In this tutorial, we will use Chef InSpec to perform testing against our infrastructure.
InSpec can be used to perform local or remote tests and compliance validation for auditing purposes.
The working unit of InSpec is a profile that provides a versioned structure containing checks (i.e. tests); related checks are grouped in "control" blocks. Control is similar to having a high-level rule composed of multiple checks.
In order to check for compliance, the profile along with all respective controls (and corresponding checks) can be run against the local or remote infrastructure; it's also possible to run a single control file.
We'll use the profile dev-sec/linux-baseline that is available in InSpec's supermarket and run it against a remote host.
Please have a look at the control named "os-11".
To run InSpec against a remote host and produce a JUnit XML report that can be submitted to Xray, we may use the following command.
After successfully running the Test Case and generating the JUnit XML report (e.g., junit.xml), it can be imported to Xray (either by the REST API or by using one of the available CI addons or even through Import Execution Results action within the Test Execution).
Each check is mapped to a Generic Test in Jira, and the Generic Test Definition field contains the name of the profile followed by the name of the control and some text derived from the assertion being done in the describe and inner it block.
The Context section contains information about the profile name.
It may be useful to have a Test Plan with all these checks organized hierarchically, so you can track compliance at multiple levels.
- create an empty Test Plan
- import the results, so you'll have a Test Execution
- go to the Test Plan issue screen and add the Test Execution
- organize the Tests within the Test Plan Board
To organize the Tests in the Board of the Test Plan, you may use filters based on the Generic Test Definition field, filtering by the name of the profile plus the name of the control.
Then you can easily move the Tests that matter to the folder that you want.