aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2024-01-13Manage netperf namespace to enforce baselineCédric Ollivier1-2/+24
Change-Id: If74322d583d9f16478aad8dcda6afa2368ff5482 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit a2abab6871ef68435f5c4b3f5579e31ba40b5b3f)
2024-01-13Apply privileged pod security standard to kube-benchCédric Ollivier1-1/+3
Change-Id: I0336d73f8a9663ef259adfe4377ce20499844021 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 1bd69d63994d66582f4e7967e4a1f703dc247c69)
2024-01-13Enforce baseline Pod Security StandardCédric Ollivier2-2/+4
It allows running both security and ims testcases vs clusters where PodSecurityConfiguration enforces "restricted" [1]. [1] https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/ Change-Id: I9eb420cbb695ec8fb002f25cfd3c96ab50118fcc Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 553d57ffd4ff9c3c4f319454a4d190ac7aa4cc76)
2024-01-12Apply PR " Enforce baseline Pod Security Standard with namespace labels"Cédric Ollivier2-2/+44
It's needed for any Cluster where PodSecurityConfiguration enforces "restricted" [1]. [1] https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/ Change-Id: I9df12654d09390353a898030314a3fda9074b0d5 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 05656f790feab78bb02b6ed0e3b11048eea39901)
2024-01-12Remove Hostpath testingCédric Ollivier1-25/+0
It's against Security Standards as explained in [1]. "Using the hostPath volume type presents many security risks. If you can avoid using a hostPath volume, you should." It basically asks for the profile Privileged "pod-security.kubernetes.io/enforce": "privileged [1] https://kubernetes.io/docs/concepts/storage/volumes/#hostpath Change-Id: I89e35f11ab7917b904ac474401bf609ad9c5dd3d Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 50859e8c92a39b87ad91f14d01908a259a0602ce)
2024-01-09Updated from global requirementsCédric Ollivier1-3/+3
Change-Id: I51f9d4b6266150d02438e3dd2cf42f86a6469176 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit eaea540c2f3a19ba13b69c3624f2d26c15d0f875)
2024-01-09Fix git urlCédric Ollivier1-1/+1
Change-Id: I7c774ccc027feae75fa1623545ea8ef7af50ccc9 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit f01d93b5abe20f6b1402d3b8fdc02c1dc772b90d)
2024-01-09Fix pylint issues in netperfCédric Ollivier1-2/+3
Change-Id: I47eac42fd30e857e2a94a7b5caa5850b3c7c9196 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit e98c46bdcc7087b55ce0339111c7bedc450e94b0)
2024-01-09Make ansible/site.gate.yml up-to-dateCédric Ollivier1-5/+7
Change-Id: I4607bc297e21e569af6e80a4ac6a0e6aec68ec33 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2024-01-09Remove tox pip_version in tox.iniCédric Ollivier1-1/+0
Change-Id: Iafae57b729650e70c084f98abafc6645174a893e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit fddcb581e3f1ab10481eeb6b3a739567df2ddd61)
2023-12-22Help Debugging when e2e result parsing failsCédric Ollivier1-4/+11
Change-Id: I7f153b0ddef25b0317d8e9a8b2dad55ab580b388 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit da0f27e6cc0a416e3a3a89639b7280836daf296d)
2023-12-22Print netperf logs in console if exceptionCédric Ollivier1-2/+4
Change-Id: I7ea76aaa595ba7716d4a355f8a1f2d73c2af3ae8 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 10d72a2e5c8a78cde617d2c10fa0ea46d90f6924)
2023-12-21Protect vs CNF TestSuite instabilitiesCédric Ollivier1-0/+1
Change-Id: I8e714abe603180d69a363e4293f44bb3c5cd1255 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 36915488c21d42a112298c3a52fc2b09d099486f)
2023-12-21Fix CNF TestSuite's log levelCédric Ollivier1-3/+3
Change-Id: I9a7e1a9d17fd575b7e6077d8ccf5dd5d1a259717 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 75db5520f3fffc0e3b5cae2eead6179a44d91da9)
2023-12-20Exit if early failure in cnf_testsuiteCédric Ollivier1-7/+23
Change-Id: I3a6a264a73bdc73c1c90471948316d216cf6ad98 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 65780898fb6c3d4d7131916a6a6e342f3557b685)
2023-12-18Skip Feature:add node log viewerCédric Ollivier1-0/+1
It was reverted next release (and it's an alpha feture) https://github.com/kubernetes/kubernetes/commit/407bd6a4afa5f7d7cb2a596dda09cacc30828f09 Change-Id: I524e63bec640204e0da036007dd91e9c022b1ab4 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-12-15Put SELinux regex in the right testcaseCédric Ollivier1-1/+2
Change-Id: I42893382178ba53a249ad6e4e7b6eb613c94f9f1 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-12-15Skip SELinux tests by defaultCédric Ollivier1-0/+1
https://github.com/kubernetes-csi/csi-release-tools/pull/208/commits/36e433e2aaaaf96b3257812cecd9bc55a1f71999 Change-Id: I80293c3a4456979970b88ab7cb8dca36f6a6b5fe Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-12-15Skip all Feature:DynamicResourceAllocation testsCédric Ollivier1-0/+1
It's alpha in v1.26 and v1.27. https://kubernetes.io/docs/concepts/scheduling-eviction/dynamic-resource-allocation/ Change-Id: I0216241d3e08a828ca92f0c21ed4c1439d09a8c8 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-12-08Update cnf testsuite to v0.45.0Cédric Ollivier1-1/+1
Change-Id: I6abd724b2dd4ce8fa014fe9167e853f2d300e4c7 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit dc1ee47accf9c188e1f309479f5906afb693648c)
2023-12-08Make xtesting owner of /src/cnf-testsuiteCédric Ollivier1-0/+1
Change-Id: I8e2d50e8b3af829181d8f9f2a0fcb944d83797e0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-12-07netperf csv output dir must be writableCédric Ollivier1-6/+7
It changes working dir in a writable one. Change-Id: I358233cff30c35da0d04921ac0521645a00b2656 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 677e872910555585f0400e99585d821491cd1c43)
2023-12-05Enforce pip's legacy-resolverCédric Ollivier1-1/+1
Change-Id: Id0b97782db354cfa66656746ee03f102b5c4d6e3 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit e085945c2c9ae516d0cacf09cc5fe42440f339f6) (cherry picked from commit 4574f026ad4c979cf5f258783da446c9b38b40f9)
2023-12-05k8s.gcr.io -> registry.k8s.ioCédric Ollivier1-1/+1
https://kubernetes.io/blog/2022/11/28/registry-k8s-io-faster-cheaper-ga/ https://kubernetes.io/blog/2023/03/10/image-registry-redirect/ Change-Id: Ibae7149b6da15aa18f536d9ffdf09d155b591692 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 4f21ac9faf95be6216ddb2b564a6ca4fc6e3f53c)
2023-12-05Add Alpine gcompat packageCédric Ollivier1-1/+2
Change-Id: Iaecbb67b6042197cd8a6f7657b6f348e3bf0b13c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 41ca9d7f98eead4bcdcf36211130c84b11e78f47)
2023-12-04Remove PyYaml from upper constraintsCédric Ollivier2-8/+5
It doesnt compile because of cython Change-Id: I6e1c531a2f7b3384bc4a5256120d917dec7c43c6 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 0f6720448bd99fd9b732f124da1a1272ee331589)
2023-10-23Allow building Functest Kubernetes Virtual MachinesCédric Ollivier2-0/+15
Change-Id: I0a18096fc10547423baf6282e3eb9f4d96cd8473 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-05-05Set xtesting as owner of rally filesCédric Ollivier1-2/+2
Change-Id: I35658a469e3b54973d24959a0771e8fa749136ee Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-03-20Run pre-commit in the Functest K8s gatesCédric Ollivier3-0/+20
Change-Id: I3957dbde922d8ed8edc47d5cf1aee1475f117836 Co-authored-by: Guillaume Lambert <guillaume.lambert@orange.com> Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 8bd1c09890c7c1fff392572de709a0ccc6a283b6)
2023-03-02Fix url typo in READMECédric Ollivier1-1/+1
Co-authored-by Peter Pongracz <peter.1.pongracz@nokia.com> Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> Change-Id: Idd4c0fccae145ab5fd4a4dbb45346dd1d30de23b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit c99d1bc1af18ec3c717dd74faae962f0303dff1b)
2023-01-27Update kube_bench versionCédric Ollivier2-2/+2
Change-Id: I67bf1b11e81228aa7461f9ba2477c235d4ab8034 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-01-23Prepare Functest K8s v1.26 releaseCédric Ollivier15-57/+72
Change-Id: I1e542daeaabfefe5d4df8f81746b2ac6d35bc612 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2023-01-23Fix letter is lowercase in repositories.ymlCédric Ollivier1-12/+12
Co-authored-by: Peter Pongracz <peter.1.pongracz@nokia.com> Change-Id: I78be8192239cad58b25449c106da3e1f558bf13b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit d17ec335dc198c17e0bf167350f154ec64876d58)
2023-01-23Set defaultbranch=stable/v1.26 in .gitreviewCédric Ollivier1-0/+1
Change-Id: Id591c2fc28e11e36722caf0a9f2647ae25875033 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-25Use new kubeconfig path in README.mdCédric Ollivier1-5/+5
Change-Id: I1cee2d1ff47a1ab4f79c08d7dc00eb2ab8e6507e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-21Use Path.home() instead of ~Cédric Ollivier2-2/+4
Change-Id: I5863f4e0315b67a07dab4756857dba7aa37932f0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-21Stop hardcoding KUBECONFIGCédric Ollivier2-2/+2
Change-Id: I6ac15eb3686d6502dfa1bbe179622693b1961f45 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-21Create /var/lib/xtestingCédric Ollivier1-0/+1
Change-Id: I8947b683731a98066bffb47bb49afaa636901446 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-21Use the new homedirCédric Ollivier1-1/+1
Change-Id: Iaf6161cb3d7379f50702e3f412c233200bcdfae1 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-21Stop using root in testing containersCédric Ollivier4-0/+9
It now creates and leverages xtesting as main user. Change-Id: I5b871ac2729a875674514aab75ae079e1bf125f5 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-20Fix tox listCédric Ollivier0-0/+0
Change-Id: Ie028f15f2154a9dcb8b6613bff439a10860dc946 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-20Fix tox listCédric Ollivier2-12/+10
Change-Id: Ie996cbf5751e757cedf79d03f3a9b2649183f250 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-20Update to Alpine 3.16Cédric Ollivier5-20/+15
Change-Id: Ib630178c93d4a991f43611796e0c07975ce421ec Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-20Update release tabsCédric Ollivier1-5/+5
It takes latest releases into account Change-Id: Idd27a9e3df8d58c41417e7b9ca60d679fb0c4ebd Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-17cnf conformance now returns non zero valuesCédric Ollivier1-10/+5
Change-Id: I61cb69ef48b113571f791c7ee2ef7387c7421f32 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-17Use cnf certifaction criteriaCédric Ollivier2-5/+7
Change-Id: I7362827b600914ab032ba9657ac17e7bb157bdfc Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-17Update cnf_testsuite v0.34.0Cédric Ollivier2-5/+6
It now runs cert (replacing workload) It downgrades msg to warning as cnf_testsuite now returns non 0 values. Change-Id: I0ce4f201065bf601111d7154cb4afa31e9a4666c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 4338a2532600e659179335a5f5f71ab15f83f8d7)
2022-10-14By default just print all vulnerabilitiesCédric Ollivier2-12/+5
It's the behavior expected by RA2. Please change it via testcases.yaml if needed. Change-Id: I84b02fa273f63ea1930bd356739243756032533d Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-10Uninstall falco and cri_tools after testingCédric Ollivier1-4/+6
Functest runs several clusters in the same server. It quickly failes if falco is still running (dkms tries to unload the module which is in-use). Change-Id: I13b596a78ac40064cbed1aead8c785cc1cfc8626 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2022-10-06Update kube bench test cases to latest devCédric Ollivier4-8/+121
Change-Id: I6edcfcced84d46a06933f4a5dc1702cfa90e3f9a Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>