kitchen.yml

---
driver:
  name: vagrant

verifier:
  name: inspec

transport:
  name: rsync

provisioner:
  name: chef_infra
  product_name: cinc
  product_version: '18'
  enforce_idempotency: true
  multiple_converge: 2
  deprecations_as_errors: true
  data_bags_path: test/integration/data_bags
  encrypted_data_bag_secret_key_path: test/integration/encrypted_data_bag_secret
  attributes:
    osl-selinux:
      enforcing: true

platforms:
  - name: almalinux-8
  - name: almalinux-9
  - name: debian-12

suites:
  - name: default
    run_list:
      - recipe[osl-postfix::default]
  - name: server
    run_list:
      - recipe[osl-postfix::server]
      - recipe[postfix::aliases]
    verifier:
      inspec_tests:
        - name: default
          path: test/integration/default
        - name: server
          path: test/integration/server
      controls:
        - postfix-common
        - postfix-server
    excludes:
      - debian-12
      - ubuntu-24.04
  - name: server-ssl
    run_list:
      - recipe[certificate::wildcard]
      - recipe[osl-postfix::server]
      - recipe[postfix::aliases]
    attributes:
      osl-postfix:
        main:
          smtpd_tls_cert_file: /etc/pki/tls/certs/wildcard.pem
          smtpd_tls_key_file: /etc/pki/tls/private/wildcard.key
          smtpd_tls_security_level: may
          smtpd_use_tls: 'yes'
      postfix:
        master:
          smtps:
            active: true
    verifier:
      inspec_tests:
        - name: default
          path: test/integration/default
        - name: server
          path: test/integration/server
        - name: server-ssl
          path: test/integration/server-ssl
        - name: osuosl-baseline
          git: https://github.com/osuosl/osuosl-baseline.git
      controls:
        - postfix-common
        - postfix-server
        - postfix-server-ssl
        - ssl-baseline
      inputs:
        smtpd_tls_security_level: 'may'
        ssl_port:
          - 465
    excludes:
      - debian-12
      - ubuntu-24.04