diff --git a/.vib/vault/goss/goss.yaml b/.vib/vault/goss/goss.yaml new file mode 100644 index 000000000000..f93077f81df9 --- /dev/null +++ b/.vib/vault/goss/goss.yaml @@ -0,0 +1,9 @@ +gossfile: + # Load scripts from .vib/common/goss/templates + ../../common/goss/templates/check-app-version.yaml: {} + ../../common/goss/templates/check-binaries.yaml: {} + ../../common/goss/templates/check-broken-symlinks.yaml: {} + ../../common/goss/templates/check-ca-certs.yaml: {} + ../../common/goss/templates/check-linked-libraries.yaml: {} + ../../common/goss/templates/check-sed-in-place.yaml: {} + ../../common/goss/templates/check-spdx.yaml: {} diff --git a/.vib/vault/goss/vars.yaml b/.vib/vault/goss/vars.yaml new file mode 100644 index 000000000000..ab6f1aa9c95a --- /dev/null +++ b/.vib/vault/goss/vars.yaml @@ -0,0 +1,6 @@ +binaries: + - vault +root_dir: /opt/bitnami +version: + bin_name: vault + flag: --version diff --git a/.vib/vault/vib-publish.json b/.vib/vault/vib-publish.json index 360e4ce23c6f..5bf653e35721 100644 --- a/.vib/vault/vib-publish.json +++ b/.vib/vault/vib-publish.json @@ -3,7 +3,8 @@ "resources": { "url": "{VIB_ENV_CONTAINER_URL}", "path": "{VIB_ENV_PATH}" - } + }, + "runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd" }, "phases": { "package": { @@ -33,6 +34,21 @@ }, "verify": { "actions": [ + { + "action_id": "goss", + "params": { + "resources": { + "path": "/.vib" + }, + "tests_file": "vault/goss/goss.yaml", + "vars_file": "vault/goss/vars.yaml", + "remote": { + "pod": { + "workload": "deploy-vault" + } + } + } + }, { "action_id": "trivy", "params": { @@ -98,7 +114,7 @@ "url": "{VIB_ENV_REGISTRY_URL}", "authn": { "username": "{VIB_ENV_REGISTRY_USERNAME}", - "password": "{VIB_ENV_REGISTRY_PASSWORD}" + "password": "{VIB_ENV_REGISTRY_PASSWORD}" } } } @@ -106,4 +122,4 @@ ] } } -} +} \ No newline at end of file diff --git a/.vib/vault/vib-verify.json b/.vib/vault/vib-verify.json index 835cd556e241..80d2806c1271 100644 --- a/.vib/vault/vib-verify.json +++ b/.vib/vault/vib-verify.json @@ -3,7 +3,8 @@ "resources": { "url": "{SHA_ARCHIVE}", "path": "{VIB_ENV_PATH}" - } + }, + "runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd" }, "phases": { "package": { @@ -29,6 +30,21 @@ }, "verify": { "actions": [ + { + "action_id": "goss", + "params": { + "resources": { + "path": "/.vib" + }, + "tests_file": "vault/goss/goss.yaml", + "vars_file": "vault/goss/vars.yaml", + "remote": { + "pod": { + "workload": "deploy-vault" + } + } + } + }, { "action_id": "trivy", "params": {