Centralize waivers in SECCOM repository

The waivers are in different locations, the idea is
to centralize all the waivers in the same place

Issue-ID: INT-1710

Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: I25ad8ce6f14bb5fd9672139406eb6d3a0720eebb

4 files changed, 62 insertions, 0 deletions

diff --git a/waivers/check_certificates/nodeports_xfail.txt b/waivers/check_certificates/nodeports_xfail.txt
new file mode 100644
index 0000000..5c08010
--- /dev/null
+++ b/waivers/check_certificates/nodeports_xfail.txt
@@ -0,0 +1,2 @@
+# Expected failure list for certificates associated to nodeports
+666 # foo example nodeport
diff --git a/waivers/jdpw_ports/jdwp_xfail.txt b/waivers/jdpw_ports/jdwp_xfail.txt
new file mode 100644
index 0000000..6163f42
--- /dev/null
+++ b/waivers/jdpw_ports/jdwp_xfail.txt
@@ -0,0 +1,8 @@
+# Expected failure list for JDWP ports
+# JDWP = Java Debug Wire Protocol
+# The following list displays pods and their associated pod that could be
+# considered as False positive
+onap-dcae-redis 6379 # Redis port
+onap-msb-eag 6379 # Redis port
+onap-msb-iag 6379 # Redis port
+onap-vfc-redis 6379 # Redis port
diff --git a/waivers/nonssl_endpoints/nonssl_xfail.txt b/waivers/nonssl_endpoints/nonssl_xfail.txt
new file mode 100644
index 0000000..7aa9f4c
--- /dev/null
+++ b/waivers/nonssl_endpoints/nonssl_xfail.txt
@@ -0,0 +1,17 @@
+# Expected failure list for non-SSL endpoints
+
+
+# frankfurt History
+# robot 30209
+# message-router 30227
+# sniro-emulator 30288
+# aaf-fs 31115
+## Frankfurt SECCOM waiver:
+# log-kibana 30253
+# log-es 30254
+# log-ls 30255
+## Waiver for Frankfurt due to AAF impact
+# so 30277
+## Upstream:
+# awx-web 30478
+# netbox-nginx 30420
diff --git a/waivers/root_pods/root_pods_xfail.txt b/waivers/root_pods/root_pods_xfail.txt
new file mode 100644
index 0000000..16ba884
--- /dev/null
+++ b/waivers/root_pods/root_pods_xfail.txt
@@ -0,0 +1,35 @@
+# Expected failure list for rooted ports
+
+# frankfurt history
+## We consider only the pods we built
+#aaf-cass # cassandra
+#aaf-sms-vault # upstream vault and consul docker used by aaf AAF-1102
+#aai # aai pods not launched as root even root user still in dockers AAI-2822
+#awx # ansible
+#cassandra # common cassandra
+#consul # nobody remembers who is responsible for consul
+#dcae-redis # redis container
+#dcae-mongo # mongo container
+#dcae-cloudify-manager # DCAEGEN2-2121
+#dcae-tca-analytics # tmp tca will be replaced by secured tca2 in G
+#mariadb # common mariadb
+#msb-consul # another consul
+#multicloud-fcaps # rabbit-mq upstream pod MULTICLOUD-1017
+#multicloud-k8s-etcd
+#multicloud-k8s-mongo
+#music-cassandra # music has itw own cassandra
+#nbi-mongo # a mongo db
+#netbox # netbox
+#pomba-elasticsearch # elasticsearch
+#portal-cassandra # portal cassandra
+#portal-db # portal mariadb
+#portal-zookeeper # portal zookeeper
+#zookeeper # common zookeper
+
+## other waivers
+#robot # testing
+#sniro-emulator # testing
+#oof-cmso-service # testing
+#vnfsdk # testing VNFSDK-565
+#pomba # nobody taking cares of pomba for several releases
+#dcaemod # dcae experimental pods for Frankfurt