aboutsummaryrefslogtreecommitdiffstats
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2021-02-13Fix CVE-2020-8231Cédric Ollivier1-0/+1
https://build.opnfv.org/ci/view/functest-kubernetes-trivy/job/functest-kubernetes-opnfv-functest-kubernetes-benchmarking-hunter-trivy/1/console Change-Id: Icd687fbc1f99a1a741271179dc2289cc884f1bdf Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2021-02-10Upgrade system firstCédric Ollivier1-1/+2
Change-Id: I0120e6a368b033f2fb47257ff9dcc3fd8a58d243 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 9ebe47c8458c99066fd71a65007fff923004d209)
2021-02-04Allow parameterizing K8s versionsCédric Ollivier2-15/+18
ONAP integration team asks to support all K8s versions. A couple of OPNFV releases will allow testing 2 K8s versions. Change-Id: Idb43cff0cc03cc9c17b290f7f1867e2c380c6319 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 0163bb977604a32a0c46e10a97313ce0feea7b5f)
2021-01-10Update cnf-conformance to v0.9.19Cédric Ollivier1-7/+11
It also adds configs needed by resilience. https://github.com/cncf/cnf-conformance/releases/tag/v0.9.19 Change-Id: I94b1efc47c5ceef96bc8879a6c71f92db1f63bd2 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 7385caf54c27b471bda8599d491aa3aee21b7b89)
2020-11-22Allow offline testing via xrally_kubernetesCédric Ollivier2-2/+35
It locally patches xrally_kubernetes before [1] is merged upstream. It adds docker.io/appropriate/curl:edge in download_images.sh too. [1] https://github.com/xrally/xrally-kubernetes/pull/51 Co-Authored-By: Tamas Lendvay <tamas.lendvay@nokia.com> Change-Id: I82ea2c777cd4d8f24c38dbf32d66081846e3e9af Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit ea2715240015a482c5321d309257d801a412f02d)
2020-11-22Reduce cnf-conformance criteriaCédric Ollivier1-1/+1
It's considered as passed vs 95 out of 105 [1]. [1] http://artifacts.opnfv.org/functest-kubernetes/ACI2B7JDLFHI/functest-kubernetes-opnfv-functest-kubernetes-cnf-kali-cnf_conformance-run-16/functest-kubernetes.log Change-Id: Ib16927cf269784daba1085a3e97fb611e869928f Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 53b16e8f00e5a60db2e6db7f375bd06f184a5cc8)
2020-11-21Update cnf_conformance to v0.9.4Cédric Ollivier2-11/+13
It removes all hacks bypassing a few former bugs (e.g. [1]) and adapts to the new cnf-conformance result output logic. It runs all workload tests as it's now proposed (k8s conformance is already part of smoke) and select the latest coredns cnf-conformance.yml taking latest helm repo changes into account. It sets criteria 95 as all steps are considered as passed and a overall result 100/105. [1] https://github.com/cncf/cnf-conformance/issues/388 Change-Id: I95b7889b21b86961e7a1d0c84b13e0ae367cae44 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 854f164998793000fcf8019214b259b7283f5194)
2020-11-20Skip cnf_conformance till helm repos are fixedCédric Ollivier1-0/+1
Change-Id: Ie5b9aff6f56ca5cfd8501f142969f8a6246c4151 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 30a5a084fa9e0c8677d70d8b1d7a696ea06b49b9)
2020-09-16Publish helm_vims also based on clearwater-dockerCédric Ollivier2-9/+29
It leverages helm rather than kubectl as proposed by k8s_vims. A new abstract class Vims is added to factorize code between both testcases. Change-Id: Ie5de8d62e25e74f73f8e32167228a08e82989abd Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 32dfc10f56ead9abea8798e1ce16fe87652ca480)
2020-09-13Split kube-bench master and nodeCédric Ollivier1-6/+22
The former deployment asked for all-in-one. Change-Id: I12e470cec9e82b82c6f3ea5ff2431087f5deb9be Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit bced94b6fe24c7e939fb22834deb77477e4a9bb9)
2020-09-12Improve kube_bench outputCédric Ollivier1-0/+1
It also fills self.details. Change-Id: Ie73215ebcbd34de9d457fd364de4ab9cbdf64319 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 823b3a005ace9372a080421b2ae19152505201e4)
2020-09-12Enhance kube-hunter result postprocessingCédric Ollivier1-0/+2
It fills self.details and checks if the test case passes according to criteria (severity = high by default) Change-Id: Ib20779b4b5dca078c65b546c8703bc99856c6f41 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 4f197110710e9f148eae4533792e8e7e2d72f053)
2020-09-07Fix K8s release in cnf/DockerfileCédric Ollivier1-1/+1
Change-Id: I8029e422e93f318c3254a8545ec9bf9ad9e19ee3 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-09-06Decreate cnf-conformance criteriaCédric Ollivier1-1/+1
conf-confirmance is beta. Let's decrease criteria to allow gating [1]. [1] https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-cnf-latest-cnf_conformance-run/4/console Change-Id: I77068fd027b2ae042e0ff9574ed608c8a3d77ade Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 12d6bc18b178d4a8a4f64574bd6549341268645a)
2020-09-06Publish k8s_quick as proposed by sonobuoyCédric Ollivier1-1/+15
https://github.com/vmware-tanzu/sonobuoy Change-Id: I7b1777cf7bc0d6cd04ea5cccc08b7c29887ae874 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 711d9f1d875816386fd4afeb2e79f8d2de47b036)
2020-09-06Conform with latest sonubuoy's non disruptive listCédric Ollivier1-1/+1
https://github.com/vmware-tanzu/sonobuoy/blob/master/pkg/client/mode.go#L43 Change-Id: Ie6c331168e1186b33c4cabda6744e1bb2c6346a0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit de3a7000a3173f0242cbf7bfcdd6a18d8678e0ae)
2020-09-06Update Xtesting to 0.91.0Cédric Ollivier7-7/+2
Change-Id: I384478ec9a0926b168f2372c8007b3eceeadb6da Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit b198dcede7578b1c3bf688cd47cc0590dd8d6d14)
2020-09-04Allow skipping arm and arm64 if cnf-conformanceCédric Ollivier1-3/+5
cnf-conformance doesn't support this architectures. It also improve cleaning to publish artifacts [1]. [1] https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-cnf-latest-cnf_conformance-run/2/console Change-Id: Ie64e4a1b8b496a050a1798eaf4e5ef6397c011d0 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 2cf6903c9a805b9c1b7702292bdf33b9485be319)
2020-09-04Add cnf-conformance in functest-kubernetes-cnfCédric Ollivier2-0/+28
It selects cnf-conformance v0.7.2-beta1 (current latest release) and the default CNF as proposed by [1]. The end user is free to override the default yml files on purpose (e.g. docker volumes). Tag (default: all) could be modified too via testcases.yaml [1] https://hackmd.io/@vulk/SkY54QnsU Change-Id: Iec2a830c441e523e067f6eb114ecb205c49c6b93 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 120daffd8d6d4be727d2ba52a76dbd8eacfe2628)
2020-08-22Add xrally_kubernetes_fullCédric Ollivier3-0/+35
It iterates 10 times all operations run by xrally_kubernetes. Now times, concurrenty and count can be set via testcases.yaml. It creates a new containers functest-kubernetes-benchamrking as Functest. Change-Id: Ibfd493b987a359a3f16c2d8db0aef6b8e90b7e92 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit a0f76d884c1f13c27e906136d3418f12b5342fc4)
2020-08-16Leverage alpine rather than golangCédric Ollivier1-1/+1
golang is now useless as we stop compiling kubernetes binaries. Change-Id: I7b9416281de069d1f454b13eff6e9e6107f7471e Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 1af6a5dc4ec8e087613275e912c819ea1d0aecbc)
2020-08-16Fix arm -> arm64Cédric Ollivier1-1/+1
Change-Id: I3d7d16ec7d8a7712a279258f817d811f0d59187f Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit aa3d694b2c288521b6e3f96ea020a3ac485d4d14)
2020-08-16Stop compiling K8s testing binariesCédric Ollivier1-16/+11
It reaches Travis CI timeouts and is quite useless. PyNaCl is now installed via Alpine packages to save CI. Change-Id: Ifdf3f46f162a811ed95e3ca07ea7c3d89bc77a91 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 6801612e85c485e9885cfb41cbc84771475a134f)
2020-08-15Update K8S_TAG to v1.17.11Cédric Ollivier1-1/+1
Change-Id: Ia6cb48e3e009ed38588972e8c8fd02c2d8cd4cf3 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-08-13Ease modifying the test list in E2E testingCédric Ollivier2-2/+7
It eases creating specific CNTT test cases based on K8s E2E testing. Change-Id: I304960fda760ffc47d763d53511898699f63e356 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit a22553a65d6019350c215c9024c9dc54cf77dc7c)
2020-08-11Remove GOFLAGS in DockerfileCédric Ollivier1-2/+2
Change-Id: Ifc6c63641b9512b4b930c1d7032cae55d2afb811 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit fac999583784f6e3b2c64294f2347fdf8a7a64f0)
2020-08-11Compile all Functest K8s containers for arm v7 and v8Cédric Ollivier1-2/+2
It removes sudo when useless and turns debug on when compiling K8s binaries. It avoids TravisCI timeouts (No output has been received)[1] [1] https://travis-ci.org/github/collivier/functest-kubernetes/jobs/716819529 Change-Id: I4719257596bf9a6510e2f772271b336847d1ccb5 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 3c4543a8ef6f84a5f25483a6dfe50e0075a9cd0e)
2020-07-07Remove energy from logging configsCédric Ollivier2-12/+2
Change-Id: I35c15aa68fe1afadcdbf3d391febb166358c90be Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 62b861884f55815e00b24f3aca6acb95e0f804b9)
2020-07-07Publish debug logging configCédric Ollivier2-0/+71
Change-Id: I6a42fdeb20e0d549819c327e92e138c28dc927e1 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 7168abb7509750ece58fa501a56a8b1ebad2dbf8)
2020-07-03Deploy Clearwater IMS using KubernetesCédric Ollivier3-0/+30
The new testcase "k8s_vims" deploys and tests Clearwater IMS using Kubernetes. It follows the procedures proposed by clearwater-docker [1]. [1] https://github.com/Metaswitch/clearwater-docker Change-Id: I2fe3cd03a5dedfc61fbab294c53b4bc0b0fa70be Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 080d2414682d5fecea8c01640e2e5971278fe19d)
2020-07-03v1.17.4 -> v1.17.8Cédric Ollivier1-1/+1
Change-Id: I3e2100596366136f8f79aa241e709487cee57361 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-07-01Fix project name in security's testcases.yamlCédric Ollivier1-2/+2
Change-Id: I7770873b2f7d61db05a9546631fdc2d4ddf3d20c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 2649efe3166ec1525f825bf21b63e6eb53aaaac6)
2020-07-01Add security docker for functest-kubernetesmrichomme2-0/+32
run kube-hunter and kube-bench cases dealing with security in kubernetes (check vulnerabilities) [1][2] It's the first step only printing the output. [1]: https://github.com/aquasecurity/kube-bench [2]: https://github.com/aquasecurity/kube-hunter Co-Authored-By: Cédric Ollivier <cedric.ollivier@orange.com> Change-Id: I3bd9bda80046ef7a0c494d51dfb0b8cbfea02bb0 Signed-off-by: mrichomme <morgan.richomme@orange.com> (cherry picked from commit 98d9f93337ab514fa9aafc1cd1e87473de68b364)
2020-06-08Apply Rally patch (switch to threading for tasks)Cédric Ollivier2-2/+53
Change-Id: I8f4df2d4c220edc538c743cccce8050efe4a1140 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit bfd0063c81f5d5d4fad2389832c8f1479a28f73d)
2020-05-05Try a quick fix vs the race conditions in xrallyCédric Ollivier2-0/+35
Change-Id: I57a4c317ba365586c10b13d425aac021dd030949 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit 81139b1576981990f32df76719f179441e4d12ee)
2020-04-04Update K8S to v1.17.4Cédric Ollivier1-1/+1
Change-Id: I04c7cbc5281abffd458b1fc75e924f8dd3e70c3f Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2020-03-12Update K8S_TAG to v1.17.3Cédric Ollivier1-1/+1
Change-Id: I88dd9c19a6a44d00154c676a53ece6748394ea1a Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-12-17Update go for Kubernetes v1.17Cédric Ollivier1-1/+1
Kubernetes v1.17 requires go1.13.4 or greater. It completes "Update to K8S_TAG v1.17.0" [1]. [1] https://git.opnfv.org/functest-kubernetes/commit/?h=stable/jerma&id=6013753b39971c5d246f7e39574a8176065a5aaf Change-Id: Ia247930811c20526a157d61f3a86f7abf558f68c Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-12-14Update to K8S_TAG v1.17.0Cédric Ollivier1-1/+1
It updates to the latest K8s stable version. Change-Id: Iac85e8d5139eb27e689eb6d8357a55f3308471d3 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-11-16Add mailcap in dependenciesCédric Ollivier1-1/+1
It allows detecting mimetypes. Change-Id: Ieeae5e92142daab2ea724f1c332a71a8b0c63102 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com> (cherry picked from commit bee77a2c2c6571c622a8e533ed0b80cdb49302ea)
2019-10-07Publish first Functest K8s Jerma containersCédric Ollivier3-6/+6
It leverages on latest K8s tag (v1.16.1). Change-Id: I57014c4193c7732c4dfd46d7a29e3104eec652ec Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-09-20Select go 1.12 instead of 1.13 (rolling)Cédric Ollivier1-1/+1
Functest K8s container builds failed [1] [1] https://build.opnfv.org/ci/view/functest%20(Installer%20gates)/job/functest-kubernetes-docker-master/94/ Change-Id: I3da0ebf05e1dd25b7fb609e0e851c07ed1722723 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-08-31Remove Features containersCédric Ollivier4-68/+0
Most the features are stopped and Functest shouldn't host dead code. Functest is a framework (Docker and Python modules) which can be still reused by any third-party (OPNFV Feature or anything else) in its tree and CI Change-Id: Ie2f5beddd21b09aabfbdf2bb2f3366e652d43b3a Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-07-27Switch to Python 3.7 and Alpine 3.10Cédric Ollivier4-5/+5
pylint is updated to 2.3.1 (lastest py3.7 version) Change-Id: I8b70e9764e2802aeb517969c265fbebfa03458ce Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-07-11Add a new testcase leveraging on xrally/kubernetesCédric Ollivier2-2/+17
It partially runs the all-in-one task for checking basic functionality of Kubernetes cluster. Change-Id: Iaf7a29d2c1a364073e4caaeef69d68ee79ea56bc Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-06-27Disable log dumpCédric Ollivier1-1/+1
It avoids dumping logs at the end which requires gcloud configured (CI). Then it partially reverts "Keep kubernetes sources" [1]. It now dumps e2e.test output in e2e.log as sonobuoy [2]. [1] https://gerrit.opnfv.org/gerrit/68106 [2] https://raw.githubusercontent.com/cncf/k8s-conformance/master/v1.15/kubeadm/e2e.log Change-Id: I400e1cf92a8540eba3d40db1ed4237628921efe6 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-06-27Remove useless ci_loop in testcase descriptionsCédric Ollivier3-4/+0
Change-Id: I89f5a9172bed9d6861543250a971e09466d1307b Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-06-25Keep kubernetes sourcesCédric Ollivier1-1/+1
It now only removes .git and _output Else they are missing files when dumping the logs in case of failures [1]. [1] https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-smoke-iruya-k8s_conformance-run/107/console Change-Id: Ia8b45b8af48bc0005e75a174258e27f1f3edcaac Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-05-12Update to Python3Cédric Ollivier4-12/+12
Functest containers leverage on Python3 instead of python2. https://mail.python.org/pipermail/python-dev/2018-March/152348.html Change-Id: I4f148e91259377b4e3b9076621f192a6e00f6009 Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
2019-04-21Update all OpenStack refs to opendev.orgCédric Ollivier2-2/+2
Change-Id: I829c7798d21abb013db09d80cc509862fa5b9e2d Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>