Menu

Chef Supermarket

Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

View our collection of guides, documentation, and articles

Cookbooks
Advanced Options

Select Badges

Select Supported Platforms

Select Status

RSS

conjur (10) Versions 0.4.0

Installs/Configures conjur

Policyfile
Berkshelf
Knife 
cookbook 'conjur', '= 0.4.0', :supermarket
cookbook 'conjur', '= 0.4.0'
knife supermarket install conjur
knife supermarket download conjur
README
Dependencies
Changelog
Quality 0%

conjur

Installs and/or configures Conjur, including Conjur SSH and command-line tools.

This cookbook is composed of several recipes, which can be used at different stages of the continuous delivery lifecycle.

The lifecycle is roughly intended to operate like this:

  • A base OS image from the CentOS or Ubuntu LTS family is selected.
  • The "foundation" cookbooks run on the base OS image to configure the connection to Conjur (and other desired systems), install packages, and perform static configuration.
  • A "foundation" image is captured after the foundation cookbooks have completed.
  • Machines are launched from the "foundation" image. Each machine is provided with Conjur identity, then a Chef run finishes the machine configuration (e.g. configure the host credentials for LDAPS connection to Conjur). At this point, Chef (or other configuration management tools) may also install and configure applications on top of the base OS foundation.

Foundation Recipes

These recipes can be used to build a "foundation" image, which is able to create a secure connection to Conjur, and has performed all package installation prior to the machine launch.

  • install [required] Installs base packages which are needed for Conjur SSH. All installation and configuration steps performed by this recipe can be built into an image.
  • conjurrc [optiona] Configures the connection to the Conjur server endpoint and establishes SSL verification. This information can be safely built into an image.
  • client [optional] Installs the Conjur command-line tools. This is optional for Conjur SSH functionality. The CLI can be built into an image.

Launch recipes

  • configure Applies the Conjur host identity to finish the machine configuration.

Requirements

Platforms

  • Amazon Linux
  • CentOS 6
  • CentOS 7
  • Debian 8
  • RHEL 6
  • RHEL 7
  • Ubuntu 12.04 LTS
  • Ubuntu 14.04 LTS

Dependency Cookbooks

  • sshd-service

Attributes

See attributes/default.rb for defaults and documentation.

Recipes

default

Runs the install and configure recipes.

install

Installs packages required for Conjur SSH. Packages install include:

  • openssh
  • PAM + LDAP
  • Conjur logshipper, which receives auth.log lines from syslog, parses them, and sends them to Conjur as login, logout, and sudo records.

This recipe also applies base configuration, such as:

  • Conjur update permission is mapped to a Unix user group
  • Conjur execute permission is mapped to a Unix user group
  • By default, the update Unix group is granted passwordless sudo access

client

Installs the Conjur command-line tools.

conjurrc

Creates the /etc/conjur.conf and /etc/conjur-[acct].pem from Chef attributes.

Tests

This cookbook is verified by both chefspec and serverspec tests. Conjur Inc also verifies the correct operation of the SSH functionality on all supported platforms. More details about testing can be found in [README.ci.md](README.ci.md).

Dependent cookbooks

apt >= 0.0.0
yum >= 0.0.0
sshd-service >= 0.0.0

Contingent cookbooks

conjur-host-identity-library Applicable Versions
conjur-host-identity-library 1.0.2

0.4.0

  • Add automated testing for many more platforms
  • Rework testing use a real Conjur appliance

0.3.4

  • Fix login on Debian
  • Install conjur_authorized_keys in /opt/conjur/bin instead of /usr/local/bin

0.3.3

  • Correctly detect systemd on Debian

0.3.2

  • Fix for debian (don't install ubuntu-specific package)

0.3.1

  • Fix Amazon Linux support

0.3.0

  • Systemd support

0.2.3

  • Updated EL repository URL

0.2.2

  • Add a timeout in pubkey fetcher to prevent lockout when Conjur is unreachable

0.2.1

  • Lower nslcd's idle_timelimit to one second

0.2.0

  • Configures nsswitch to use LDAP for group lookup. This enables the usage of Conjur for secondary groups.

Foodcritic Metric 
            
0.4.0 failed this metric
FC009: Resource attribute not recognised: /tmp/cook/a41514108b31c68546404a1a/conjur/recipes/identity.rb:19
FC014: Consider extracting long ruby_block to library: /tmp/cook/a41514108b31c68546404a1a/conjur/recipes/_install_ssh.rb:49
FC048: Prefer Mixlib::ShellOut: /tmp/cook/a41514108b31c68546404a1a/conjur/libraries/conjur_helper_methods.rb:32

Conjur Inc Conjur Inc

Details

View Source View Issues

Updated February 12, 2016 Created on

Supported Platforms

  • centos >= 0.0.0
  • debian >= 0.0.0
  • ubuntu >= 0.0.0
  • amazon >= 0.0.0

License

MIT License

Download Cookbook