diff options
| author |   mrichomme <morgan.richomme@orange.com> | 2020-10-29 15:36:09 +0100 |
|---|---|---|
| committer | mrichomme <morgan.richomme@orange.com> | 2020-11-02 11:41:22 +0100 |
| commit | 559771fe0fd39ef11b6fdd3c18af6a25f899ada0 (patch) | |
| tree | 372722d382533cdcded26353cee1b8438014b3ed /security/README.md | |
| parent | a678715a0934ab44a710b82df351951f105d727d (diff) | |
Update xtesting READMEs
They can be used to run the xtesting dockers on any ONAP deployment
Note a section in the official doc shall also be created
Issue-ID: TEST-274
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Change-Id: If1d98e51c1dd476f5b1da81e51e4b4d99f513aa5
Signed-off-by: mrichomme <morgan.richomme@orange.com>
Diffstat (limited to 'security/README.md')
| -rw-r--r-- | security/README.md | 28 |
1 files changed, 15 insertions, 13 deletions
diff --git a/security/README.md b/security/README.md index 7dc7c0e..2a94f26 100644 --- a/security/README.md +++ b/security/README.md @@ -18,7 +18,8 @@ It includes 6 tests: - kube_hunter: security suite to search k8s vulnerabilities (upstream src aquasecurity) - versions: check that Java and Python are available only in versions - recommended by SECCOM + recommended by SECCOM. This test is long and run only in Weekly CI chains\ + (https://logs.onap.org/onap-integration/weekly). ## Usage @@ -44,7 +45,7 @@ You can run this docker by typing: ``` docker run -v <the kube config>:/root/.kube/config -v <result directory>:/var/lib/xtesting/results -nexus3.onap.org:10001/onap/xtesting-security:latest +nexus3.onap.org:10003/onap/xtesting-security:latest ``` Options: @@ -63,7 +64,7 @@ environment variables: - INSTALLER_TYPE: precise how your ONAP has been installed (e.g. kubespray-oom, rke-oom) - BUILD_TAG: a unique tag of your CI system. It can be usefull to get all the - tests of one CI run. It uses the regex (dai|week)ly-(.+?)-[0-9]\* to find the + tests of one CI run. It uses the regex (dai|week)ly-(.+?)-\[0-9]\* to find the version (e.g. daily-elalto-123456789). The command becomes: @@ -71,20 +72,21 @@ The command becomes: ``` docker run -v <the kube config>:/root/.kube/config -v <result directory>:/var/lib/xtesting/results -nexus3.onap.org:10001/onap/xtesting-security:latest +nexus3.onap.org:10003/onap/xtesting-security:latest /bin/bash -c "run_tests -r -t all ``` ### Output ``` -+-----------------------+------------+------------+------------+-----------+ -| TEST CASE | PROJECT | TIER | DURATION | RESULT | -+-----------------------+------------+------------+------------+-----------+ -| root_pods | security | security | 03:48 | PASS | -| unlimitted_pods | security | security | 00:37 | FAIL | -| cis_kubernetes | security | security | 00:01 | PASS | -| http_public_endpoints | security | security | 00:01 | PASS | -| jdpw_ports | security | security | 05:39 | PASS | -+-----------------------+------------+------------+------------+-----------+ ++-----------------------+------------+------------+-----------+ +| TEST CASE | PROJECT | DURATION | RESULT | ++-----------------------+------------+------------+-----------+ +| root_pods | security | 03:48 | PASS | +| unlimitted_pods | security | 00:37 | FAIL | +| cis_kubernetes | security | 00:01 | PASS | +| kube_hunter | security | 00:03 | PASS | +| http_public_endpoints | security | 00:01 | PASS | +| jdpw_ports | security | 05:39 | PASS | ++-----------------------+------------+------------+-----------+ ``` |