From 559771fe0fd39ef11b6fdd3c18af6a25f899ada0 Mon Sep 17 00:00:00 2001 From: mrichomme Date: Thu, 29 Oct 2020 15:36:09 +0100 Subject: Update xtesting READMEs They can be used to run the xtesting dockers on any ONAP deployment Note a section in the official doc shall also be created Issue-ID: TEST-274 Signed-off-by: mrichomme Change-Id: If1d98e51c1dd476f5b1da81e51e4b4d99f513aa5 Signed-off-by: mrichomme --- security/README.md | 28 +++++++++++++++------------- 1 file changed, 15 insertions(+), 13 deletions(-) (limited to 'security/README.md') diff --git a/security/README.md b/security/README.md index 7dc7c0e..2a94f26 100644 --- a/security/README.md +++ b/security/README.md @@ -18,7 +18,8 @@ It includes 6 tests: - kube_hunter: security suite to search k8s vulnerabilities (upstream src aquasecurity) - versions: check that Java and Python are available only in versions - recommended by SECCOM + recommended by SECCOM. This test is long and run only in Weekly CI chains\ + (https://logs.onap.org/onap-integration/weekly). ## Usage @@ -44,7 +45,7 @@ You can run this docker by typing: ``` docker run -v :/root/.kube/config -v :/var/lib/xtesting/results -nexus3.onap.org:10001/onap/xtesting-security:latest +nexus3.onap.org:10003/onap/xtesting-security:latest ``` Options: @@ -63,7 +64,7 @@ environment variables: - INSTALLER_TYPE: precise how your ONAP has been installed (e.g. kubespray-oom, rke-oom) - BUILD_TAG: a unique tag of your CI system. It can be usefull to get all the - tests of one CI run. It uses the regex (dai|week)ly-(.+?)-[0-9]\* to find the + tests of one CI run. It uses the regex (dai|week)ly-(.+?)-\[0-9]\* to find the version (e.g. daily-elalto-123456789). The command becomes: @@ -71,20 +72,21 @@ The command becomes: ``` docker run -v :/root/.kube/config -v :/var/lib/xtesting/results -nexus3.onap.org:10001/onap/xtesting-security:latest +nexus3.onap.org:10003/onap/xtesting-security:latest /bin/bash -c "run_tests -r -t all ``` ### Output ``` -+-----------------------+------------+------------+------------+-----------+ -| TEST CASE | PROJECT | TIER | DURATION | RESULT | -+-----------------------+------------+------------+------------+-----------+ -| root_pods | security | security | 03:48 | PASS | -| unlimitted_pods | security | security | 00:37 | FAIL | -| cis_kubernetes | security | security | 00:01 | PASS | -| http_public_endpoints | security | security | 00:01 | PASS | -| jdpw_ports | security | security | 05:39 | PASS | -+-----------------------+------------+------------+------------+-----------+ ++-----------------------+------------+------------+-----------+ +| TEST CASE | PROJECT | DURATION | RESULT | ++-----------------------+------------+------------+-----------+ +| root_pods | security | 03:48 | PASS | +| unlimitted_pods | security | 00:37 | FAIL | +| cis_kubernetes | security | 00:01 | PASS | +| kube_hunter | security | 00:03 | PASS | +| http_public_endpoints | security | 00:01 | PASS | +| jdpw_ports | security | 05:39 | PASS | ++-----------------------+------------+------------+-----------+ ``` -- cgit 1.2.3-korg