[chef] RE: Knife monitoring

[Sander Botman < >]

Hi Gregory,

We were running into the same problem and wrote also some knife wrappers, but 
indeed this is not solving anything.
Then we wrote some tooling that would scan the nginx log on who/what has 
changed something and pull the information on the backend out of chef and 
commit it in git.
But this was very chatty, error prone and not scalable... (but worked for 
some months)
https://www.cupfighter.net/2014/02/chef-monitoring

Then we started with the development of chef-guard (written in Go)
We use the chef-guard between erchef and bookshelf on the frontend and 
communicate from the guard to the backend.
It scans who is doing what and commit every change (plain json) into github, 
so you will endup with a repo with all your change information.
It integrates with foodcritic and rubocop and can scan every cookbook upload 
on syntax/style and even block uploads that do not comply. (if you want)
Idea is to even check your uploads against already uploaded cookbooks and 
block you if you have made changes but not updated the version.
And we can disabled the --force overwrite on frozen cookbooks, because what's 
the use of freezing if you can do that ;)

Next week 

 
 who wrote the tool will opensource it on github, so you can develop on it 
yourself.
We have been running with this in production since Chef-Conf 2014 and 
squashed all the minor bugs..
So keep in contact and we will help you out on making your environment 100% 
....

Kind regards, 
Sander Botman

Schuberg Philis 
Boeingavenue 271
1119 PD Schiphol-Rijk
http://www.schubergphilis.com



-----Original Message-----
From: Gregory Patmore 
[mailto:
 
 
Sent: vrijdag 23 mei 2014 14:03
To: chef
Subject: [chef] Knife monitoring 

Hey all,

As our chef repos grow and becomes more collaborative, a need to track 
activity on the chef server is rising in priority for me. 

We've wrapped the knife util to track activity, but can't enforce that people 
will use the wrapped util. Is there any way anyone is doing this? I'd like to 
implement tracking at the chef server side. Any plugin or advice would be 
appreciated. 

Gregory Patmore