---
<%
    require 'dotenv'
    Dotenv.load
%>

driver:
  name: ec2
  associate_public_ip: false
  iam_profile_name: <%= ENV['EC2_IAM_PROFILE_NAME'] %>
  instance_type: <%= ENV['EC2_INSTANCE_TYPE'] || 't3.large' %>
  interface: private
  region: <%= ENV['AWS_REGION'] || 'us-east-1' %>
  skip_cost_warning: true
  security_group_filter:
    name: <%= ENV['EC2_SECURITY_GROUP_NAME'] %>
  subnet_filter:
    tag: Name
    value: <%= ENV['EC2_SUBNET_NAME'] %>

provisioner:
  name: chef_zero
  product_name: cinc
  product_version: 18.8.11
  chef_license: accept

verifier:
  name: inspec

platforms:
  - name: debian-12
    driver:
      instance_type: <%= ENV['EC2_INSTANCE_TYPE_AMD64'] || 't3.medium' %>
      image_id: <%= ENV['BASE_AMI_DEBIAN_12_AMD64'] %>
  - name: debian-13-amd64
    driver:
      instance_type: <%= ENV['EC2_INSTANCE_TYPE_AMD64'] || 't3.medium' %>
      image_id: <%= ENV['BASE_AMI_DEBIAN_13_AMD64'] %>
  - name: debian-13-arm64
    driver:
      instance_type: <%= ENV['EC2_INSTANCE_TYPE_ARM64'] || 't4g.medium' %>
      image_id: <%= ENV['BASE_AMI_DEBIAN_13_ARM64'] %>

suites:
  - name: default
    attributes:
      datadog:
        tags:
          neo4j_cluster: test-kitchen-neo4j-cluster
      neo4j:
        data_volume_type: local
        config:
          server.memory.heap.initial_size: 128M
          server.memory.heap.max_size: 128M
          server.memory.pagecache.size: 128M
          server:
            jmx_recording_enabled: 'true'
        route53:
          domain_name: dev.theorchard.io
          zone_id: Z21XEY26C989RH
        service:
          enabled: true
        streams:
          environment: "test"
        ssl_policy:
          policies:
            cluster:
              base_directory: "/etc/neo4j/cluster_policy"
              allow_key_generation: "false"
              data_bag_name: "dev_neo4j_certificate.pem"
              trust_all: "false"
              client_auth: "REQUIRE"
              verify_hostname: "false"
              tls_versions: "TLSv1.2"
              ciphers: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
      qualys:
        qualys_credentials_data_bag_name: test_qualys_activation_keys
        use_default_data_bag_secret_file: true
    run_list:
      - role[dev_neo4j_5_debian_cluster]
      - recipe[irrigate-neo4j::backup]
    data_bags_path: <%= ENV['DATA_BAGS_PATH'] || '../../data_bags' %>
    encrypted_data_bag_secret_key_path: <%= ENV['ENCRYPTED_DATA_BAG_SECRET_KEY_PATH'] || '/etc/chef/encrypted_data_bag_secret' %>
    roles_path: ../../roles
    verifier:
      inspec_tests:
        - test/integration/default
  - name: "2025"
    attributes:
      datadog:
        tags:
          neo4j_cluster: test-kitchen-neo4j-cluster
      neo4j:
        version: "2025.10.1"
        apoc:
          install_url: "https://github.com/neo4j/apoc/releases/download/2025.10.1/apoc-2025.10.1-core.jar"
          checksum: "17d5d5c3b08ea299c2a86556b84fcbc14526088200e5f6894516e1f5c2488487"
        data_volume_type: local
        config:
          server.memory.heap.initial_size: 128M
          server.memory.heap.max_size: 128M
          server.memory.pagecache.size: 128M
          server:
            jmx_recording_enabled: 'true'
        route53:
          domain_name: dev.theorchard.io
          zone_id: Z21XEY26C989RH
        service:
          enabled: true
        streams:
          environment: "test"
        ssl_policy:
          policies:
            cluster:
              base_directory: "/etc/neo4j/cluster_policy"
              allow_key_generation: "false"
              data_bag_name: "dev_neo4j_certificate.pem"
              trust_all: "false"
              client_auth: "REQUIRE"
              verify_hostname: "false"
              tls_versions: "TLSv1.2"
              ciphers: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
      qualys:
        qualys_credentials_data_bag_name: test_qualys_activation_keys
        use_default_data_bag_secret_file: true
    run_list:
      - role[dev_neo4j_debian_13_cluster]
      - recipe[irrigate-neo4j::backup]
    data_bags_path: <%= ENV['DATA_BAGS_PATH'] || '../../data_bags' %>
    encrypted_data_bag_secret_key_path: <%= ENV['ENCRYPTED_DATA_BAG_SECRET_KEY_PATH'] || '/etc/chef/encrypted_data_bag_secret' %>
    roles_path: ../../roles
    verifier:
      inspec_tests:
        - test/integration/default