Test-Driven Infrastructure for the Cloud
This repository demonstrates how to use InSpec helps you to verify your cloud setups in AWS, Azure or GCP. Recent additions in InSpec 3 also help you to extend InSpec to test your custom in-house applications.
I wrote a couple of articles about InSpec's ability to help you implement test-driven infrastructure with Terraform:
- Google Cloud Platform support for InSpec
- Getting started with InSpec for AWS. Testing for the cloud!
- InSpec for provisioning testing: Verify Terraform setups with InSpec
This repository demonstrates how to use InSpec with provisioning tools. Recent additions to InSpec 2.0 allow us to verify not only machines, but also any infrastructure provisioned in AWS or Azure cloud. This repository is providing guidance on the use of provising tools in conjunction with InSpec.
Test AWS Terraform setups with InSpec
The following example will provision a two-tier terraform architecture on AWS. It assumes that you have AWS credentials properly configured.
cd aws-terraform # run terraform terraform init terraform apply -var 'key_name=terraform' -var 'public_key_path=/Users/chris/.ssh/id_rsa.pub' # use terraform variables with InSpec terraform output --json > test/verify/files/terraform.json inspec exec test/verify -t aws://
Use InSpec to verify Google Cloud Platform setups
cd gcp-example-profile # authenticate to gpc gcloud auth application-default login # check that inspec can connect to gpc inspec detect -t gcp:// # run the profile inspec exec . -t gcp:// --attrs attributes.yml
|Author:||Christoph Hartmann (firstname.lastname@example.org)|
|Author:||Dominik Richter (email@example.com)|
|Copyright:||Christoph Hartmann (firstname.lastname@example.org)|
|Copyright:||Dominik Richter (email@example.com)|
|License:||Mozilla Public License Version 2.0|
The terraform aws example is based on their two-tier example which is also MPL-2.0 licensed.