aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2024-01-16Enforce baseline psp for cnf_testsuiteCédric Ollivier2-2/+21
It would be better not to change the default namespace. Change-Id: I9fde052d4dd7e0e4f6551213e2028c91c0296e42 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit d0b8d65cdea15ef7fc0a431add4701ac817da5f2)
2024-01-13Manage netperf namespace to enforce baselineCédric Ollivier1-2/+24
Change-Id: If74322d583d9f16478aad8dcda6afa2368ff5482 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit a2abab6871ef68435f5c4b3f5579e31ba40b5b3f)
2024-01-13Apply privileged pod security standard to kube-benchCédric Ollivier1-1/+3
Change-Id: I0336d73f8a9663ef259adfe4377ce20499844021 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 1bd69d63994d66582f4e7967e4a1f703dc247c69)
2024-01-13Enforce baseline Pod Security StandardCédric Ollivier2-2/+4
It allows running both security and ims testcases vs clusters where PodSecurityConfiguration enforces "restricted" [1]. [1] https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/ Change-Id: I9eb420cbb695ec8fb002f25cfd3c96ab50118fcc Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 553d57ffd4ff9c3c4f319454a4d190ac7aa4cc76)
2024-01-12Apply PR " Enforce baseline Pod Security Standard with namespace labels"Cédric Ollivier2-2/+44
It's needed for any Cluster where PodSecurityConfiguration enforces "restricted" [1]. [1] https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/ Change-Id: I9df12654d09390353a898030314a3fda9074b0d5 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 05656f790feab78bb02b6ed0e3b11048eea39901)
2024-01-12Remove Hostpath testingCédric Ollivier1-25/+0
It's against Security Standards as explained in [1]. "Using the hostPath volume type presents many security risks. If you can avoid using a hostPath volume, you should." It basically asks for the profile Privileged "pod-security.kubernetes.io/enforce": "privileged [1] https://kubernetes.io/docs/concepts/storage/volumes/#hostpath Change-Id: I89e35f11ab7917b904ac474401bf609ad9c5dd3d Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 50859e8c92a39b87ad91f14d01908a259a0602ce)
2024-01-09Updated from global requirementsCédric Ollivier1-3/+3
Change-Id: I51f9d4b6266150d02438e3dd2cf42f86a6469176 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit eaea540c2f3a19ba13b69c3624f2d26c15d0f875)
2024-01-09Fix git urlCédric Ollivier1-1/+1
Change-Id: I7c774ccc027feae75fa1623545ea8ef7af50ccc9 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit f01d93b5abe20f6b1402d3b8fdc02c1dc772b90d)
2024-01-09Fix pylint issues in netperfCédric Ollivier1-2/+3
Change-Id: I47eac42fd30e857e2a94a7b5caa5850b3c7c9196 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit e98c46bdcc7087b55ce0339111c7bedc450e94b0)
2024-01-09Make ansible/site.gate.yml up-to-dateCédric Ollivier1-5/+7
Change-Id: I4607bc297e21e569af6e80a4ac6a0e6aec68ec33 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2024-01-09Remove tox pip_version in tox.iniCédric Ollivier1-1/+0
Change-Id: Iafae57b729650e70c084f98abafc6645174a893e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit fddcb581e3f1ab10481eeb6b3a739567df2ddd61)
2023-12-22Print netperf logs in console if exceptionCédric Ollivier1-2/+4
Change-Id: I7ea76aaa595ba7716d4a355f8a1f2d73c2af3ae8 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 10d72a2e5c8a78cde617d2c10fa0ea46d90f6924)
2023-12-22Help Debugging when e2e result parsing failsCédric Ollivier1-4/+11
Change-Id: I7f153b0ddef25b0317d8e9a8b2dad55ab580b388 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit da0f27e6cc0a416e3a3a89639b7280836daf296d)
2023-12-21Protect vs CNF TestSuite instabilitiesCédric Ollivier1-0/+1
Change-Id: I8e714abe603180d69a363e4293f44bb3c5cd1255 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 36915488c21d42a112298c3a52fc2b09d099486f)
2023-12-21Fix CNF TestSuite's log levelCédric Ollivier1-3/+3
Change-Id: I9a7e1a9d17fd575b7e6077d8ccf5dd5d1a259717 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 75db5520f3fffc0e3b5cae2eead6179a44d91da9)
2023-12-20Exit if early failure in cnf_testsuiteCédric Ollivier1-7/+23
Change-Id: I3a6a264a73bdc73c1c90471948316d216cf6ad98 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 65780898fb6c3d4d7131916a6a6e342f3557b685)
2023-12-20Update cnf testsuite to v0.45.0Cédric Ollivier1-1/+1
Change-Id: I6abd724b2dd4ce8fa014fe9167e853f2d300e4c7 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit dc1ee47accf9c188e1f309479f5906afb693648c)
2023-12-08k8s.gcr.io -> registry.k8s.ioCédric Ollivier1-1/+1
https://kubernetes.io/blog/2022/11/28/registry-k8s-io-faster-cheaper-ga/ https://kubernetes.io/blog/2023/03/10/image-registry-redirect/ Change-Id: Ibae7149b6da15aa18f536d9ffdf09d155b591692 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 4f21ac9faf95be6216ddb2b564a6ca4fc6e3f53c) (cherry picked from commit fd01d14673e8eff2f607e691c58529d06309c9ee)
2023-12-08Add Alpine gcompat packageCédric Ollivier1-1/+2
Change-Id: Iaecbb67b6042197cd8a6f7657b6f348e3bf0b13c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 41ca9d7f98eead4bcdcf36211130c84b11e78f47)
2023-12-08Make xtesting owner of /src/cnf-testsuiteCédric Ollivier1-0/+1
Change-Id: I8e2d50e8b3af829181d8f9f2a0fcb944d83797e0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-12-07Enforce pip's legacy-resolverCédric Ollivier1-1/+1
Change-Id: Id0b97782db354cfa66656746ee03f102b5c4d6e3 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit e085945c2c9ae516d0cacf09cc5fe42440f339f6)
2023-12-07Remove PyYaml from upper constraintsCédric Ollivier2-8/+5
It doesnt compile because of cython Change-Id: I6e1c531a2f7b3384bc4a5256120d917dec7c43c6 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 0f6720448bd99fd9b732f124da1a1272ee331589)
2023-12-07netperf csv output dir must be writableCédric Ollivier1-6/+7
It changes working dir in a writable one. Change-Id: I358233cff30c35da0d04921ac0521645a00b2656 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 677e872910555585f0400e99585d821491cd1c43)
2023-10-23Allow building Functest Kubernetes Virtual MachinesCédric Ollivier2-0/+15
Change-Id: I0a18096fc10547423baf6282e3eb9f4d96cd8473 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 049f674dd8a1b0e16ba8b37df72f936d8d0f0e5b)
2023-05-05Set xtesting as owner of rally filesCédric Ollivier1-2/+2
Change-Id: I35658a469e3b54973d24959a0771e8fa749136ee Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-03-20Run pre-commit in the Functest K8s gatesCédric Ollivier3-0/+20
Change-Id: I3957dbde922d8ed8edc47d5cf1aee1475f117836 Co-authored-by: Guillaume Lambert <guillaume.lambert@orange.com> Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 8bd1c09890c7c1fff392572de709a0ccc6a283b6)
2023-03-02Fix url typo in READMECédric Ollivier1-1/+1
Co-authored-by Peter Pongracz <peter.1.pongracz@nokia.com> Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> Change-Id: Idd4c0fccae145ab5fd4a4dbb45346dd1d30de23b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit c99d1bc1af18ec3c717dd74faae962f0303dff1b)
2023-01-24Update README.mdCédric Ollivier2-1/+5
It take latest updates into account. Change-Id: I0a6af492c99cb49c326734c061b7934ea7a12127 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 142bc4a751bf5568cd0bb13c8550959f9a0b83c2)
2023-01-23Fix letter is lowercase in repositories.ymlCédric Ollivier1-12/+12
Co-authored-by: Peter Pongracz <peter.1.pongracz@nokia.com> Change-Id: I78be8192239cad58b25449c106da3e1f558bf13b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit d17ec335dc198c17e0bf167350f154ec64876d58)
2022-10-25Use new kubeconfig path in README.mdCédric Ollivier1-5/+5
Change-Id: I1cee2d1ff47a1ab4f79c08d7dc00eb2ab8e6507e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit f6eba4b5b93b994a6773867fdb123c2c34a56415)
2022-10-21Use Path.home() instead of ~Cédric Ollivier2-2/+4
Change-Id: I5863f4e0315b67a07dab4756857dba7aa37932f0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit d744fb5276d47fb3ba7ad2d4cb1fb2d3bfaca3eb)
2022-10-21Stop hardcoding KUBECONFIGCédric Ollivier2-2/+2
Change-Id: I6ac15eb3686d6502dfa1bbe179622693b1961f45 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit abcc9aa9e57a8af8e4479f897a77c22b16324f6a)
2022-10-21Create /var/lib/xtestingCédric Ollivier1-0/+1
Change-Id: I8947b683731a98066bffb47bb49afaa636901446 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 59f27f97aaba00efb937b00494e42d79074d5055)
2022-10-21Use the new homedirCédric Ollivier1-1/+1
Change-Id: Iaf6161cb3d7379f50702e3f412c233200bcdfae1 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 7c1a48eec52a131fd3702e759e67509939c48532)
2022-10-21Remove nosetestsCédric Ollivier2-8/+9
Change-Id: I13babcba37e7f3ce54b0ae38bd84ed2ee12ee935 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-21Stop using root in testing containersCédric Ollivier5-3/+9
It now creates and leverages xtesting as main user. Change-Id: I5b871ac2729a875674514aab75ae079e1bf125f5 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit b1e22e37cc436451b3519a0ef7f9704b5a86f9cc)
2022-10-20Fix tox listCédric Ollivier0-0/+0
Change-Id: Ie996cbf5751e757cedf79d03f3a9b2649183f250 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-20Update to Alpine 3.16Cédric Ollivier5-22/+17
Change-Id: Ib630178c93d4a991f43611796e0c07975ce421ec Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 651fbe30a574fde8c62e7b73b3f05e40fba6e58b)
2022-10-20Fix all Ansible playbooksCédric Ollivier3-0/+9
Change-Id: Ic267835da8f1b5a9ae11c7bbf604dd2237e48cab Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-20Update release tabsCédric Ollivier1-14/+14
It takes latest releases into account Change-Id: Idd27a9e3df8d58c41417e7b9ca60d679fb0c4ebd Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-17cnf conformance now returns non zero valuesCédric Ollivier1-10/+5
Change-Id: I61cb69ef48b113571f791c7ee2ef7387c7421f32 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit f0ebad3e5b23350483929a2a881f89d0f2822f5e)
2022-10-17Use cnf certifaction criteriaCédric Ollivier2-5/+7
Change-Id: I7362827b600914ab032ba9657ac17e7bb157bdfc Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-17Update cnf_testsuite v0.34.0Cédric Ollivier2-5/+6
It now runs cert (replacing workload) It downgrades msg to warning as cnf_testsuite now returns non 0 values. Change-Id: I0ce4f201065bf601111d7154cb4afa31e9a4666c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-14By default just print all vulnerabilitiesCédric Ollivier2-12/+5
It's the behavior expected by RA2. Please change it via testcases.yaml if needed. Change-Id: I84b02fa273f63ea1930bd356739243756032533d Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit cf40e38be4d85c235a9d85a15f7fa326ebf356e6)
2022-10-10Uninstall falco and cri_tools after testingCédric Ollivier1-4/+6
Functest runs several clusters in the same server. It quickly failes if falco is still running (dkms tries to unload the module which is in-use). Change-Id: I13b596a78ac40064cbed1aead8c785cc1cfc8626 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-06Pin netperf toolsCédric Ollivier1-2/+2
Change-Id: I36dde21d9af2cc7d96be4a8f0947d94491ae00c6 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-06Update kube bench test cases to latest devCédric Ollivier3-7/+120
Change-Id: I6edcfcced84d46a06933f4a5dc1702cfa90e3f9a Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 5926e9d259cf7f0c620aaa18aa2dc55a4c0208f5)
2022-10-06Update hube-hunterCédric Ollivier1-2/+2
Change-Id: I41e9a4a95a53bf51286951db2911475a8d2dd3a9 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 06eb071ee719c015f696ed6c0a685926a8a0ae62)
2022-10-04Disable new testing Feature UserNamespacesStatelessPodsSupportCédric Ollivier1-0/+1
All new features are defacto optional until RA2 changes its status. Change-Id: I23456ec525c728719cd01533122d6c79c2617631 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 21f327dbcb465d64dadb1c8e717a3b4ec99403cd)
2022-09-30Complete Alpine 3.15 updateCédric Ollivier1-1/+1
Change-Id: I7cd5c8b22634af52d494b8a8d1eedb158f42d288 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>