kitchen.yml

---
provisioner:
  deprecations_as_errors: false # TODO: ec2-tags-ohai-plugin uses ohai cookbook
  multiple_converge: 2  # The second converge here is to pass specefic tests that need Splunk to be restarted
  chef_license: accept
  data_bags_path: test/integration/data_bags
  client_rb:
    environment: _default
    log_level: :debug
  attributes:
    chef-vault:
      databag_fallback: true
    splunk:
      accept_license: true
      enable_ssl: false
      ssl_options:
        enableSplunkWebSSL: 0
        httpport: 8000
        startwebserver: 1
      web_port: 8000

verifier: inspec

platforms:
  - name: amazonlinux-2
  - name: centos-7
  - name: centos-stream-8
  - name: debian-9
  - name: debian-10
  - name: ubuntu-18.04
  - name: ubuntu-20.04
  - name: opensuse-leap-15

suites:
  - name: client
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        accept_license: true

  - name: client-runas-splunk
    run_list:
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        server:
          runasroot: false
        is_server: false
        accept_license: true

  - name: uninstall-forwarder
    run_list:
      - recipe[test::uninstall_forwarder]
    attributes:
      splunk:
        accept_license: true

  - name: client-inputs-outputs
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        accept_license: true
        outputs_conf:
          sslCommonNameToCheck: sslCommonName
          sslCertPath: $SPLUNK_HOME/etc/certs/cert.pem
          sslPassword: password
          sslRootCAPath: $SPLUNK_HOME/etc/certs/cacert.pem
          sslVerifyServerCert: false
        inputs_conf:
          host: localhost
          ports:
            - port_num: 123123
              config:
                connection_host: dns
                sourcetype: syslog
                source: tcp:123123

  - name: server-runas-root
    lifecycle:
      post_converge:
        - local: sleep 120
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        is_server: true
        accept_license: true

  - name: server-runas-splunk
    lifecycle:
      post_converge:
        - local: sleep 120
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        server:
          runasroot: false
        is_server: true
        accept_license: true

  - name: server-cluster-master
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        is_server: true
        accept_license: true
        clustering:
          enabled: true
          mode: master
          replication_factor: 2
          search_factor: 1

  - name: server-shdeployer
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk]
    attributes:
      splunk:
        is_server: true
        accept_license: true
        shclustering:
          enabled: true
          mode: deployer
        web_port: 8000
    verifier:
      root_path: /opt/verifier
      sudo: false

  - name: server-shcluster-member
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        is_server: true
        accept_license: true
        shclustering:
          enabled: true
        web_port: 8000

  - name: disabled
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
      - recipe[chef-splunk::disabled]
    attributes:
      splunk:
        is_server: true
        accept_license: true
        disabled: true

  - name: upgrade-server
    run_list:
      - recipe[test::file_locking_check]
      - recipe[test::upgrade]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        upgrade_enabled: true
        accept_license: true
        is_server: true

  - name: upgrade-client
    run_list:
      - recipe[test::file_locking_check]
      - recipe[test::upgrade]
      - recipe[chef-splunk::default]
    attributes:
      splunk:
        upgrade_enabled: true
        accept_license: true
        is_server: false

  - name: server-resources
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
      - recipe[test::splunk_app]
      - recipe[test::splunk_index]
    attributes:
      splunk:
        accept_license: true
        is_server: true

  - name: client-resources
    run_list:
      - recipe[test::file_locking_check]
      - recipe[chef-splunk::default]
      - recipe[test::splunk_app]
      - recipe[test::splunk_monitor]
    attributes:
      splunk:
        accept_license: true
        is_server: false