chef Cookbooks, Habitat Plans, Compliance Profiles)
PremiumFeatures
Open SourceSoftware
Hands-On Training Tracks & Rooms
Beginner class – remains here in Launch Control
Intermediate class – Uptempo (EG 2) – Los Angeles
Habitat class – Quantum Force 2 building – Arsenal
Fin