---
<%
    require 'dotenv'
    Dotenv.load
%>

driver:
  name: ec2
  associate_public_ip: false
  instance_type: <%= ENV['EC2_INSTANCE_TYPE'] || 't3.medium' %>
  interface: private
  region: <%= ENV['AWS_REGION'] || 'us-east-1' %>
  security_group_filter:
    name: <%= ENV['EC2_SECURITY_GROUP_NAME'] || 'dev-test-kitchen-instance-security-group' %>
  subnet_filter:
    tag: Name
    value: <%= ENV['EC2_SUBNET_NAME'] || 'private01' %>

provisioner:
  name: chef_zero
  product_name: chef
  product_version: 18.2.7
  chef_license: accept
  data_bags_path: <%= ENV['DATA_BAGS_PATH'] || '../../data_bags' %>
  encrypted_data_bag_secret_key_path: <%= ENV['ENCRYPTED_DATA_BAG_SECRET_KEY_PATH'] || '/etc/chef/encrypted_data_bag_secret' %>

verifier:
  name: inspec

platforms:
  - name: amazon2-2023
  - name: debian-11
    lifecycle:
      post_create:
        - remote: sudo apt update

suites:
  - name: default
    includes:
      - amazon2-2023
    run_list:
      - recipe[irrigate-vault-test::server]
    attributes:
      vault:
        tls:
          domains:
            - vault.dev.theorchard.io
    verifier:
      inspec_tests:
        - path: test/integration/server
  - name: proxy
    includes:
      - debian-11
    run_list:
      - recipe[irrigate-vault::proxy]
    data_bags_path: test/integration/data_bags
    verifier:
      inspec_tests:
        - path: test/integration/proxy