About kitchen-inspec
Use Chef InSpec as a Test Kitchen verifier with kitchen-inspec.
For hands-on examples, learn how to use Test Kitchen to run Chef InSpec profiles on the Learn Chef course Validate Infrastructure Code with Test Kitchen.
Add the Chef InSpec verifier to the .kitchen.yml file:
verifier:
name: inspec
Use a compliance profile from the Chef Compliance server:
suites:
- name: compliance
run_list:
- recipe[ssh-hardening::default]
verifier:
inspec_tests:
- compliance://base/ssh
and then run the following command:
inspec automate login https://compliance.test --user admin --insecure --token ''
where:
--insecureis required when using self-signed certificates.
inspec compliance is a backwards compatible alias for inspec automate and works the same way:
inspec compliance login https://compliance.test --user admin --insecure --token ''
Use a compliance profile from the Chef Supermarket:
suites:
- name: supermarket
run_list:
- recipe[ssh-hardening::default]
verifier:
inspec_tests:
- supermarket://dev-sec/ssh-baseline
Use Chef InSpec tests from the local file system:
suites:
- name: local
run_list:
- recipe[my_cookbook::default]
verifier:
inspec_tests:
- test/integration/default