Skip to content

Commit f8ccd12

Browse files
Merge pull request #66 from MoisesTapia/master
Update Inspec.yml
2 parents dcdcf34 + 286e0df commit f8ccd12

File tree

1 file changed

+21
-21
lines changed

1 file changed

+21
-21
lines changed

inspec.yml

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -11,100 +11,100 @@ attributes:
1111
- name: container_user
1212
required: false
1313
description: 'define user within containers.'
14-
default: 'ubuntu'
14+
value: 'ubuntu'
1515
type: string
1616
- name: container_capadd
1717
required: true
1818
description: 'define needed capabilities for containers.'
1919
type: string
20-
default: NET_ADMIN,SYS_ADMIN
20+
value: NET_ADMIN,SYS_ADMIN
2121
- name: app_armor_profile
2222
required: false
2323
description: 'define apparmor profile for Docker containers.'
24-
default: 'docker-default'
24+
value: 'docker-default'
2525
type: string
2626
- name: selinux_profile
2727
required: false
2828
description: 'define SELinux profile for Docker containers.'
29-
default: label:level:s0-s0:c1023
29+
value: label:level:s0-s0:c1023
3030
type: string
3131
- name: trusted_user
3232
required: false
3333
description: 'define trusted user to control Docker daemon.'
34-
default: vagrant
34+
value: vagrant
3535
type: string
3636
- name: managable_container_number
3737
required: true
3838
description: 'keep number of containers on a host to a manageable total.'
39-
default: 25
39+
value: 25
4040
type: numeric
4141
- name: benchmark_version
4242
required: true
4343
description: 'to execute also the old controls from previous benchmarks. to execute the controls, define the value as 1.12.0'
4444
type: string
45-
default: 1.12.0
45+
value: 1.12.0
4646
- name: registry_cert_path
4747
required: true
4848
description: 'directory contains various Docker registry directories.'
49-
default: '/etc/docker/certs.d'
49+
value: '/etc/docker/certs.d'
5050
type: string
5151
- name: registry_name
5252
required: true
5353
description: 'directory contain certificate certain Docker registry.'
54-
default: '/etc/docker/certs.d/registry_hostname:port'
54+
value: '/etc/docker/certs.d/registry_hostname:port'
5555
type: string
5656
- name: registry_ca_file
5757
required: false
5858
description: 'directory contain certificate certain Docker registry.'
59-
default: '/etc/docker/certs.d/registry_hostname:port/ca.crt'
59+
value: '/etc/docker/certs.d/registry_hostname:port/ca.crt'
6060
type: string
6161
- name: daemon_tlscacert
6262
required: false
6363
description: 'Trust certs signed only by this CA'
64-
default: '/etc/docker/ssl/ca.pem'
64+
value: '/etc/docker/ssl/ca.pem'
6565
type: string
6666
- name: daemon_tlscert
6767
required: false
6868
description: 'Path to TLS certificate file'
69-
default: '/etc/docker/ssl/server_cert.pem'
69+
value: '/etc/docker/ssl/server_cert.pem'
7070
type: string
7171
- name: daemon_tlskey
7272
required: false
7373
description: 'Path to TLS key file'
74-
default: '/etc/docker/ssl/server_key.pem'
74+
value: '/etc/docker/ssl/server_key.pem'
7575
type: string
7676
- name: authorization_plugin
7777
required: false
7878
description: 'define authorization plugin to manage access to Docker daemon.'
79-
default: 'authz-broker'
79+
value: 'authz-broker'
8080
type: string
8181
- name: log_driver
8282
required: false
8383
description: 'define preferable way to store logs.'
84-
default: 'syslog'
84+
value: 'syslog'
8585
type: string
8686
- name: log_opts
8787
required: false
8888
description: 'define Docker daemon log-opts.'
89-
default: syslog-address
89+
value: syslog-address
9090
type: string
9191
- name: swarm_mode
9292
required: false
9393
description: 'define the swarm mode, `active` or `inactive`'
94-
default: inactive
94+
value: inactive
9595
type: string
9696
- name: swarm_max_manager_nodes
9797
required: false
9898
description: 'number of manager nodes in a swarm'
99-
default: 3
99+
value: 3
100100
type: numeric
101101
- name: swarm_port
102102
required: false
103103
description: 'port of the swarm node'
104-
default: 2377
104+
value: 2377
105105
type: numeric
106106
- name: seccomp_default_profile
107107
required: false
108108
description: 'define the default seccomp profile'
109-
default: 'default'
110-
type: string
109+
value: 'default'
110+
type: string

0 commit comments

Comments
 (0)