{
"name": "prod_jenkins_aws_agent",
  "description": "role applied to jenkins aws agents",
  "run_list": [
    "role[prod_base_linux]",
    "recipe[irrigate-docker::install]",
    "recipe[irrigate-jenkins::agent]",
    "recipe[irrigate-python::python38]",
    "recipe[irrigate-python::python311]",
    "recipe[irrigate-python::poetry]",
    "recipe[irrigate-python::pipenv]",
    "recipe[irrigate-snowflake::cli]",
    "recipe[irrigate-snowflake::odbc]",
    "recipe[irrigate-orchard_base::unattended_upgrade]"
  ],
  "default_attributes": {
    "aide_update": {
      "excluded_directories": [
        "/var/lib/docker",
        "/var/lib/jenkins"
      ]
    },
    "chef_client": {
      "interval": "300"
    },
    "datadog": {
      "tags": {
        "service_name": "jenkins"
      }
    },
    "firewall": {
      "firewalld": {
        "permanent": true
      }
    },
    "os-hardening": {
      "network": {
        "forwarding": "true"
      },
      "env": {
        "umask": "022"
      }
    },
    "snowflake": {
      "cli": {
        "user": "jenkins",
        "user_dir": "/var/lib/jenkins",
        "config_file_location": "/var/lib/jenkins/.snowsql",
        "connections": {
          "prod": {
            "credentials_data_bag_name": "jenkins_snowflake_cli_user",
            "accountname": "orchard",
            "dbname": "prod",
            "rolename": "prod_datalytics_role",
            "schemaname": "prod",
            "warehousename": "SCHEDULER_JENKINS_WH"
          },
          "datalytics": {
            "credentials_data_bag_name": "jenkins_snowflake_cli_user",
            "accountname": "orchard",
            "dbname": "prod",
            "rolename": "prod_datalytics_role",
            "schemaname": "prod",
            "warehousename": "DATALYTICS_ETL_WAREHOUSE"
          }
        },
        "options": {
          "auto_completion": "True",
          "key_bindings": "emacs",
          "log_file": "/var/lib/jenkins/.snowsql/log"
        }
      }
    },
    "unattended_upgrades": {
      "automatic_reboot": true,
      "unattended_upgrade": 7,
      "package_blacklist": [
        "linux-headers",
        "linux-image",
        "linux-generic",
        "linux-modules"
      ]
    }
  }
}