mirror of
https://github.com/inspec/inspec
synced 2024-12-26 13:03:13 +00:00
66 lines
No EOL
2.2 KiB
Markdown
66 lines
No EOL
2.2 KiB
Markdown
# Example InSpec Profile For GCP
|
|
|
|
This example shows the implementation of an InSpec profile for GCP that depends on the [InSpec GCP Resource Pack](https://github.com/inspec/inspec-gcp). See the [README](https://github.com/inspec/inspec-gcp) for instructions on setting up appropriate GCP credentials.
|
|
|
|
## Create a profile
|
|
|
|
```
|
|
$ inspec init profile --platform gcp my-profile
|
|
Create new profile at /Users/spaterson/my-profile
|
|
* Create directory libraries
|
|
* Create file README.md
|
|
* Create directory controls
|
|
* Create file controls/example.rb
|
|
* Create file inspec.yml
|
|
* Create file attributes.yml
|
|
* Create file libraries/.gitkeep
|
|
|
|
```
|
|
|
|
## Update `attributes.yml` to point to your project
|
|
|
|
```
|
|
gcp_project_id: 'my-gcp-project'
|
|
```
|
|
|
|
## Run the tests
|
|
|
|
```
|
|
$ cd gcp-profile/
|
|
$ inspec exec . -t gcp:// --attrs attributes.yml
|
|
|
|
Profile: GCP InSpec Profile (my-profile)
|
|
Version: 0.1.0
|
|
Target: gcp://local-service-account@my-gcp-project.iam.gserviceaccount.com
|
|
|
|
✔ gcp-single-region-1.0: Ensure single region has the correct properties.
|
|
✔ Region europe-west2 zone_names should include "europe-west2-a"
|
|
✔ gcp-regions-loop-1.0: Ensure regions have the correct properties in bulk.
|
|
✔ Region asia-east1 should be up
|
|
✔ Region asia-northeast1 should be up
|
|
✔ Region asia-south1 should be up
|
|
✔ Region asia-southeast1 should be up
|
|
✔ Region australia-southeast1 should be up
|
|
✔ Region europe-north1 should be up
|
|
✔ Region europe-west1 should be up
|
|
✔ Region europe-west2 should be up
|
|
✔ Region europe-west3 should be up
|
|
✔ Region europe-west4 should be up
|
|
✔ Region northamerica-northeast1 should be up
|
|
✔ Region southamerica-east1 should be up
|
|
✔ Region us-central1 should be up
|
|
✔ Region us-east1 should be up
|
|
✔ Region us-east4 should be up
|
|
✔ Region us-west1 should be up
|
|
✔ Region us-west2 should be up
|
|
|
|
|
|
Profile: Google Cloud Platform Resource Pack (inspec-gcp)
|
|
Version: 0.5.0
|
|
Target: gcp://local-service-account@my-gcp-project.iam.gserviceaccount.com
|
|
|
|
No tests executed.
|
|
|
|
Profile Summary: 2 successful controls, 0 control failures, 0 controls skipped
|
|
Test Summary: 18 successful, 0 failures, 0 skipped
|
|
``` |