From 80389bf84265e718190abc3cce12ba4f0131c0ca Mon Sep 17 00:00:00 2001 From: mrichomme Date: Mon, 31 Aug 2020 17:26:24 +0200 Subject: Centralize waivers in SECCOM repository The waivers are in different locations, the idea is to centralize all the waivers in the same place Issue-ID: INT-1710 Signed-off-by: mrichomme Change-Id: I25ad8ce6f14bb5fd9672139406eb6d3a0720eebb --- waivers/check_certificates/nodeports_xfail.txt | 2 ++ waivers/jdpw_ports/jdwp_xfail.txt | 8 ++++++ waivers/nonssl_endpoints/nonssl_xfail.txt | 17 +++++++++++++ waivers/root_pods/root_pods_xfail.txt | 35 ++++++++++++++++++++++++++ 4 files changed, 62 insertions(+) create mode 100644 waivers/check_certificates/nodeports_xfail.txt create mode 100644 waivers/jdpw_ports/jdwp_xfail.txt create mode 100644 waivers/nonssl_endpoints/nonssl_xfail.txt create mode 100644 waivers/root_pods/root_pods_xfail.txt diff --git a/waivers/check_certificates/nodeports_xfail.txt b/waivers/check_certificates/nodeports_xfail.txt new file mode 100644 index 0000000..5c08010 --- /dev/null +++ b/waivers/check_certificates/nodeports_xfail.txt @@ -0,0 +1,2 @@ +# Expected failure list for certificates associated to nodeports +666 # foo example nodeport diff --git a/waivers/jdpw_ports/jdwp_xfail.txt b/waivers/jdpw_ports/jdwp_xfail.txt new file mode 100644 index 0000000..6163f42 --- /dev/null +++ b/waivers/jdpw_ports/jdwp_xfail.txt @@ -0,0 +1,8 @@ +# Expected failure list for JDWP ports +# JDWP = Java Debug Wire Protocol +# The following list displays pods and their associated pod that could be +# considered as False positive +onap-dcae-redis 6379 # Redis port +onap-msb-eag 6379 # Redis port +onap-msb-iag 6379 # Redis port +onap-vfc-redis 6379 # Redis port diff --git a/waivers/nonssl_endpoints/nonssl_xfail.txt b/waivers/nonssl_endpoints/nonssl_xfail.txt new file mode 100644 index 0000000..7aa9f4c --- /dev/null +++ b/waivers/nonssl_endpoints/nonssl_xfail.txt @@ -0,0 +1,17 @@ +# Expected failure list for non-SSL endpoints + + +# frankfurt History +# robot 30209 +# message-router 30227 +# sniro-emulator 30288 +# aaf-fs 31115 +## Frankfurt SECCOM waiver: +# log-kibana 30253 +# log-es 30254 +# log-ls 30255 +## Waiver for Frankfurt due to AAF impact +# so 30277 +## Upstream: +# awx-web 30478 +# netbox-nginx 30420 diff --git a/waivers/root_pods/root_pods_xfail.txt b/waivers/root_pods/root_pods_xfail.txt new file mode 100644 index 0000000..16ba884 --- /dev/null +++ b/waivers/root_pods/root_pods_xfail.txt @@ -0,0 +1,35 @@ +# Expected failure list for rooted ports + +# frankfurt history +## We consider only the pods we built +#aaf-cass # cassandra +#aaf-sms-vault # upstream vault and consul docker used by aaf AAF-1102 +#aai # aai pods not launched as root even root user still in dockers AAI-2822 +#awx # ansible +#cassandra # common cassandra +#consul # nobody remembers who is responsible for consul +#dcae-redis # redis container +#dcae-mongo # mongo container +#dcae-cloudify-manager # DCAEGEN2-2121 +#dcae-tca-analytics # tmp tca will be replaced by secured tca2 in G +#mariadb # common mariadb +#msb-consul # another consul +#multicloud-fcaps # rabbit-mq upstream pod MULTICLOUD-1017 +#multicloud-k8s-etcd +#multicloud-k8s-mongo +#music-cassandra # music has itw own cassandra +#nbi-mongo # a mongo db +#netbox # netbox +#pomba-elasticsearch # elasticsearch +#portal-cassandra # portal cassandra +#portal-db # portal mariadb +#portal-zookeeper # portal zookeeper +#zookeeper # common zookeper + +## other waivers +#robot # testing +#sniro-emulator # testing +#oof-cmso-service # testing +#vnfsdk # testing VNFSDK-565 +#pomba # nobody taking cares of pomba for several releases +#dcaemod # dcae experimental pods for Frankfurt -- cgit 1.2.3-korg