google_compute_instance_groups.md

title	platform
About the google_compute_instance_groups Resource	gcp

google_compute_instance_groups

Use the google_compute_instance_groups InSpec audit resource to test properties of all, or a filtered group of, GCP compute instance groups for a project in a particular zone.

Syntax

A google_compute_instance_groups resource block collects GCP instance groups by project and zone, then tests that group.

describe google_compute_instance_groups(project: 'chef-inspec-gcp') do
  it { should exist }
end

Use this InSpec resource to enumerate IDs then test in-depth using google_compute_instance_group.

google_compute_instance_groups(project: 'chef-inspec-gcp').instance_group_names.each do |instance_group_name|
  describe google_compute_instance_group(project: 'chef-inspec-gcp',  instance_group: instance_group_name) do
    it { should exist }
  end
end

Examples

The following examples show how to use this InSpec audit resource.

Test that there are no more than a specified number of instance groups available for the project

describe google_compute_instance_groups(project: 'chef-inspec-gcp') do
  its('count') { should be <= 100}
end

Test that an expected instance_group is available for the project

describe google_compute_instance_groups(project: 'chef-inspec-gcp', zone: 'europe-west2-a') do
  its('instance_group_names') { should include "my-instance-group-name" }
end

Test that a subset of all instance_groups matching "mig*" have size greater than zero

google_compute_instance_groups(project: 'chef-inspec-gcp', zone: 'europe-west2-a').where(instance_group_name: /^mig/).instance_group_names.each do |instance_group_name|
  describe google_compute_instance_group(project: 'chef-inspec-gcp', zone: 'europe-west2-a', name: instance_group_name) do
    it { should exist }
    its('size') { should be > 0 }
  end
end

Filter Criteria

This resource supports the following filter criteria: instance_group_id and instance_group_name. Any of these may be used with where, as a block or as a method.

Properties

• instance_group_ids - an array of google_compute_instance_group identifier integers
• instance_group_names - an array of google_compute_instance_group name strings

GCP Permissions

Ensure the Compute Engine API is enabled for the project where the resource is located.