Chef Ideas

We believe that the best way to build software is to do it in close collaboration with the people who use it. We invite you to submit your ideas using the form below. Please be sure to include the problem for which you are solving and the benefits of implementing the idea.

We do our best to implement as many Ideas as we can. Our Product team will evaluate all submitted ideas in a timely manner and will disposition each into one of the following categories: will integrate into the product roadmap, further research is needed, unlikely to implement.

Thanks for collaborating with us!

Interval Support for Chef Infra Client Compliance Phase

As an organization consuming the Audit cookbook for running InSpec compliance checks, I would like to move to the new Compliance Phase which has been introduced. Currently we have a number of profiles which run across our fleet and are using the interval attribute of the Audit cookbook to limit the amount of scans which run since they can be time-consuming to run full benchmark scans of systems and we want to restrict the data growth of what is reported to Chef Automate.

Please support the interval attribute set for Compliance phase so that scans can be scheduled to not trigger on every Chef Infra Client run and can be set on a periodic basis.

# control how often inspec scans are run, if not on every node converge
# notes: false value will result in running inspec scan every converge
default['audit']['interval']['enabled'] = false

# controls how often inspec scans are run (in minutes)
# notes: only used if interval is enabled above
default['audit']['interval']['time'] = 1440

  • Collin McNeese
  • Jun 1 2021
  • Completed
  • Attach files
  • Tim Smith commented
    1 Feb, 2022 06:03pm

    This has shipped

  • Guest commented
    8 Oct, 2021 09:11am
    Off to heck to me game
  • Tim Smith commented
    27 Aug, 2021 04:31pm

    This is a planned feature as we further refine compliance phase

  • +9