---
driver:
  name: docker

driver_config:
  use_sudo: false
  privileged: true
  provision_command: mkdir -p /run/sshd
  run_command: /lib/systemd/systemd

platforms:
  - name: debian-8
  - name: debian-9
  - name: ubuntu-16.04
  - name: ubuntu-18.04
  - name: fedora-27
  - name: centos-7

provisioner:
  name: salt_solo
  log_level: info
  require_chef: false
  salt_version: latest
  formula: bind
  salt_copy_filter:
    - .kitchen
    - .git
  pillars:
    top.sls:
      base:
        '*':
          - bind
    bind.sls:
      bind:
        configured_acls:
          client1:
            - 127.0.0.0/8
            - 10.20.0.0/16
          client2:
            - 10.30.0.0/8
        configured_zones:
          example.com:
            type: master
            notify: False
            update_policy:
              - "grant core_dhcp name dns_entry_allowed_to_update. ANY"
            notify: False
          example.net:
            type: master
            notify: False
          example.org:
            type: slave
            notify: False
            masters:
              - 192.0.2.1
              - 192.0.2.2
          113.0.203.in-addr.arpa:
            type: master
            notify: false
          100.51.198.in-addr.arpa:
            type: master
            notify: False
        available_zones:
          example.net:
            file: example.net
            soa:
              class: IN
              ns: ns1.example.net
              contact: hostmaster.example.net
              serial: auto
              retry: 300
              ttl: 300
            records:
              NS:
                '@':
                  - ns1
              A:
                ns1: 198.51.100.1
                foo: 198.51.100.2
                bar: 198.51.100.3
                baz: 198.51.100.4
                mx1:
                  - 198.51.100.5
                  - 198.51.100.6
                  - 198.51.100.7
              CNAME:
                mail: mx1.example.net.
                smtp: mx1.example.net.
          example.com:
            file: example.com
            soa:
              class: IN
              ns: ns1.example.com
              contact: hostmaster.example.com
              serial: 2018073100
              retry: 600
              ttl: 600
            records:
              NS:
                '@':
                  - ns1
              A:
                ns1: 203.0.113.1
                foo: 203.0.113.2
                bar: 203.0.113.3
              CNAME:
                ftp: foo.example.com.
                www: bar.example.com.
                mail: mx1.example.com.
                smtp: mx1.example.com.
              TXT:
                '@':
                  - '"some_value"'
          113.0.203.in-addr.arpa:
            file: 113.0.203.in-addr.arpa
            soa:
              class: IN
              ns: ns1.example.com
              contact: hostmaster.example.com
              serial: 2018073100
              retry: 600
              ttl: 600
            records:
              NS:
                '@':
                  - ns1.example.com.
              PTR:
                1.113.0.203.in-addr.arpa: ns1.example.com.
                2.113.0.203.in-addr.arpa: foo.example.com.
                3.113.0.203.in-addr.arpa: bar.example.com.
          100.51.198.in-addr.arpa:
            file: 100.51.198.in-addr.arpa
            soa:
              class: IN
              ns: ns1.example.net
              contact: hostmaster.example.net
              serial: auto
              retry: 600
              ttl: 600
            records:
              NS:
                '@':
                  - ns1.example.net.
            generate_reverse:
              net: 198.51.100.0/24
              for_zones:
                - example.net


verifier:
  name: inspec
  sudo: true
  reporter:
    - cli
  inspec_tests:
    - path: test/integration/default

suites:
  - name: bind
    provisioner:
      state_top:
        base:
          '*':
            - bind
            - bind.config