.kitchen.yml

---
driver:
  name: ec2
  instance_type: m3.medium
  aws_ssh_key_id: mattray-apac
  region: ap-southeast-1
  associate_public_ip: true
  interface: public
  tags:
    Name: inspec-aws-exceptions-cis
    created-by: "test-kitchen"

transport:
  ssh_key: ~/.ssh/mattray-apac

provisioner:
  name: chef_zero
  always_update_cookbooks: true
  deprecations_as_errors: true
  product_name: chef
  product_version: 13.8.5

verifier:
  name: inspec

platforms:
  - name: rhel-7.0
  - name: rhel-7.1
  - name: rhel-7.2
  - name: rhel-7.3
  - name: rhel-7.4
  - name: rhel-7.5

suites:
  - name: base
    run_list:
      - recipe[cis-el7-l1-hardening::enable_sudo_no_tty]
    verifier:
      inspec_tests:
        - .
  - name: upgrade
    run_list:
      - recipe[packages]
      - recipe[cis-el7-l1-hardening::enable_sudo_no_tty]
    attributes:
      packages-cookbook:
        audit: 'upgrade'
    verifier:
      inspec_tests:
        - .