2016-09-21 16:58:25 +00:00
|
|
|
---
|
|
|
|
title: About kitchen-inspec
|
|
|
|
---
|
|
|
|
|
|
|
|
# kitchen-inspec
|
|
|
|
|
2017-10-03 21:25:27 +00:00
|
|
|
Use InSpec as a Kitchen verifier with `kitchen-inspec`.
|
2016-09-21 16:58:25 +00:00
|
|
|
|
2017-10-03 21:25:27 +00:00
|
|
|
Add the InSpec verifier to the `.kitchen.yml` file:
|
2016-09-21 16:58:25 +00:00
|
|
|
|
|
|
|
verifier:
|
|
|
|
name: inspec
|
|
|
|
|
2017-10-03 21:25:27 +00:00
|
|
|
Use a compliance profile from the Chef Compliance server:
|
2016-09-21 16:58:25 +00:00
|
|
|
|
|
|
|
suites:
|
|
|
|
- name: compliance
|
|
|
|
run_list:
|
2017-10-03 21:25:27 +00:00
|
|
|
- recipe[ssh-hardening::default]
|
2016-09-21 16:58:25 +00:00
|
|
|
verifier:
|
|
|
|
inspec_tests:
|
|
|
|
- compliance://base/ssh
|
|
|
|
|
|
|
|
and then run the following command:
|
|
|
|
|
|
|
|
$ inspec compliance login https://compliance.test --user admin --insecure --token ''
|
|
|
|
|
|
|
|
where `--insecure` is required when using self-signed certificates.
|
|
|
|
|
2017-10-03 21:25:27 +00:00
|
|
|
Use a compliance profile from the Chef Supermarket:
|
2016-09-21 16:58:25 +00:00
|
|
|
|
|
|
|
suites:
|
|
|
|
- name: supermarket
|
|
|
|
run_list:
|
2017-10-03 21:25:27 +00:00
|
|
|
- recipe[ssh-hardening::default]
|
2016-09-21 16:58:25 +00:00
|
|
|
verifier:
|
|
|
|
inspec_tests:
|
2017-10-03 21:25:27 +00:00
|
|
|
- supermarket://dev-sec/ssh-baseline
|
|
|
|
|
|
|
|
Use InSpec tests from the local file system:
|
|
|
|
|
|
|
|
suites:
|
|
|
|
- name: local
|
|
|
|
run_list:
|
|
|
|
- recipe[my_cookbook::default]
|
|
|
|
verifier:
|
|
|
|
inspec_tests:
|
|
|
|
- test/integration/default
|
|
|
|
|