ChefDK 4.11 Released!

Hey Folks,

It's me again with another Friday special. This time we have an updated release of ChefDK 4 with newer Chef Infra Client, Chef InSpec, and Test Kitchen drivers. As always, we highly recommend you upgrade to the latest Chef Workstation release which includes over 100 additional Cookstyle rules, more Test Kitchen plugins, and the latest tools like Chef CLI and Chef Infra Client 16.

Knife Improvements

We've reworked how the knife command loads dependencies to greatly improve performance. For some users this may result in a 2/3 reduction in the time knife commands take to load the first time. We also fixed the knife ssh command hanging when connecting to Windows nodes over SSH.

Updates Components

Chef Infra Client

Chef Infra Client has been updated from 15.13.8 to 15.14.0 with a large number of improvements to built-in Chef Infra resources.

Chef InSpec

Chef InSpec has been updated from 4.22.1 to 4.22.22. This new release includes the following improvements:

  • Fix mysql_session stdout, stderr and exit_status parameters. Thanks @ramereth!
  • Add new windows_firewall and windows_firewall_rule resources. Thanks @tecracer-theinen!

Chef Vault

Chef Vault has been updated from 4.0.1 to 4.0.11. This release resolves errors when running some knife vault commands and better inputs command inputs.

Test Kitchen

Test Kitchen has been updated from 2.5.4 to 2.7.0, which adds the ability to mark plugins as unable to run with a concurrency (-c) level greater than 1. This will help prevent strange failures that occur with some plugins which cannot run concurrently in the future.

Kitchen AzureRM

Kitchen AzureRM has been updated from 1.0.0 to 1.3.0. This release includes:

  • Support for deletion or preservation of resource group tags with a new destroy_explicit_resource_group_tags config that defaults to true.
  • Default password generation increased to 25 characters to avoid failures on newer Windows releases.
  • Improve performance by loading depedencies only when we need them.

Kitchen Vagrant

The kitchen-vagrant plugin has been updated from 1.6.1 to 1.7.0. This release adds new box_auto_update and box_auto_prune options to pull newer Vagrant base boxes. Thank you @Stromweld!

Platform Packages

  • We now produce packages for Apple's upcoming macOS 11 Big Sur release.



OpenSSL has been updated to 1.0.2w which includes a fix for CVE-2020-1968.

CA Root Certificates

The included cacerts bundle in Chef Infra Client has been updated to the 7-22-2020 release. This new release removes 4 legacy root certificates and adds 4 additional root certificates.

Getting the Build

To grab the latest release head on over to