Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates to incorporate/extend AWS RDS instance support #23

Draft
wants to merge 88 commits into
base: main
Choose a base branch
from

Conversation

ejaronne
Copy link
Collaborator

No description provided.

ejaronne and others added 4 commits January 9, 2024 11:57
for aws_rds input, psql client install, and cinc-auditor
add aws_rds support
it { should be_listening }
its('processes') { should match ['postmaster'] }
end
if !input('aws_rds')
Copy link
Contributor

@em-c-rod em-c-rod Jan 16, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Making conditions based on the aws_rds input may be a good use of the only_if syntax like we are putting more of in RHEL8.

For example:

  only_if('Control not applicable - SSH is not installed within containerized RHEL', impact: 0.0) {
    !virtualization.system.eql?('docker') || file('/etc/ssh/sshd_config').exist?
  }

or in this context something like below (the syntax may not be perfect, but the idea is there):

  only_if('Control not applicable - in AWS RDS', impact: 0.0) {
    !input(aws_rds)
  }

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@em-c-rod Is the 'Control not applicable - SSH is not installed within containerized RHEL' just a comment in the code, or does it actually show up for the user looking at the test results? If the later, we need to be concise on the language/context of this statement.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It shows up for the user in test results.
For example, in these RHEL8 results
The results for SV-230226, for example, are read as

Skipped control due to only_if condition: The system does not have GNOME installed; this requirement is Not
        Applicable.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

image
Can we improve the cosmetics?
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants