1
+ .. _nova_introduction :
2
+
1
3
Introduction
2
4
============
3
5
@@ -12,13 +14,17 @@ track versioned, packaged updates to Hubble's components.
12
14
The second method installs directly from git. It should be considered bleeding
13
15
edge and possibly unstable.
14
16
17
+ .. _nova_installation :
18
+
15
19
Installation
16
20
============
17
21
18
22
Each of the four HubbleStack components have been packaged for use with Salt's
19
23
Package Manager (SPM). Note that all SPM installation commands should be done
20
24
on the *Salt Master *.
21
25
26
+ .. _nova_installation_config :
27
+
22
28
**Required Configuration **
23
29
24
30
Salt's Package Manager (SPM) installs files into ``/srv/spm/{salt,pillar} ``.
@@ -34,6 +40,8 @@ Ensure that this path is defined in your Salt Master's ``file_roots``:
34
40
35
41
.. tip :: Remember to restart the Salt Master after making this change to the configuration.
36
42
43
+ .. _nova_installation_packages :
44
+
37
45
Installation (Packages)
38
46
-----------------------
39
47
@@ -43,8 +51,8 @@ repo for updates and bugfixes!)
43
51
44
52
.. code-block :: shell
45
53
46
- wget https://spm.hubblestack.io/2016.7.0 /hubblestack_nova-2016.7.0 -1.spm
47
- spm local install hubblestack_nova-2016.7.0 -1.spm
54
+ wget https://spm.hubblestack.io/2016.7.1 /hubblestack_nova-2016.7.1 -1.spm
55
+ spm local install hubblestack_nova-2016.7.1 -1.spm
48
56
49
57
You should now be able to sync the new modules to your minion(s) using the
50
58
``sync_modules `` Salt utility:
@@ -53,9 +61,11 @@ You should now be able to sync the new modules to your minion(s) using the
53
61
54
62
salt \* saltutil.sync_modules
55
63
56
- Once these modules are synced you are ready to run a HubbleStack Nova audit.
64
+ Once these modules are synced you are ready to run a HubbleStack Nova audit.
57
65
58
- Skip to [Usage].
66
+ Skip to :ref: `Usage <nova_usage >`.
67
+
68
+ .. _nova_installation_manual :
59
69
60
70
Installation (Manual)
61
71
---------------------
@@ -74,13 +84,17 @@ it to the minions.
74
84
salt \* saltutil.sync_modules
75
85
salt \* hubble.sync
76
86
87
+ .. _nova_usage :
88
+
89
+ Skip to :ref: `Usage <nova_usage >`.
90
+
77
91
Usage
78
92
=====
79
93
80
94
There are four primary functions in the hubble.py module:
81
95
82
96
1. ``hubble.sync `` will sync the ``hubblestack_nova/ `` directory to the minion(s).
83
- 2. ``hubble.load `` will load the synced audit modules and their yaml configuration files.
97
+ 2. ``hubble.load `` will load the synced audit modules and their yaml configuration files.
84
98
3. ``hubble.audit `` will audit the minion(s) using the YAML profile(s) you provide as comma-separated arguments
85
99
4. ``hubble.top `` will audit the minion(s) using the ``top.nova `` configuration.
86
100
@@ -110,6 +124,7 @@ Here are some example calls:
110
124
# with "CIS"
111
125
salt \* hubble.audit foo,bar tags=' CIS*'
112
126
127
+ .. _nova_usage_topfile :
113
128
114
129
Nova Topfiles
115
130
-------------
@@ -148,6 +163,7 @@ Examples:
148
163
salt ' *' hubble.top foo/bar/top.nova
149
164
salt ' *' hubble.top foo/bar.nova verbose=True
150
165
166
+ .. _nova_usage_control :
151
167
152
168
Compensating Control Configuration
153
169
----------------------------------
@@ -188,6 +204,7 @@ still run, but if any of the controlled checks fail, they will be removed from
188
204
``Failure `` and added to ``Controlled ``, and will be treated as a Success for
189
205
the purposes of compliance percentage.
190
206
207
+ .. _nova_usage_schedule :
191
208
192
209
Schedule
193
210
--------
@@ -200,10 +217,19 @@ In order to run the audits once daily, you can use the following schedule:
200
217
nova_day :
201
218
function : hubble.top
202
219
seconds : 86400
220
+ kwargs :
221
+ verbose : True
222
+ show_profile : True
223
+ returner : splunk_nova_return
224
+ return_job : False
225
+
226
+ .. _nova_configuration :
203
227
204
228
Configuration
205
229
=============
206
230
231
+ .. _nova_under_the_hood :
232
+
207
233
Under the Hood
208
234
==============
209
235
@@ -230,12 +256,16 @@ shown, change to False to disable behaviors):
230
256
autosync : True
231
257
autoload : True
232
258
259
+ .. _nova_development :
260
+
233
261
Development
234
262
===========
235
263
236
264
If you're interested in contributing to this project this section outlines the
237
265
structure and requirements for Nova audit module development.
238
266
267
+ .. _nova_development_anatomy :
268
+
239
269
Anatomy of a Nova audit module
240
270
------------------------------
241
271
@@ -257,7 +287,6 @@ Anatomy of a Nova audit module
257
287
All Nova plugins should include the above header, expanding the docstring to
258
288
include full documentation
259
289
260
-
261
290
.. code-block :: python
262
291
263
292
import fnmatch
@@ -315,6 +344,8 @@ one-key dictionaries in the form of ``{<tag>: <string_description>}``, or a
315
344
list of one-key dictionaries in the form of ``{<tag>: <data_dict>} `` (in the
316
345
case of ``verbose ``).
317
346
347
+ .. _nova_contribute :
348
+
318
349
Contribute
319
350
==========
320
351
0 commit comments