Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for additional parameters in inspect GCS bucket #172

Open
raghuvennam opened this issue Aug 24, 2019 · 3 comments
Open

Support for additional parameters in inspect GCS bucket #172

raghuvennam opened this issue Aug 24, 2019 · 3 comments

Comments

@raghuvennam
Copy link

As a devops engineer I would like to check for all the options that can be set on a GCS bucket to be validated via inspect tests

Detailed Description

As a devops engineer I would like to check for all the configuration options that can be set on a GCS bucket such as versioning enabled, labels added, bucket polcies set and customer managed keys (if enabled) so all of these can be tested using inspec tests in a cicd pipeline and report on any exceptions.

Context

This is a very important feature as the current specs which are available are very limited and does not cover all the additional options

Possible Implementation

Add as new property feature to the GCS resource in inspec for GCP:
https://www.inspec.io/docs/reference/resources/google_storage_bucket/

@raghuvennam
Copy link
Author

@binamov can you help get these additional options generated using the magic modules

@binamov
Copy link
Collaborator

binamov commented Aug 27, 2019

The GCS resource is dynamic and can already handle checking for anything represented by the resource as here https://cloud.google.com/storage/docs/json_api/v1/buckets#resource-representations , see this comment #169 (comment)

This could be better documented @skpaterson
This is similar to #169 @slevenick it may be worth considering MMing this resource

@slevenick
Copy link
Collaborator

This resource is now generated. Many of these fields are available with the resource as of the 1.0 release. See https://github.com/inspec/inspec-gcp/blob/master/docs/resources/google_storage_bucket.md

Are there other fields that you are unable to access?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants