
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
A Test Kitchen Driver for Apache CloudStack / Citrix CloudPlatform.
This Gem only requires FOG of a version greater than 1.3.1. However, as most of your knife plugins will be using newer versions of FOG, that shouldn't be an issue.
Please read the Driver usage page for more details.
Provide, at a minimum, the required driver options in your .kitchen.yml
file:
driver_plugin: cloudstack
driver_config:
cloudstack_api_key: [YOUR CLOUDSTACK API KEY]
cloudstack_secret_key: [YOUR CLOUDSTACK SECRET KEY]
cloudstack_api_url: [YOUR CLOUDSTACK API URL]
require_chef_omnibus: latest (if you'll be using Chef)
OPTIONAL
cloudstack_expunge: [TRUE/FALSE] # Whether or not you want the instance to be expunged, default false.
cloudstack_sync_time: [NUMBER OF SECONDS TO WAIT FOR CLOUD-SET-GUEST-PASSWORD/SSHKEY]
keypair_search_directory: [PATH TO DIRECTORY (other than ~, ., and ~/.ssh) WITH KEYPAIR PEM FILE]
cloudstack_project_id: [PROJECT_ID] # To deploy VMs into project.
cloudstack_vm_public_ip: [PUBLIC_IP] # In case you use advanced networking and do static NAT manually.
associate_public_ip: [TRUE/FALSE] # If you want kitchen to automatically associate a public IP, default false.
cloudstack_create_firewall_rule: [TRUE/FALSE] # If you want Kitchen to automatically create firewall rule for public IP to reach SSH (port 22)
cloudstack_userdata: "#cloud-config\npackages:\n - htop\n" # double quote required.
Then to specify different OS templates,
platforms:
cloudstack_template_id: [INSTANCE TEMPLATE ID]
cloudstack_serviceoffering_id: [INSTANCE SERVICE OFFERING ID]
cloudstack_zone_id: [INSTANCE ZONE ID]
OPTIONAL
cloudstack_network_id: [NETWORK ID FOR ISOLATED OR VPC NETWORKS]
cloudstack_security_group_id: [SECURITY GROUP ID FOR SHARED NETWORKS]
cloudstack_affinity_group_id: [AFFINITY GROUP ID FOR DEDICATED CLUSTER]
cloudstack_serviceoffering_cpu: [THE NUMBER OF CPU FOR A SERVICE OFFERING THAT DOES NOT SPECIFY CPU]
cloudstack_serviceoffering_cpuspeed: [THE SPEED OF EACH CPU FOR A SERVICE OFFERING THAT DOES NOT SPECIFY CPU]
cloudstack_serviceoffering_memory: [THE AMOUNT OF MEMORY IN MB FOR A SERVICE OFFERING THAT DOES NOT SPECIFY MEMORY]
cloudstack_diskoffering_id: [INSTANCE DISK OFFERING ID]
cloudstack_diskoffering_size: [INSTANCE DISK OFFERING SIZE IN GB]
cloudstack_ssh_keypair_name: [SSH KEY NAME]
cloudstack_sync_time: [NUMBER OF SECONDS TO WAIT FOR CLOUD-SET-GUEST-PASSWORD/SSHKEY]
To use the CloudStack public key provider, you need to have the .PEM file located in the same directory as your .kitchen.yml file, your home directory (~), your .ssh directory (~/.ssh/), or specify a directory (without any trailing slahses) as your "keypair_search_directory" and the file be named the same as the Keypair on CloudStack suffixed with .pem (e.g. the Keypair named "TestKey" should be located in one of the searched directories and named "TestKey.pem"). This PEM file should be the PRIVATE key, not the PUBLIC key.
By default, a unique server name will be generated and the randomly generated password will be used, though that behavior can be overridden with additional options (e.g., to specify a SSH private key):
name: [A UNIQUE SERVER NAME]
public_key_path: [PATH TO YOUR SSH PUBLIC KEY]
username: [SSH USER]
port: [SSH PORT]
host_name setting is useful if you are facing ENAMETOOLONG exceptions in the chef run caused by long generated hostnames)
host_name: [A UNIQUE HOST NAME]
Only disable SSL cert validation if you absolutely know what you are doing, but are stuck with an CloudStack deployment without valid SSL certs.
disable_ssl_validation: true
Determines whether or not a Chef Omnibus package will be installed. There are several different behaviors available:
true
- the latest release will be installed. Subsequent converges
will skip re-installing if chef is present.latest
- the latest release will be installed. Subsequent converges
will always re-install even if chef is present.<VERSION_STRING>
(ex: 10.24.0
) - the desired version string will
be passed the the install.sh script. Subsequent converges will skip if
the installed version and the desired version match.false
or nil
- no chef is installed.The default value is unset, or nil
.
Pull requests are very welcome! Make sure your patches are well tested. Ideally create a topic branch for every separate change you make. For example:
git checkout -b my-new-feature
)git commit -am 'Added some feature'
)git push origin my-new-feature
)Created and maintained by Jeff Moody (fifthecho@gmail.com)
Apache 2.0 (see LICENSE)
FAQs
Unknown package
We found that kitchen-cloudstack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.