terraplate VS goss

I won't be able to share the Terraform files (customer work), but we use the AWS EKS module for the clusters, and our own quite specific modules, and then use Terraplate (a project I authored) to keep the Terraform configs dry.

People have been solving the DRY problem for many years. Terragrunt probably being the most well-known tool for it. I am working on a project Terraplate to solve this whilst keeping vanilla terraform and allowing me to use Terraform Cloud.

This is a problem me and my colleagues keep coming across and we were using Terragrunt fairly successfully. We have recently been working on a simple templating tool to keep everything DRY and as vanilla Terraform, called Terraplate: https://github.com/verifa/terraplate

Certain checks may be possible with goss and the kgoss wrapper: https://github.com/goss-org/goss/tree/master/extras/kgoss

Docker would work. I suggest also integrating infrastructure tests to validate your install script behaved as expected. For example, you could use goss.

I've used https://github.com/goss-org/goss in the past and enjoyed it

To answer my own question... https://github.com/goss-org/goss looks like it might do the job - at least for Linux. Windows support is alpha - and there isn't a wealth of CIS benchmarks. Might be a good project to contribute to

Adding an extra layer of security on the container image to verify if it is working as expected and has all required files with correct permissions. We can use dgoss to do validation tests of container images.

Bit of a strange one here - Goss. This is a testing tool that we use on all of our servers to validate they are working as expected. Think of it as a sanity check after changes. We have a set of tests setup that validate that the server is working as expected and we run it automatically after any change.

check out https://github.com/aelsabbahy/goss

Use GOSS, a YML-based open-source tool that can assert the test results (i.e., verifying if the SSH port 22 is closed or not).