diff options
| author |   Cédric Ollivier <cedric.ollivier@orange.com> | 2024-01-12 21:00:04 +0100 |
|---|---|---|
| committer | Cédric Ollivier <cedric.ollivier@orange.com> | 2024-01-12 22:23:27 +0100 |
| commit | f62c36f8f2014159202f181e6c899151026d4123 (patch) | |
| tree | 3f108bc9458ede26261407c893018a1d389867b4 /functest_kubernetes | |
| parent | 1e051c3182deedd97eee3a8bc87cefbce4ec13cb (diff) | |
Remove Hostpath testing
It's against Security Standards as explained in [1].
"Using the hostPath volume type presents many security risks.
If you can avoid using a hostPath volume, you should."
It basically asks for the profile Privileged
"pod-security.kubernetes.io/enforce": "privileged
[1] https://kubernetes.io/docs/concepts/storage/volumes/#hostpath
Change-Id: I89e35f11ab7917b904ac474401bf609ad9c5dd3d
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
(cherry picked from commit 50859e8c92a39b87ad91f14d01908a259a0602ce)
Diffstat (limited to 'functest_kubernetes')
| -rw-r--r-- | functest_kubernetes/rally/all-in-one.yaml | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/functest_kubernetes/rally/all-in-one.yaml b/functest_kubernetes/rally/all-in-one.yaml index db30194e..380666d9 100644 --- a/functest_kubernetes/rally/all-in-one.yaml +++ b/functest_kubernetes/rally/all-in-one.yaml @@ -166,31 +166,6 @@ subtasks: count: {{ namespaces_count }} with_serviceaccount: true - - title: >- - Run a single workload with create/read/check/delete pod with hostPath - volume - scenario: - Kubernetes.create_and_delete_pod_with_hostpath_volume: - image: {{ dockerhub_repo }}/busybox:1.28 - command: - - sleep - - "3600" - mount_path: /opt/check - check_cmd: - - ls - - /opt/check - error_regexp: No such file - volume_type: Directory - volume_path: /tmp/ - runner: - constant: - concurrency: {{ concurrency }} - times: {{ times }} - contexts: - namespaces: - count: {{ namespaces_count }} - with_serviceaccount: true - - title: Run a single workload with create/read/delete pod with configMap volume scenario: |