mirror of
https://github.com/inspec/inspec
synced 2024-12-11 22:02:47 +00:00
74 lines
2.1 KiB
Ruby
74 lines
2.1 KiB
Ruby
# encoding: utf-8
|
|
# author: Christoph Hartmann
|
|
# author: Dominik Richter
|
|
|
|
require 'uri'
|
|
require 'inspec/fetcher'
|
|
require 'inspec/errors'
|
|
|
|
# InSpec Target Helper for Chef Compliance
|
|
# reuses UrlHelper, but it knows the target server and the access token already
|
|
# similar to `inspec exec http://localhost:2134/owners/%base%/compliance/%ssh%/tar --user %token%`
|
|
module Compliance
|
|
class Fetcher < Fetchers::Url
|
|
name 'compliance'
|
|
priority 500
|
|
|
|
def self.resolve(target)
|
|
uri = if target.is_a?(String) && URI(target).scheme == 'compliance'
|
|
URI(target)
|
|
elsif target.respond_to?(:key?) && target.key?(:compliance)
|
|
URI("compliance://#{target[:compliance]}")
|
|
end
|
|
|
|
return nil if uri.nil?
|
|
|
|
# check if we have a compliance token
|
|
config = Compliance::Configuration.new
|
|
if config['token'].nil?
|
|
fail Inspec::FetcherFailure, <<EOF
|
|
|
|
Cannot fetch #{uri} because your compliance token has not been
|
|
configured.
|
|
|
|
Please login using
|
|
|
|
inspec compliance login https://your_compliance_server --user admin --insecure --token 'PASTE TOKEN HERE'
|
|
EOF
|
|
end
|
|
|
|
# verifies that the target e.g base/ssh exists
|
|
profile = uri.host + uri.path
|
|
if !Compliance::API.exist?(config, profile)
|
|
fail Inpsec::FetcherFailure, "The compliance profile #{profile} was not found on the configured compliance server"
|
|
end
|
|
new(target_url(profile, config), config)
|
|
rescue URI::Error => _e
|
|
nil
|
|
end
|
|
|
|
def self.target_url(profile, config)
|
|
owner, id = profile.split('/')
|
|
"#{config['server']}/owners/#{owner}/compliance/#{id}/tar"
|
|
end
|
|
|
|
#
|
|
# We want to save compliance: in the lockfile rather than url: to
|
|
# make sure we go back through the ComplianceAPI handling.
|
|
#
|
|
def resolved_source
|
|
{ compliance: supermarket_profile_name }
|
|
end
|
|
|
|
def to_s
|
|
'Chef Compliance Profile Loader'
|
|
end
|
|
|
|
private
|
|
|
|
def supermarket_profile_name
|
|
m = %r{^#{@config['server']}/owners/(?<owner>[^/]+)/compliance/(?<id>[^/]+)/tar$}.match(@target)
|
|
"#{m[:owner]}/#{m[:id]}"
|
|
end
|
|
end
|
|
end
|