aboutsummaryrefslogtreecommitdiffstats
path: root/docker/security
diff options
context:
space:
mode:
authorCédric Ollivier <cedric.ollivier@orange.com>2021-04-02 09:52:38 +0200
committerCédric Ollivier <cedric.ollivier@orange.com>2021-04-02 09:52:38 +0200
commit4004d776b01a1b038df52ca45b18430da1b6b1f5 (patch)
tree37048aff908d2c24a882a6eeff7d3520c0479d68 /docker/security
parent17929b0d015034bad2796fb733627fe5b23bbb2d (diff)
Properly manage e2e parallel testing
It sets nodes=25 to run all tests in parallel. It also beautifies all testcases.yml Change-Id: I3ecd8899e957c0efbef34ab0409c2b4d557c9425 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
Diffstat (limited to 'docker/security')
-rw-r--r--docker/security/testcases.yaml80
1 files changed, 38 insertions, 42 deletions
diff --git a/docker/security/testcases.yaml b/docker/security/testcases.yaml
index c4f7e69b..7af54a3f 100644
--- a/docker/security/testcases.yaml
+++ b/docker/security/testcases.yaml
@@ -1,47 +1,43 @@
---
tiers:
- -
- name: security
+ - name: security
+ description: >-
+ Set of basic security tests.
+ testcases:
+ - case_name: kube_hunter
+ project_name: functest
+ criteria: 100
+ blocking: false
description: >-
- Set of basic security tests.
- testcases:
- -
- case_name: kube_hunter
- project_name: functest
- criteria: 100
- blocking: false
- description: >-
- Check that the kubernetes cluster has no known
- vulnerabilities
- run:
- name: kube_hunter
- args:
- severity: high
+ Check that the kubernetes cluster has no known
+ vulnerabilities
+ run:
+ name: kube_hunter
+ args:
+ severity: high
- -
- case_name: kube_bench_master
- project_name: functest
- criteria: 100
- blocking: false
- description: >-
- Checks whether Kubernetes is deployed securely by running
- the master checks documented in the CIS Kubernetes
- Benchmark.
- run:
- name: kube_bench
- args:
- target: master
+ - case_name: kube_bench_master
+ project_name: functest
+ criteria: 100
+ blocking: false
+ description: >-
+ Checks whether Kubernetes is deployed securely by running
+ the master checks documented in the CIS Kubernetes
+ Benchmark.
+ run:
+ name: kube_bench
+ args:
+ target: master
- -
- case_name: kube_bench_node
- project_name: functest
- criteria: 100
- blocking: false
- description: >-
- Checks whether Kubernetes is deployed securely by running
- the node checks documented in the CIS Kubernetes
- Benchmark.
- run:
- name: kube_bench
- args:
- target: node
+ - case_name: kube_bench_node
+ project_name: functest
+ criteria: 100
+ blocking: false
+ description: >-
+ Checks whether Kubernetes is deployed securely by running
+ the node checks documented in the CIS Kubernetes
+ Benchmark.
+ run:
+ name: kube_bench
+ args:
+ target: node