aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2023-11-14[SECURITY] Change security docker fileMichal Jagiello1-1/+1
Change base image of `build_yq` section Issue-ID: TEST-404 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I1cfc7713a0d1d2b05b86532dad3afc09edbf56a0
2023-04-20[SECURITY] Use fixed version of security versions scriptMichal Jagiello1-3/+3
Use the version of versions security script which is hosted on integration repository. Issue-ID: TEST-394 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: Ib49ab1f6615c878f01ce8ff38918387a39ad2085
2023-03-15Fix security docker buildMichal Jagiello1-1/+1
Issue-ID: INT-2154 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: Id1db8b86abd5711e447239e15f4f7cf2522c14d5
2022-09-28[SECURITY] Fix xtesting security docker fileMichal Jagiello1-3/+3
Use newer version of go and change kubernetes version Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Issue-ID: INT-2154 Change-Id: I9126942861a126ec81dae79a5439410011c7be2a
2022-04-20[SECURITY] Bump golang image version for xtesting-securityMichal Jagiello1-2/+2
Fixes docker image build issue related with too old golang version. Issue-ID: INT-2105 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I722d2803cafb56a2768c54e20fd47d8e9a7fdaae
2021-10-25[TEST] Fix xtesting security docker build issueMichal Jagiello1-0/+2
Add two go commands to fix build issue. Issue-ID: TEST-367 Signed-off-by: Michal Jagiello <michal.jagiello@t-mobile.pl> Change-Id: I740d5b46448f8ba32061314f6518651162f37975
2021-10-19[SECURITY] Fix xtesting-security buildmorganrol1-10/+0
xtesting-security not building since few days - remove kubebench reference - do not upgrade pip (options used for jube hunter no more supproted) Issue-ID: TEST-367 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: I882aae5b7122af51f5e4dd312f27efa219c75b19
2021-09-01Merge "[WAIVERS] Update regex to exclude DCAE temp dockers"Morgan Richomme2-12/+12
2021-08-31[SECURITY] Add -- to kubectl execKrzysztof Opasiak1-1/+1
According to warning that is printed by tests: kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead. Fix this by just adding -- to avoid this warning. Issue-ID: OOM-1 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I3d451c1e6c11841bf64afe876bbe33edbb42556c
2021-08-30[WAIVERS] Update regex to exclude DCAE temp dockersmorganrol2-12/+12
DCAE create pods during the tests these dockers are created without limits As security tests are executed after the tests, such pods are detected as part of the unlimitted pods Until it is fixed, we can add them in the waiver list Issue-ID: TEST-360 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: Ifb514aa15beab885b5dc15505ebb244fd1a71f95
2021-08-23[UPSTREAM] Update upstream versionsmorganrol1-4/+4
use - helm clien 3.3.4 - kubernetes client 1.19.11 remove useless PIP tag Issue-ID: INT-1958 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: Ie613e575161120fdc4ade43ca756e5943c7fa44b
2021-08-19[XTESTING] Fix opnfv/xtesting version to wallabymorganrol2-6/+7
opnfv/xtesting master triggered a change in the alpine baseline image (3.14) As a consequence the xtesting docker relying on master were broken, as the list of testcases was not overwrittent in pytho3.9 lib folder 2 options were possible: - fix the version (wallaby) - align the xtesting dockers and change the path to use 3.9 option1 is more secured. For the moment python3.8 is enough for the SDK. If needed we could upgrade later. Issue-ID: TEST-359 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: Iaeada26416e0929a11c17f5c2803448c5a23888c
2021-05-27[VERSIONS] Use external python package to manage versions testmorganrol3-10/+2
the check_versons code has been repackaged in an external gitlab.com repo [1] It provides - better error management - reporting [1]: https://gitlab.com/Orange-OpenSource/lfn/onap/ integration/onap-version-status Issue-ID: TEST-340 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I6d892e8c5e6c1729a1073e9d6f538b636390515f
2021-05-20[DEPENDENCIES] Update kubecl versionmorganrol1-1/+1
Recommendations for Honolulu is 1.19.9 Issue-ID: INT-1884 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: I5593c90045ed12856856ede6b4cad1aa54638c5d
2021-02-12[CICD] Fix versions trigger pointmorganrol1-1/+1
DEPLOY_SCENARIO was not the right env var We could either rename the DEPLOY_SCENARIO or use the existing NONDE_NAM I select the second option, all the nodes( =labs) with name including the word weekly will be compatible with running the versions test. Test in progress on weekly-master This test was skipped when using DEPLOY_SCENARIO Issue-ID: INT-1853 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: I00de9e05bc79e0baf139abf4307d9a6e303e6031
2021-02-09[CICD] Set versions test for weekly chain onlymorganrol1-0/+2
So far, versions is triggered only in weekly because there are 2 branches master and weekly-master as feature branches are evil, it is possible to keep only one branch but the triggering criteria shall be declared at the test level Issue-ID: INT-1853 Signed-off-by: morganrol <morgan.richomme@orange.com> Change-Id: I2684a09700f5abd666d05dbd10f0c26d668b2dc3
2020-12-07Merge "[SECURITY] S3 Support"Morgan Richomme1-18/+15
2020-12-02[SECURITY] S3 SupportSylvain Desbureaux1-18/+15
If we want to use S3 in order to store results, `details` attribute of test class must be a dictionnary and not a string. Also, everything we want to upload must be put in `res_dir`. Issue-ID: REQ-442 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I75adf11c636d6a524f8cd9ddba4f7edffd105f58
2020-12-02Remove useless helm client in security xtesting dockermrichomme1-3/+0
helm client not needed by the security tests it will save some space the ligter, the better... Issue-ID: INT-1798 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Ia09ff4a1b2d405036985b014d678769461f3ffe1
2020-11-26Scan only "onap" namespace for non-SSL endpointsPawel Wieczorek1-1/+1
Issue-ID: INT-1582 Change-Id: I88847c239016d972c4cdf95c46ad89749643d323 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-11-10Fix READMEmrichomme1-3/+34
- " missing - latest referenced instead of latest - detail interactive mode - precise how to run only a subset of the tests Issue-ID: TEST-274 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Id28ea0a4602a903eb4ff28bb7671737fa7d58b50 Signed-off-by: mrichomme <morgan.richomme@orange.com>
2020-11-05Dispay waiver content for the security testsVirginie2-2/+2
Issue-ID: INT-1764 Signed-off-by: Virginie <virginie.lefilleul@orange.com> Change-Id: I47d18dabfc76c44c2ca3394f56d0ed8f0c928f02
2020-11-04Display waivers content for the security testsVirginie2-0/+14
Issue-ID: INT-1764 Signed-off-by: Virginie <virginie.lefilleul@orange.com> Change-Id: Id6ae70d90d2e1f360642160768b4658d17c45046 Signed-off-by: mrichomme <morgan.richomme@orange.com> Signed-off-by: Virginie <virginie.lefilleul@orange.com>
2020-11-02Update xtesting READMEsmrichomme1-13/+15
They can be used to run the xtesting dockers on any ONAP deployment Note a section in the official doc shall also be created Issue-ID: TEST-274 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: If1d98e51c1dd476f5b1da81e51e4b4d99f513aa5 Signed-off-by: mrichomme <morgan.richomme@orange.com>
2020-09-21Add xfail list for test on pod limitsmrichomme3-22/+59
Note: a waiver shall be created (and merged) in SECCOM repo before we can merge this patch Issue-ID: INT-1722 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I1d064275e9b90574e8b90c733d0dcc9b6f2bed74 Signed-off-by: mrichomme <morgan.richomme@orange.com>
2020-09-08Remove reference to gitlab.com for xtesting infra-testsmrichomme1-1/+1
Now everything is done in ONAP, no ref to gitlab.com needed + fix for certif test call + harmonization https+pip to use git.onap.org (not gerrit.onap.org) Issue-ID: INT-1570 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Idde25ae6e96b60f35a4383ff9dbc494422d8bf4c
2020-09-03Remove old SECCOM waiver lists sourcePawel Wieczorek1-35/+0
SECCOM waivers are now located in "integration/seccom" repository. Issue-ID: INT-1710 Change-Id: I5d89e2e92a115336ba880cb305d64a6d66265225 Depends-On: I5f0f11307dd259d2a66a2916ac4ac01e27177b29 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-09-03Remove gitlab.com ref in xtesting security dockerfilemrichomme1-1/+1
As the migration is now completed, no reference to gitlab.com shall be kept Issue-ID: INT-1571 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Id4e522fe9cd8ad2a763677fa53d363cf0a2603f1
2020-09-01Fetch waivers from integration/seccom repositoryPawel Wieczorek1-3/+3
This patch changes source of SECCOM waivers for security-related tests. Now all of them are available in "integration/seccom" repository. After this change is merged old waiver lists will be removed from their respective sources. Issue-ID: INT-1710 Change-Id: I5f0f11307dd259d2a66a2916ac4ac01e27177b29 Depends-On: I25ad8ce6f14bb5fd9672139406eb6d3a0720eebb Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-08-28Add SECCOM-recommended version check in security testsPawel Wieczorek6-1/+129
Issue-ID: INT-1571 Change-Id: Icd215ad5b49dcbf34eb46b973676f5141b589f83 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
2020-08-18Reset security root pod xfail listmrichomme1-32/+33
Issue-ID: INT-1695 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I7bd0ff8c2ce540608f3224ed8dfb0750445383bc
2020-08-05Improve xtesting documentationmrichomme1-7/+8
- replace gitlab.com images by Nexus3 images - update smoke test (even it will be deprecated soon) Issue-ID: INT-1676 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Ic7ebaa4d12b3e1872e51a895fc1b67dfc084e900 Signed-off-by: mrichomme <morgan.richomme@orange.com>
2020-06-22Resync manually xtesting repo from gitlab.com repomrichomme2-0/+5
The goal is to use xtesting once we shall be able to build all the dockers properly Issue-ID: INT-1366 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I068eb6019f6eec04b46b545222cbb5cecb265234 Signed-off-by: mrichomme <morgan.richomme@orange.com>
2020-06-04Fix md linting errorsmrichomme1-18/+18
Issue-ID: INT-1533 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I9fad7a3920b0609338859f7a55c8a78d1f34a571 Signed-off-by: mrichomme <morgan.richomme@orange.com>
2020-04-20Resync integration/xtesting repomrichomme13-10/+620
Issue-ID: INT-1366 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I3af9c4697f0e67d3ce5b6d2fceeb978aeb20a0ff
2020-01-06Update python3 version due to xtesting master updatemrichomme1-2/+2
Issue-ID: INT-1366 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: I322aa4de7e01895c839e1ccb4259333fb3a7cb17
2019-12-11Move integration xtesting Dockerfile to ONAPmrichomme4-0/+42
All the Dockerfiles and xtesting configurations were hosted in gitlab.com [1] The goal of this patch is to host these assets in ONAP A jenkins jjb shall be created to generated the docker and push them on the nexus (today the built-in registry of ONAP was used) These xtesting dockers are referencing integration categories [2] and integration use cases [3] These xtesting dockers shall also simplify the way to integrate new use cases in any CI chain (jenkins or gitlab-ci based) [1]: https://gitlab.com/Orange-OpenSource/lfn/onap/integration/xtesting [2]: https://wiki.onap.org/pages/viewpage.action?pageId=71835330 [3]: http://testresults.opnfv.org/onap/api/v1/projects/integration/cases Issue-ID: INT-1366 Signed-off-by: mrichomme <morgan.richomme@orange.com> Change-Id: Iba0fc0b0415731a7a81ba0225a70ae16391dd129 Signed-off-by: mrichomme <morgan.richomme@orange.com>