diff options
Diffstat (limited to 'security/README.md')
| -rw-r--r-- | security/README.md | 28 |
1 files changed, 15 insertions, 13 deletions
diff --git a/security/README.md b/security/README.md index 7dc7c0e..2a94f26 100644 --- a/security/README.md +++ b/security/README.md @@ -18,7 +18,8 @@ It includes 6 tests: - kube_hunter: security suite to search k8s vulnerabilities (upstream src aquasecurity) - versions: check that Java and Python are available only in versions - recommended by SECCOM + recommended by SECCOM. This test is long and run only in Weekly CI chains\ + (https://logs.onap.org/onap-integration/weekly). ## Usage @@ -44,7 +45,7 @@ You can run this docker by typing: ``` docker run -v <the kube config>:/root/.kube/config -v <result directory>:/var/lib/xtesting/results -nexus3.onap.org:10001/onap/xtesting-security:latest +nexus3.onap.org:10003/onap/xtesting-security:latest ``` Options: @@ -63,7 +64,7 @@ environment variables: - INSTALLER_TYPE: precise how your ONAP has been installed (e.g. kubespray-oom, rke-oom) - BUILD_TAG: a unique tag of your CI system. It can be usefull to get all the - tests of one CI run. It uses the regex (dai|week)ly-(.+?)-[0-9]\* to find the + tests of one CI run. It uses the regex (dai|week)ly-(.+?)-\[0-9]\* to find the version (e.g. daily-elalto-123456789). The command becomes: @@ -71,20 +72,21 @@ The command becomes: ``` docker run -v <the kube config>:/root/.kube/config -v <result directory>:/var/lib/xtesting/results -nexus3.onap.org:10001/onap/xtesting-security:latest +nexus3.onap.org:10003/onap/xtesting-security:latest /bin/bash -c "run_tests -r -t all ``` ### Output ``` -+-----------------------+------------+------------+------------+-----------+ -| TEST CASE | PROJECT | TIER | DURATION | RESULT | -+-----------------------+------------+------------+------------+-----------+ -| root_pods | security | security | 03:48 | PASS | -| unlimitted_pods | security | security | 00:37 | FAIL | -| cis_kubernetes | security | security | 00:01 | PASS | -| http_public_endpoints | security | security | 00:01 | PASS | -| jdpw_ports | security | security | 05:39 | PASS | -+-----------------------+------------+------------+------------+-----------+ ++-----------------------+------------+------------+-----------+ +| TEST CASE | PROJECT | DURATION | RESULT | ++-----------------------+------------+------------+-----------+ +| root_pods | security | 03:48 | PASS | +| unlimitted_pods | security | 00:37 | FAIL | +| cis_kubernetes | security | 00:01 | PASS | +| kube_hunter | security | 00:03 | PASS | +| http_public_endpoints | security | 00:01 | PASS | +| jdpw_ports | security | 05:39 | PASS | ++-----------------------+------------+------------+-----------+ ``` |