Age | Commit message (Collapse) | Author | Files | Lines |
|
It's against Security Standards as explained in [1].
"Using the hostPath volume type presents many security risks.
If you can avoid using a hostPath volume, you should."
It basically asks for the profile Privileged
"pod-security.kubernetes.io/enforce": "privileged
[1] https://kubernetes.io/docs/concepts/storage/volumes/#hostpath
Change-Id: I89e35f11ab7917b904ac474401bf609ad9c5dd3d
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
(cherry picked from commit 50859e8c92a39b87ad91f14d01908a259a0602ce)
|
|
It mostly adds encoding in open calls and leverages f-strings.
It removes ansible-lint as it now asks for ansible, roles and collections.
Change-Id: I3ef729f44b2c721b14d19df27805938298aa2c67
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
Change-Id: I4e756552173247499ba882bfee4fbe8738fbae3d
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
It also disabled wrong order check as it fails vs kubernetes amongst
others.
[1] https://github.com/PyCQA/pylint/issues/2175
Change-Id: I3d641c213067428848212a148d25d78051c5674f
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
Sometimes, tested Kubernetes doesn't have direct access to Internet but
access through repository mirrors.
This patch handles this case for rally test case.
There's two ways for providing the repository mirrors:
- Give an environment variable (`MIRROR_REPO`) which gives a repository
mirro with all needed images.
- Gives an environment variable per needed repo:
- `DOCKERHUB_REPO` for DockerHub repository (`docker.io`)
- `GCR_REPO` for Google Cloud repository (`gcr.io`)
- `K8S_GCR_REPO` for Kubernetes repository (`k8s.gcr.io`)
Needed images list has also been extracted so Kubernetes administrator can
easily upload these images to the mirror if the mirror also doesn't have
access to Internet.
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: I2ea6622b79f7e3c3c63c1441c4dab48e9bc4fb1a
|
|
It allows offline testing via xrally_kubernetes, k8s_vims, kube_bench
and kube_hunter.
Change-Id: I3084abec19f06a894d0083ecb3ed61882eddd785
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
It raises 413 Client Error: Request Entity Too Large for url [1]
[1] https://build.opnfv.org/ci/job/functest-kubernetes-pi-ollivier-functest-kubernetes-benchmarking-latest-xrally_kubernetes_full-run/1/console
Change-Id: I165f7aec53d8ce1e567491a5b5559f00b1fe4a4c
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
https://build.opnfv.org/ci/job/functest-kubernetes-pi-ollivier-functest-kubernetes-benchmarking-latest-xrally_kubernetes_full-run/1/console
Change-Id: I13685d74ce9e286520af6f1e5cd6ce9dafc3d5ea
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
Change-Id: Ib2b7bb6de8cd6524fcc52baf48ebf5c4835c396b
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
It iterates 10 times all operations run by xrally_kubernetes.
Now times, concurrenty and count can be set via testcases.yaml.
It creates a new containers functest-kubernetes-benchamrking as
Functest.
Change-Id: Ibfd493b987a359a3f16c2d8db0aef6b8e90b7e92
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
It seems incorrect as Rally tired waiting to become 3 pods [1]
Here are the nodes:
- control-plane
- worker
- worker
[1] http://artifacts.opnfv.org/functest-kubernetes/0LMEWUMSA2U6/functest-kubernetes-opnfv-functest-kubernetes-smoke-latest-xrally_kubernetes-run-157/xrally_kubernetes/xrally_kubernetes.html
Change-Id: I19bb19eb1e0f2ae66a64532d99d4a59f82651a8f
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
Both have to be modified else publishing artifacts fails [1].
https://build.opnfv.org/ci/job/functest-kubernetes-opnfv-functest-kubernetes-smoke-jerma-xrally_kubernetes-run/47/console
Change-Id: If21334d7d1342737575f9a260a0ad647c4f382e2
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|
|
It partially runs the all-in-one task for checking basic functionality
of Kubernetes cluster.
Change-Id: Iaf7a29d2c1a364073e4caaeef69d68ee79ea56bc
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
|