Infrastructure testing - it's a real thing!
summary
Demonstrates concrete infra testing: uses Pulumi to write unit, integration and an expanded security-heavy testing pyramid, with examples that assert an S3 bucket’s exact name, region (eu-west-1) and private ACL and an EKS cluster’s Kubernetes version and non-default VPC. Shows mock the cloud mode so tests run in milliseconds without AWS creds, and enforces policies via policy-as-code (advisory/mandatory) to block public buckets and open port 22. Demos fail fast and produce CI-ready exit codes.
AI-written summary · about
chapters (13)
- 0:00Start
- 0:11Mocks and Stubs
- 0:59Testing Pyramid
- 2:31Rise of Infrastructure Testing
- 5:40Embedding Security Tests
- 10:45Bdd Style Testing
- 11:29Spec Runner
- 14:09Gdpr
- 17:52Run Tests
- 28:43Security Style Tests
- 31:48Do You Always Look at the Output of Your Terraform Plan
- 35:54S3 Infrastructure
- 38:57Compute Rules
related talks
47mInfrastructure Testing explained
52mTest Driven Delivery of Infrastructure-As-Code
36mBuild infrastructure as a code (IaC) using test-later...
32mWe Still Need to Talk About Infrastructure Testing
42mInfrastructure as Code Programs: How to Test, Finally
37mInfraCoding with Terraform: Writing Tests for Infrastructure-as-Code
28mFrom Monitoring to Automated Testing of Your Infrastructure Code
35mTesting in Infrastructure as Code