aboutsummaryrefslogtreecommitdiffstats
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2021-02-13Fix CVE-2020-8231Cédric Ollivier1-1/+1
https://build.opnfv.org/ci/view/functest-kubernetes-trivy/job/functest-kubernetes-opnfv-functest-kubernetes-benchmarking-iruya-trivy/2/console Change-Id: I3dac33ee5d292374f28ee7394324f5e27cd0e318 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 29daddcc6e5b8efb2acf51dfa92b3dd82b69c83a)
2021-02-13Fix CVE-2020-8231Cédric Ollivier1-0/+1
https://build.opnfv.org/ci/view/functest-kubernetes-trivy/job/functest-kubernetes-opnfv-functest-kubernetes-benchmarking-hunter-trivy/1/console Change-Id: Icd687fbc1f99a1a741271179dc2289cc884f1bdf Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit c9efbc79d9c7b23a90a85303d9fc8007bbc2bb60)
2021-02-10Upgrade system firstCédric Ollivier1-1/+2
Change-Id: I0120e6a368b033f2fb47257ff9dcc3fd8a58d243 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 9ebe47c8458c99066fd71a65007fff923004d209)
2021-01-10Update cnf-conformance to v0.9.19Cédric Ollivier1-5/+9
It also adds configs needed by resilience. https://github.com/cncf/cnf-conformance/releases/tag/v0.9.19 Change-Id: I94b1efc47c5ceef96bc8879a6c71f92db1f63bd2 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 7385caf54c27b471bda8599d491aa3aee21b7b89)
2020-11-22Allow offline testing via xrally_kubernetesCédric Ollivier2-2/+35
It locally patches xrally_kubernetes before [1] is merged upstream. It adds docker.io/appropriate/curl:edge in download_images.sh too. [1] https://github.com/xrally/xrally-kubernetes/pull/51 Co-Authored-By: Tamas Lendvay <tamas.lendvay@nokia.com> Change-Id: I82ea2c777cd4d8f24c38dbf32d66081846e3e9af Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit ea2715240015a482c5321d309257d801a412f02d)
2020-11-22Reduce cnf-conformance criteriaCédric Ollivier1-1/+1
It's considered as passed vs 95 out of 105 [1]. [1] http://artifacts.opnfv.org/functest-kubernetes/ACI2B7JDLFHI/functest-kubernetes-opnfv-functest-kubernetes-cnf-kali-cnf_conformance-run-16/functest-kubernetes.log Change-Id: Ib16927cf269784daba1085a3e97fb611e869928f Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 53b16e8f00e5a60db2e6db7f375bd06f184a5cc8)
2020-11-21Update cnf_conformance to v0.9.4Cédric Ollivier2-12/+13
It removes all hacks bypassing a few former bugs (e.g. [1]) and adapts to the new cnf-conformance result output logic. It runs all workload tests as it's now proposed (k8s conformance is already part of smoke) and select the latest coredns cnf-conformance.yml taking latest helm repo changes into account. It sets criteria 95 as all steps are considered as passed and a overall result 100/105. [1] https://github.com/cncf/cnf-conformance/issues/388 Change-Id: I95b7889b21b86961e7a1d0c84b13e0ae367cae44 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 854f164998793000fcf8019214b259b7283f5194)
2020-11-20Skip cnf_conformance till helm repos are fixedCédric Ollivier1-0/+1
Change-Id: Ie5b9aff6f56ca5cfd8501f142969f8a6246c4151 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 30a5a084fa9e0c8677d70d8b1d7a696ea06b49b9)
2020-09-16Publish helm_vims also based on clearwater-dockerCédric Ollivier2-9/+29
It leverages helm rather than kubectl as proposed by k8s_vims. A new abstract class Vims is added to factorize code between both testcases. Change-Id: Ie5de8d62e25e74f73f8e32167228a08e82989abd Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 32dfc10f56ead9abea8798e1ce16fe87652ca480)
2020-09-13Split kube-bench master and nodeCédric Ollivier1-6/+22
The former deployment asked for all-in-one. Change-Id: I12e470cec9e82b82c6f3ea5ff2431087f5deb9be Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit bced94b6fe24c7e939fb22834deb77477e4a9bb9)
2020-09-12Improve kube_bench outputCédric Ollivier1-0/+1
It also fills self.details. Change-Id: Ie73215ebcbd34de9d457fd364de4ab9cbdf64319 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 823b3a005ace9372a080421b2ae19152505201e4)
2020-09-12Enhance kube-hunter result postprocessingCédric Ollivier1-0/+2
It fills self.details and checks if the test case passes according to criteria (severity = high by default) Change-Id: Ib20779b4b5dca078c65b546c8703bc99856c6f41 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 4f197110710e9f148eae4533792e8e7e2d72f053)
2020-09-08Add musl-dev to build kubectl (arm64)Cédric Ollivier1-1/+1
Change-Id: Iddef5b35581ad70bf68d28df5f6c232a4e14cdfe Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-09-08Add gcc in cnf build deps (arm64)Cédric Ollivier1-1/+1
https://build.opnfv.org/ci/job/functest-kubernetes-cnf-docker-build-arm64-hunter/29/console Change-Id: I7edbb3b2e59a156cbfd8e0ec65de3528a0e8f5fd Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-09-07Fix K8s release in cnf/DockerfileCédric Ollivier1-5/+11
Change-Id: I1119bc9981c865d71260f2baa17678905d77255b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-09-06Revert focus in k8s_smokeCédric Ollivier1-1/+1
Change-Id: I59730369880f7c62937bd8c7f696cc2be584068a Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 15c0082df0c0f41e2f4c0525602c44de64dea9e0)
2020-09-06Decreate cnf-conformance criteriaCédric Ollivier1-1/+1
conf-confirmance is beta. Let's decrease criteria to allow gating [1]. [1] https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-cnf-latest-cnf_conformance-run/4/console Change-Id: I77068fd027b2ae042e0ff9574ed608c8a3d77ade Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 12d6bc18b178d4a8a4f64574bd6549341268645a)
2020-09-06Publish k8s_quick as proposed by sonobuoyCédric Ollivier1-1/+15
https://github.com/vmware-tanzu/sonobuoy Change-Id: I7b1777cf7bc0d6cd04ea5cccc08b7c29887ae874 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 711d9f1d875816386fd4afeb2e79f8d2de47b036)
2020-09-06Update Xtesting to 0.91.0Cédric Ollivier7-7/+2
Change-Id: I384478ec9a0926b168f2372c8007b3eceeadb6da Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit b198dcede7578b1c3bf688cd47cc0590dd8d6d14)
2020-09-04Allow skipping arm and arm64 if cnf-conformanceCédric Ollivier1-3/+5
cnf-conformance doesn't support this architectures. It also improve cleaning to publish artifacts [1]. [1] https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-cnf-latest-cnf_conformance-run/2/console Change-Id: Ie64e4a1b8b496a050a1798eaf4e5ef6397c011d0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 2cf6903c9a805b9c1b7702292bdf33b9485be319)
2020-09-04Add cnf-conformance in functest-kubernetes-cnfCédric Ollivier2-0/+28
It selects cnf-conformance v0.7.2-beta1 (current latest release) and the default CNF as proposed by [1]. The end user is free to override the default yml files on purpose (e.g. docker volumes). Tag (default: all) could be modified too via testcases.yaml [1] https://hackmd.io/@vulk/SkY54QnsU Change-Id: Iec2a830c441e523e067f6eb114ecb205c49c6b93 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 120daffd8d6d4be727d2ba52a76dbd8eacfe2628)
2020-08-22Add xrally_kubernetes_fullCédric Ollivier3-0/+35
It iterates 10 times all operations run by xrally_kubernetes. Now times, concurrenty and count can be set via testcases.yaml. It creates a new containers functest-kubernetes-benchamrking as Functest. Change-Id: Ibfd493b987a359a3f16c2d8db0aef6b8e90b7e92 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit a0f76d884c1f13c27e906136d3418f12b5342fc4)
2020-08-16Compile K8s testing binariesCédric Ollivier2-12/+17
We can't leverage on official testing binaries for this old release. Change-Id: Ia4165a30739fe8220c90c6ff3f437350eb3ead66 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-08-16Leverage alpine rather than golangCédric Ollivier1-1/+1
golang is now useless as we stop compiling kubernetes binaries. Change-Id: I7b9416281de069d1f454b13eff6e9e6107f7471e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 1af6a5dc4ec8e087613275e912c819ea1d0aecbc)
2020-08-16Fix arm -> arm64Cédric Ollivier1-1/+1
Change-Id: I3d7d16ec7d8a7712a279258f817d811f0d59187f Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit aa3d694b2c288521b6e3f96ea020a3ac485d4d14)
2020-08-16Stop compiling K8s testing binariesCédric Ollivier1-16/+11
It reaches Travis CI timeouts and is quite useless. PyNaCl is now installed via Alpine packages to save CI. Change-Id: Ifdf3f46f162a811ed95e3ca07ea7c3d89bc77a91 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 6801612e85c485e9885cfb41cbc84771475a134f)
2020-08-13Ease modifying the test list in E2E testingCédric Ollivier2-2/+7
It eases creating specific CNTT test cases based on K8s E2E testing. Change-Id: I304960fda760ffc47d763d53511898699f63e356 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit a22553a65d6019350c215c9024c9dc54cf77dc7c)
2020-08-11Remove GOFLAGS in DockerfileCédric Ollivier1-2/+2
Change-Id: Ifc6c63641b9512b4b930c1d7032cae55d2afb811 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit fac999583784f6e3b2c64294f2347fdf8a7a64f0)
2020-08-11Compile all Functest K8s containers for arm v7 and v8Cédric Ollivier1-2/+2
It removes sudo when useless and turns debug on when compiling K8s binaries. It avoids TravisCI timeouts (No output has been received)[1] [1] https://travis-ci.org/github/collivier/functest-kubernetes/jobs/716819529 Change-Id: I4719257596bf9a6510e2f772271b336847d1ccb5 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 3c4543a8ef6f84a5f25483a6dfe50e0075a9cd0e)
2020-07-07Remove energy from logging configsCédric Ollivier2-12/+2
Change-Id: I35c15aa68fe1afadcdbf3d391febb166358c90be Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 62b861884f55815e00b24f3aca6acb95e0f804b9) (cherry picked from commit 7af22940370f94002cbdd0aa6393bb8f3de2a8b2)
2020-07-07Publish debug logging configCédric Ollivier2-0/+71
Change-Id: I6a42fdeb20e0d549819c327e92e138c28dc927e1 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 7168abb7509750ece58fa501a56a8b1ebad2dbf8)
2020-07-06Update Rally patch (py27)Cédric Ollivier1-4/+5
Change-Id: I4e50ca32869280843e8b6a1146dd5fdb3ccad22e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-07-06Apply Rally patch (switch to threading for tasks)Cédric Ollivier2-1/+52
Change-Id: I8f4df2d4c220edc538c743cccce8050efe4a1140 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit bfd0063c81f5d5d4fad2389832c8f1479a28f73d) (cherry picked from commit fbac166c0010ac15835ba37260b94e3c705e339d)
2020-07-06Try a quick fix vs the race conditions in xrallyCédric Ollivier2-0/+35
Change-Id: I57a4c317ba365586c10b13d425aac021dd030949 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 81139b1576981990f32df76719f179441e4d12ee) (cherry picked from commit 2a2744f1e612a1ed0a38cadd2b49100613da70d6)
2020-07-06Add a new testcase leveraging on xrally/kubernetesCédric Ollivier2-0/+15
It partially runs the all-in-one task for checking basic functionality of Kubernetes cluster. Change-Id: Iaf7a29d2c1a364073e4caaeef69d68ee79ea56bc Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 413b52a98a359094dbc251749c04d2789e0ab24c)
2020-07-05Fix CNF Docker parentCédric Ollivier1-2/+2
Change-Id: Ieecc4298bc1861d123163d1ca48ef4a6ba045d0c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-07-04Deploy Clearwater IMS using KubernetesCédric Ollivier3-0/+30
The new testcase "k8s_vims" deploys and tests Clearwater IMS using Kubernetes. It follows the procedures proposed by clearwater-docker [1]. [1] https://github.com/Metaswitch/clearwater-docker Change-Id: I2fe3cd03a5dedfc61fbab294c53b4bc0b0fa70be Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 080d2414682d5fecea8c01640e2e5971278fe19d) (cherry picked from commit d56ecab65904d9a190f378262ad9bff48358a40e)
2020-07-01Fix project name in security's testcases.yamlCédric Ollivier1-2/+2
Change-Id: I7770873b2f7d61db05a9546631fdc2d4ddf3d20c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 2649efe3166ec1525f825bf21b63e6eb53aaaac6)
2020-07-01Add security docker for functest-kubernetesmrichomme3-2/+34
run kube-hunter and kube-bench cases dealing with security in kubernetes (check vulnerabilities) [1][2] It's the first step only printing the output. [1]: https://github.com/aquasecurity/kube-bench [2]: https://github.com/aquasecurity/kube-hunter Co-Authored-By: Cédric Ollivier <cedric.ollivier@orange.com> Change-Id: I3bd9bda80046ef7a0c494d51dfb0b8cbfea02bb0 Signed-off-by: mrichomme <morgan.richomme@orange.com> (cherry picked from commit 98d9f93337ab514fa9aafc1cd1e87473de68b364) (cherry picked from commit 0626f54b8686134515eab3b9014c5b538405d84f) (cherry picked from commit a7191389900b58f50e428af47e6819f30ba07d8f)
2020-06-08Remove cache dir and force /src as src dst dirCédric Ollivier1-1/+1
Change-Id: I43846aa04e9e9951fc55543b8d2d2fda7c39bb64 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 5169cd72511838af0cedd9ce6b5c3baba45d8f6c)
2019-12-14Update to K8S_TAG v1.13.12Cédric Ollivier1-1/+1
It updates to the latest K8s v1.13 version. Change-Id: I02966fe1f4eeeccdb1e1d71045596096a22f2c4a Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-11-16Add mailcap in dependenciesCédric Ollivier1-1/+1
It allows detecting mimetypes. Change-Id: Ieeae5e92142daab2ea724f1c332a71a8b0c63102 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit bee77a2c2c6571c622a8e533ed0b80cdb49302ea)
2019-09-20Update K8s to 1.13.11Cédric Ollivier1-1/+1
Change-Id: If97c5f21b0115803b75ee10ab5c85fc421d0faf2 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-08-04Update Kubernetes to v1.13.8Cédric Ollivier1-1/+1
Change-Id: Ib9693c99b2ebefd2dd8e6f30f5bcf4504e236edd Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-06-27Disable log dumpCédric Ollivier1-1/+1
It avoids dumping logs at the end which requires gcloud configured (CI). Then it partially reverts "Keep kubernetes sources" [1]. It now dumps e2e.test output in e2e.log as sonobuoy [2]. [1] https://gerrit.opnfv.org/gerrit/68106 [2] https://raw.githubusercontent.com/cncf/k8s-conformance/master/v1.15/kubeadm/e2e.log Change-Id: I400e1cf92a8540eba3d40db1ed4237628921efe6 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit d1d3feacdbf061cf4115ceeadcb71d2142971757)
2019-06-27Remove useless ci_loop in testcase descriptionsCédric Ollivier3-4/+0
Change-Id: I89f5a9172bed9d6861543250a971e09466d1307b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 5f2e455ae47f4fa3c5d6a441b052be1220fbfd9b)
2019-06-25Keep kubernetes sourcesCédric Ollivier1-1/+1
It now only removes .git and _output Else they are missing files when dumping the logs in case of failures [1]. [1] https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-smoke-iruya-k8s_conformance-run/107/console Change-Id: Ia8b45b8af48bc0005e75a174258e27f1f3edcaac Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 8af877189e0c276a15717cf7dd9a0fe873214521)
2019-06-09Update K8s to v1.13.7Cédric Ollivier1-1/+1
Change-Id: I2c62077284d5d250c236eb7a0d03725332fbbba4 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-04-21Update all OpenStack refs to opendev.orgCédric Ollivier2-2/+2
Change-Id: I829c7798d21abb013db09d80cc509862fa5b9e2d Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit cfcf5d41cbf26a7fc5d0b07d9ca45d73538036d8)
2019-03-29Only set go major version in parent containerCédric Ollivier1-1/+1
It allows updating automatically the minor versions. Change-Id: I25d3d315e533c1ba40f9eec36dc2eb9b81715eb2 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>