test-kitchen/test-kitchen

Test Kitchen is an integration tool for developing and testing infrastructure code and software on isolated target platforms.

Steven Murawski

@smurawski

Justin Dossey

@justindossey

Hey all, I ran into an interesting case with test-kitchen yesterday and would appreciate some input. My recipe adds a host to an AD domain. The test, therefore, would verify the domain was joined successfully. So converge joins, verify confirms the join, then destroy removes the VM created for the integration test. Nowhere in there can I invoke an un-join or leave operation, so I'm left with crap on the AD server. How should I invoke the un-join or any other cleanup stuff to avoid leaving crap on outside servers?

This case comes up not just with AD, but also with stuff like license servers, where I need to check out a license, verify that I have a valid license, then return the license, then verify the license was returned.

Steven Murawski

@smurawski

@justindossey how are you handling the reboot required by the domain join?

Steven Murawski

@smurawski

@justindossey my recommendation at this point would be rather than kitchen test, breaking out the steps in your ci pipeline and doing kitchen create, kitchen converge (probably a few times if reboots are needed), then as a deprovision, use kitchen exec to run arbitrary commands against the kitchen node (to do your unlicensing or cleaning up AD). If it was just AD, I would have them join a specific OU and reap through there with a scheduled task or something and blow away unneeded accounts.

Justin Dossey

@justindossey

@smurawski thanks for the response. I'll noodle on it some more

this particular tool (quest/vintella) doesn't require reboot, fwiw

Bill Warner

@TD-4242

is there an easy way to do some post failure info gathering during a kitchen test? I'd like to at least cat some logs to stdout.

Steven Murawski

@smurawski

@TD-4242 not that I can think of off hand, but to be clear - post fail to converge or fail to validate or both?

For a workaround, there is always kitchen exec

Bill Warner

@TD-4242

this is having 'kitchen test' in my build plan executed by Jenkins on code commit. If the app dies on start up for example I have to re-converge locally to login and find out why. Often this can be seen in the logs from the application.

Steven Murawski

@smurawski

@TD-4242 nothing out of the box I can think of, but rather than have kitchen destroy at the end of the failed kitchen test run, just kitchen exec to cat out the log files you care about, then kitchen destroyit

Bill Warner

@TD-4242

maybe i can use https://github.com/test-kitchen/busser-bash

Bill Warner

@TD-4242

while i don't think it'll let me run on failure, I can at least tail the logs I need and get them into the build servers logs :)

Steven Murawski

@smurawski

:+1:

nukepuppy

@nukepuppy

has anyone found a clever way to apply CORS configuration via chef (or ruby?) to an s3bucket?

nukepuppy

@nukepuppy

just realized that was posted to completely wrong gitter.im chat ;) sorry for anyone who got uber confused

nukepuppy

@nukepuppy

anyone ever do anything for managing lots of .kitchen.yml files in different projects that are essentially very similar? generating etc

Bill Warner

@TD-4242

the .kitchen.yml file is processed with erb prior to use, so you can create them as templates. I was using this while testing docker so I could set an ENV var KI_DRIVER=docker and it would use that instead of vagrant.

simple: name: <%= ENV['KI_DRIVER'] || 'vagrant' %>

nukepuppy

@nukepuppy

hmm we're looking to find a more stable way to manage lots of kitchen ymls when they are on same platform etc

like building part of it and then merging it to a real .kitchen.yml .. gather the platform and driver from a remote source depending on if its a specific driver. and then an app.yml which has the localized attributes etc in kitchen.. all done with something like rake.. that then builds the kitchen.yml for the user

this way .. when we want to change a box_url or something its not a ton of kitchen.ymls that need an update just the one master source for X platform

Eugene Narciso

@enarciso

Has anyone experience problems with TK/vsphere/windows2012. I'm currently using Matt Rock's chef-provisioning-vsphere as my driver and at spin up on the VM instance, the first IP address vsphere's API renders is an IPv6 which leads TK to exit with a [Bad URI(is not URI?): http://$IPV6/msman] error. We don't server IPv6 in our DHCP, and disabling IPv6 in windows made my template worse. I hope i'm not the only one that's experiencing this problem. Appreciate any pointers. Thanks!

Bill Warner

@TD-4242

anyone know if I can fake a block device like /dev/sda in kitchen-docker?

Patrik Votoček

@Vrtak-CZ

Hi guys, is there anyone who can help me with chef-cookbooks/cron#79 ? Lookslike as kitchen-docker issue but i'm not sure.

Petr Michalec

@epcim

Hi folks, is there a way to skip some verification steps if running in docker ( using inspec/serverspec as backend )?

nukepuppy

@nukepuppy

@epcim

describe file('/usr/lib64'), :if => os[:arch] == 'x86_64' do
  it { should be_directory }
end

or similar instead of the os arch use something else to identify the condition for inside the tests?

its from http://serverspec.org/advanced_tips.html

nukepuppy

@nukepuppy

maybe i forgot this already but.. isn't there a way to make test kitchen use a 'real chef server' ?

Aaron Lippold

@aaronlippold

Hi all, I am using kitchen-ssh to do some repetitive testing of a chef recipe and an inspec profile - against a provisioned vm host - any suggestions on caching to speed up the process. The idea is we will use the chef recipe to bring the box in and out of compliance and test the inspec secuirty checks that way.

@epcim You can use the --controls flag to execute only a specific set of controls or none of them in the InSpec profile - https://github.com/chef/inspec/blob/master/docs/ctl_inspec.rst#options

@epcim you can also use the inSpec 'only_if' logic as well and profile inheritance to tailor your profile to only run a few tests - https://github.com/chef/inspec/blob/master/docs/profiles.rst#profile-inheritance

Aaron Lippold

@aaronlippold

@epcim only_if do
command('docker').exist?
end

@epcim see

only_if do command('docker').exist? end

only_if do
  command('docker').exist?
end

grumble ...

Punita Ojha

@punitaojha

This message was deleted

Renato Marinho

@renatomarinho

This message was deleted

Renato Marinho

@renatomarinho

This message was deleted

Titouan Chary

@Mwea

Hi guys !
Does anyone could be interested by plugins for terraform to handle chef-zero ? ( I'm looking for feedbacks )

Brett Benassi

@dubb-b

Anyone know if you can you do kitchen-docker with Docker in Docker?

Laurent Vallar

@Val

@dubb-b : Yes you can, but with a patch like test-kitchen/kitchen-docker#294 , see https://github.com/devops-playground/tap4ci

Bruno Andrade

@bmpandrade

Hey guys,
I'm running test-kitchen+kitchen-docker and I need to run docker with host network
The problem is the ssh port 22 is already in use.
I try to use transport to update the port to another like the following:

transport:
  name: ssh
  port: 5000

there is no service running on port 5000

I destroy the current kitchen and run verify

but still getting:

Waiting for SSH service on :22, retrying in 3 seconds

Does anyone already got this?

tbugfinder

@tbugfinder

Hi, is anybody using test-kitchen for tests of AWS Lambda / Serverless ?

tbugfinder

@tbugfinder

How could different log files for verify and destroy cycles be setup so that destroy would not overwrite verify logs? Currently I'm only getting .kitchen/logs/default-azure.log.

Where communities thrive

People

Repo info

Activity