-
Notifications
You must be signed in to change notification settings - Fork 32
/
Copy pathkitchen.yml
109 lines (100 loc) · 2.88 KB
/
kitchen.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
---
driver:
name: vagrant
driver_config:
customize:
memory: 512
provisioner:
name: chef_zero
product_name: chef
# product_version: 13 # default is 'latest', uncomment to test old Chef version
verifier:
name: inspec
platforms:
- name: ubuntu-18.04
- name: ubuntu-20.04
- name: ubuntu-22.04
- name: debian-10
- name: debian-11
- name: centos-7
- name: centos-8
suites:
- name: lwrp_chain_create_default
run_list:
- recipe[iptables_ng_test::lwrp_chain_create_default]
- name: lwrp_chain_create_custom
run_list:
- recipe[iptables_ng_test::lwrp_chain_create_custom]
- name: lwrp_chain_create_if_missing
run_list:
- recipe[iptables_ng_test::lwrp_chain_create_if_missing]
- name: lwrp_chain_create_empty
run_list:
- recipe[iptables_ng_test::lwrp_chain_create_empty]
- name: lwrp_rule_create_default
run_list:
- recipe[iptables_ng_test::lwrp_rule_create_default]
- name: lwrp_rule_create_custom
run_list:
- recipe[iptables_ng_test::lwrp_rule_create_custom]
- name: lwrp_rule_create_custom_chain
run_list:
- recipe[iptables_ng_test::lwrp_rule_create_custom_chain]
- name: lwrp_rule_create_if_missing
run_list:
- recipe[iptables_ng_test::lwrp_rule_create_if_missing]
- name: lwrp_rule_delete
run_list:
- recipe[iptables_ng_test::lwrp_rule_delete]
- name: lwrp_rule_check_order
run_list:
- recipe[iptables_ng_test::lwrp_rule_check_order]
- name: default
run_list:
- recipe[iptables_ng_test::recipe_default]
attributes:
iptables-ng:
rules:
filter:
INPUT:
ssh:
rule: '--protocol tcp --dport 22 --match state --state NEW --jump ACCEPT'
ipv4_only:
rule: '--protocol tcp --source 1.2.3.4 --dport 123 --jump ACCEPT'
ip_version: 4
OUTPUT:
testrule:
rule: '--protocol icmp --jump ACCEPT'
FORWARD:
default: 'DROP [0:0]'
nat:
POSTROUTING:
nat_test:
rule: '--protocol tcp -j ACCEPT'
mangle:
FORWARD:
default: 'DROP [0:0]'
- name: install
run_list:
- recipe[iptables_ng_test::recipe_install]
- name: attribute_enabled_tables
run_list:
- recipe[iptables_ng_test::attribute_enabled_tables]
attributes:
iptables-ng:
enabled_tables: [ 'filter' ]
rules:
filter:
INPUT:
ssh:
rule: '--protocol tcp --dport 22 --match state --state NEW --jump ACCEPT'
ipv4_only:
rule: '--protocol tcp --source 1.2.3.4 --dport 123 --jump ACCEPT'
ip_version: 4
nat:
POSTROUTING:
nat_test:
rule: '--protocol tcp -j ACCEPT'
mangle:
FORWARD:
default: 'DROP [0:0]'