---
driver:
  name: vagrant
  provider: parallels

provisioner:
  product_name: chef
  multiple_converge: 2

verifier:
  name: inspec
  sudo: true
  reporter:
  - cli
  - junit:/tmp/%{suite}-%{platform}-inspec.xml
  inspec_tests:
  - test/integration/default

platforms:
- name: mojave-chef17
  driver:
    box: microsoft/macos-mojave
    box_version: 10.14.6
  provisioner:
    product_version: 17

- name: catalina-chef17
  driver:
    box: microsoft/macos-catalina
    box_version: 10.15.7
  provisioner:
    product_version: 17

- name: big-sur-chef17
  driver:
    box: microsoft/macos-big-sur
    box_version: 11.6
  provisioner:
    product_version: 17

- name: monterey-chef17
  driver:
    box: microsoft/macos-monterey
    box_version: 12.2
  provisioner:
    product_version: 17

suites:
- name: default
  provisioner:
    multiple_converge: 3
    enforce_idempotency: true
  run_list:
  - recipe[macos_test::preferences]
  verifier:
    controls:
    - dock-appearance
    - show-all-files
    - plist-creation

- name: software-updates
  provisioner:
    enforce_idempotency: true
  run_list:
  - recipe[macos_test::disable_software_updates]
  verifier:
    controls:
    - updates-disabled

- name: spotlight
  provisioner:
    enforce_idempotency: true
  run_list:
  - recipe[macos_test::spotlight]
  verifier:
    controls:
    - indexing-and-searching

- name: xcode-from-apple
  run_list:
  - recipe[macos_test::xcode_from_apple]
  lifecycle:
    pre_converge:
    - remote: echo -n '<%= ENV['APPLEID_USERNAME'] %>' > ~/username
    - remote: echo -n '<%= ENV['APPLEID_PASSWORD'] %>' > ~/password
  verifier:
    controls:
    - xcode-and-simulators

- name: xcode-from-url
  run_list:
  - recipe[macos_test::xcode_from_url]
  lifecycle:
    pre_converge:
    - remote: echo -n '<%= ENV['XCODE_URL'] %>' > ~/xcode
  verifier:
    controls:
    - xcode-and-simulators

- name: command-line-tools
  run_list:
  - recipe[macos_test::command_line_tools]
  verifier:
    controls:
    - command-line-tool-sentinel
    - xcrun

- name: certificate
  run_list:
  - recipe[macos_test::certificate]
  verifier:
    controls:
    - certificate-install

- name: users
  run_list:
  - recipe[macos_test::users]
  verifier:
    controls:
    - admin-user
    - standard-user
    - hidden-user
    - deleted-user
    - secure-token-user

- name: keychain
  run_list:
  - recipe[macos_test::keychain]
  verifier:
    controls:
    - keychain-creation
    - login-keychain-creation
    - default-keychain-creation

- name: remote-access
  provisioner:
    enforce_idempotency: true
  run_list:
  - recipe[macos_test::remote_access]
  verifier:
    controls:
    - remote-control