Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / 2fb1114e8e9c35a00eb7ff1373c973fcbff05b8f / . / jenkins / client / job / security / openscap.yml
blob: 156e15dc650ff381f92a45b24ddd61eea0aa8d5f [file] [log] [blame]
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]1#
2# Job to collect oscap results based on input benchmarks
3#
4parameters:
5 jenkins:
6 client:
7 job:
8 run-openscap-xccdf-evaluation:
9 type: workflow-scm
10 concurrent: true
11 discard:
12 build:
13 keep_num: 10
14 artifact:
15 keep_num: 10
16 display_name: "Run openscap xccdf evaluation on given nodes"
17 scm:
18 type: git
19 url: "${_param:jenkins_gerrit_url}/mk/mk-pipelines"
20 branch: "${_param:jenkins_pipelines_branch}"
Sergey Galkinef9eabf2019-06-19 17:53:07 +0400[diff] [blame]21 credentials: ${_param:jenkins_gerrit_credentials}
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]22 script: test-openscap-pipeline.groovy
23 param:
Pavlo Shchelokovskyyf8915882018-10-08 17:11:54 +0300[diff] [blame]24 OPENSCAP_TEST_TYPE:
25 type: choice
26 description: "Type of tests to run"
27 choices:
28 - xccdf
29 - oval
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]30 DASHBOARD_API_URL:
31 type: string
Pavlo Shchelokovskyyda849d32018-12-26 14:27:15 +0000[diff] [blame]32 default: "http://oscore-bandit.vm.mirantis.net:8090/api"
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]33 description: "The WORP api base url. Mandatory if UPLOAD_TO_DASHBOARD is true"
Pavlo Shchelokovskyy968b2c42018-12-26 14:31:17 +0000[diff] [blame]34 CLOUD_NAME:
35 type: string
36 description: "Custom name to set for the cloud in the Worp API. If not specified, cluster name from Salt minions is used."
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]37 SALT_MASTER_URL:
38 type: string
39 default: ""
40 SALT_MASTER_CREDENTIALS:
41 type: string
Vasyl Saienko04d144f2018-10-01 09:55:29 +0300[diff] [blame]42 default: "salt-qa-credentials"
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]43 TARGET_SERVERS:
44 type: string
45 default: '*'
46 description: "The target Salt nodes"
47 UPLOAD_TO_DASHBOARD:
48 type: boolean
49 default: "false"
50 description: "Upload results to the WORP or not"
51 XCCDF_BENCHMARKS:
52 type: string
Dmitry Teselkin55528d72019-04-26 16:48:54 +0300[diff] [blame]53 default: "cis_ubuntu_1604_server_l2/1.0.0/cis_ubuntu_1604_server_l2-xccdf.xml,default"
Ivan Udovichenkodefb2de2018-09-26 14:47:05 +0300[diff] [blame]54 description: "List of pairs XCCDF benchmark filename and corresponding profile, format xccdf_benchmark 1, profile; xccdf_benchmark 2, profile"
55 XCCDF_BENCHMARKS_DIR:
56 type: string
57 default: "/usr/share/xccdf-benchmarks/mirantis/"
58 description: "The XCCDF benchmarks base directory"
59 XCCDF_VERSION:
60 type: string
61 default: "1.2"
62 description: "The XCCDF version"
63 XCCDF_TAILORING_ID:
64 type: string
65 default: "None"
66 description: "The tailoring id"
Ivan Udovichenko8e5c9482018-12-04 13:22:27 +0300[diff] [blame]67 XCCDF_CPE:
68 type: string
Ivan Udovichenko6347ed22018-12-07 15:26:25 +0300[diff] [blame]69 default: '/usr/share/mirantis-scap-content/mirantis/cpe/openscap-cpe-dict.xml'
Ivan Udovichenko8e5c9482018-12-04 13:22:27 +0300[diff] [blame]70 description: "CPE dictionary or language for applicability checks. (Example: /usr/share/openscap/cpe/openscap-cpe-dict.xml)"