From 2e956f6332428d91afd683884de7dcf43aec5988 Mon Sep 17 00:00:00 2001 From: Pawel Wieczorek Date: Thu, 23 Jan 2020 12:13:44 +0100 Subject: k8s: Drop support for Casablanca Casablanca release reached End of Life (EOL) stage on July 8th 2019 [1]. This patch also fixes comments for test fixtures. This whole test subtree will be deleted upon migrating Aquasec kube-bench [2] for CIS Benchmark [3] integrated by Orange [4] to ONAP xtesting [5]. [1] https://wiki.onap.org/display/DW/Long+Term+Roadmap [2] https://github.com/aquasecurity/kube-bench [3] https://www.cisecurity.org/benchmark/kubernetes/ [4] https://gitlab.com/Orange-OpenSource/lfn/onap/integration/xtesting [5] https://git.onap.org/integration/xtesting/ Issue-ID: SECCOM-235 Change-Id: Ifc7d9c775c27d4cfafdd1932809288530cffceff Signed-off-by: Pawel Wieczorek --- .../tools/casablanca/get_customization_scripts.sh | 5 --- .../k8s/tools/casablanca/get_ranchercli.sh | 45 ------------------- .../casablanca/imported/openstack-k8s-node.sh | 46 ------------------- .../tools/casablanca/imported/openstack-rancher.sh | 51 ---------------------- 4 files changed, 147 deletions(-) delete mode 100755 test/security/k8s/tools/casablanca/get_customization_scripts.sh delete mode 100755 test/security/k8s/tools/casablanca/get_ranchercli.sh delete mode 100644 test/security/k8s/tools/casablanca/imported/openstack-k8s-node.sh delete mode 100644 test/security/k8s/tools/casablanca/imported/openstack-rancher.sh (limited to 'test/security/k8s/tools') diff --git a/test/security/k8s/tools/casablanca/get_customization_scripts.sh b/test/security/k8s/tools/casablanca/get_customization_scripts.sh deleted file mode 100755 index 028f002fc..000000000 --- a/test/security/k8s/tools/casablanca/get_customization_scripts.sh +++ /dev/null @@ -1,5 +0,0 @@ -#!/usr/bin/env bash - -wget \ - 'https://docs.onap.org/en/casablanca/_downloads/0b365a2342af5abd655f1724b962f5b5/openstack-rancher.sh' \ - 'https://docs.onap.org/en/casablanca/_downloads/b20b581d56982e9f15a72527a358d56b/openstack-k8s-node.sh' diff --git a/test/security/k8s/tools/casablanca/get_ranchercli.sh b/test/security/k8s/tools/casablanca/get_ranchercli.sh deleted file mode 100755 index 8ffbc5f58..000000000 --- a/test/security/k8s/tools/casablanca/get_ranchercli.sh +++ /dev/null @@ -1,45 +0,0 @@ -#!/usr/bin/env bash - -# -# @file test/security/k8s/tools/casablanca/get_ranchercli.sh -# @author Pawel Wieczorek -# @brief Utility for obtaining Rancher CLI tool -# - -# Dependencies: -# wget -# tar -# coreutils -# -# Privileges: -# Script expects to be run with administrative privileges for accessing /usr/local/bin -# -# Usage: -# # ./get_ranchercli.sh [VERSION [ARCH [SYSTEM]]] -# - -# Constants -DEFAULT_VERSION='v0.6.12' -DEFAULT_ARCH='amd64' -DEFAULT_SYSTEM='linux' - -# Variables -VERSION="${1:-$DEFAULT_VERSION}" -ARCH="${2:-$DEFAULT_ARCH}" -SYSTEM="${3:-$DEFAULT_SYSTEM}" - -ARCHIVE="rancher-${SYSTEM}-${ARCH}-${VERSION}.tar.gz" -DIRECTORY="rancher-${VERSION}" -URL="https://releases.rancher.com/cli/${VERSION}/${ARCHIVE}" - - -# Prerequistes -wget "$URL" -tar xf "$ARCHIVE" - -# Installation -mv "${DIRECTORY}/rancher" /usr/local/bin/ - -# Cleanup -rmdir "$DIRECTORY" -rm "$ARCHIVE" diff --git a/test/security/k8s/tools/casablanca/imported/openstack-k8s-node.sh b/test/security/k8s/tools/casablanca/imported/openstack-k8s-node.sh deleted file mode 100644 index b8462aa5e..000000000 --- a/test/security/k8s/tools/casablanca/imported/openstack-k8s-node.sh +++ /dev/null @@ -1,46 +0,0 @@ -#!/bin/bash - -DOCKER_VERSION=17.03 -KUBECTL_VERSION=1.11.2 -HELM_VERSION=2.9.1 - -# setup root access - default login: oom/oom - comment out to restrict access too ssh key only -sed -i 's/PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config -sed -i 's/PasswordAuthentication.*/PasswordAuthentication yes/' /etc/ssh/sshd_config -service sshd restart -echo -e "oom\noom" | passwd root - -apt-get update -curl https://releases.rancher.com/install-docker/$DOCKER_VERSION.sh | sh -mkdir -p /etc/systemd/system/docker.service.d/ -cat > /etc/systemd/system/docker.service.d/docker.conf << EOF -[Service] -ExecStart= -ExecStart=/usr/bin/dockerd -H fd:// --insecure-registry=nexus3.onap.org:10001 -EOF -systemctl daemon-reload -systemctl restart docker -apt-mark hold docker-ce - -IP_ADDY=`ip address |grep ens|grep inet|awk '{print $2}'| awk -F / '{print $1}'` -HOSTNAME=`hostname` - -echo "$IP_ADDY $HOSTNAME" >> /etc/hosts - -docker login -u docker -p docker nexus3.onap.org:10001 - -sudo apt-get install make -y - -sudo curl -LO https://storage.googleapis.com/kubernetes-release/release/v$KUBECTL_VERSION/bin/linux/amd64/kubectl -sudo chmod +x ./kubectl -sudo mv ./kubectl /usr/local/bin/kubectl -sudo mkdir ~/.kube -wget http://storage.googleapis.com/kubernetes-helm/helm-v${HELM_VERSION}-linux-amd64.tar.gz -sudo tar -zxvf helm-v${HELM_VERSION}-linux-amd64.tar.gz -sudo mv linux-amd64/helm /usr/local/bin/helm - -# install nfs -sudo apt-get install nfs-common -y - - -exit 0 diff --git a/test/security/k8s/tools/casablanca/imported/openstack-rancher.sh b/test/security/k8s/tools/casablanca/imported/openstack-rancher.sh deleted file mode 100644 index bcf542aed..000000000 --- a/test/security/k8s/tools/casablanca/imported/openstack-rancher.sh +++ /dev/null @@ -1,51 +0,0 @@ -#!/bin/bash - -DOCKER_VERSION=17.03 -RANCHER_VERSION=1.6.22 -KUBECTL_VERSION=1.11.2 -HELM_VERSION=2.9.1 - -# setup root access - default login: oom/oom - comment out to restrict access too ssh key only -sed -i 's/PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config -sed -i 's/PasswordAuthentication.*/PasswordAuthentication yes/' /etc/ssh/sshd_config -service sshd restart -echo -e "oom\noom" | passwd root - -apt-get update -curl https://releases.rancher.com/install-docker/$DOCKER_VERSION.sh | sh -mkdir -p /etc/systemd/system/docker.service.d/ -cat > /etc/systemd/system/docker.service.d/docker.conf << EOF -[Service] -ExecStart= -ExecStart=/usr/bin/dockerd -H fd:// --insecure-registry=nexus3.onap.org:10001 -EOF -systemctl daemon-reload -systemctl restart docker -apt-mark hold docker-ce - -IP_ADDY=`ip address |grep ens|grep inet|awk '{print $2}'| awk -F / '{print $1}'` -HOSTNAME=`hostname` - -echo "$IP_ADDY $HOSTNAME" >> /etc/hosts - -docker login -u docker -p docker nexus3.onap.org:10001 - -sudo apt-get install make -y - -sudo docker run -d --restart=unless-stopped -p 8080:8080 --name rancher_server rancher/server:v$RANCHER_VERSION -sudo curl -LO https://storage.googleapis.com/kubernetes-release/release/v$KUBECTL_VERSION/bin/linux/amd64/kubectl -sudo chmod +x ./kubectl -sudo mv ./kubectl /usr/local/bin/kubectl -sudo mkdir ~/.kube -wget http://storage.googleapis.com/kubernetes-helm/helm-v${HELM_VERSION}-linux-amd64.tar.gz -sudo tar -zxvf helm-v${HELM_VERSION}-linux-amd64.tar.gz -sudo mv linux-amd64/helm /usr/local/bin/helm - -# nfs server -sudo apt-get install nfs-kernel-server -y - -sudo mkdir -p /nfs_share -sudo chown nobody:nogroup /nfs_share/ - - -exit 0 -- cgit 1.2.3-korg