From 978b2e5a8a00e2d9439afd65ab9c487b50a6357b Mon Sep 17 00:00:00 2001 From: morganrol Date: Tue, 24 Aug 2021 16:49:19 +0200 Subject: [WAIVERS] Update regex to exclude DCAE temp dockers DCAE create pods during the tests these dockers are created without limits As security tests are executed after the tests, such pods are detected as part of the unlimitted pods Until it is fixed, we can add them in the waiver list Issue-ID: TEST-360 Signed-off-by: morganrol Change-Id: Ifb514aa15beab885b5dc15505ebb244fd1a71f95 --- security/scripts/check_unlimitted_pods.sh | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) (limited to 'security/scripts/check_unlimitted_pods.sh') diff --git a/security/scripts/check_unlimitted_pods.sh b/security/scripts/check_unlimitted_pods.sh index ced1530..2456766 100644 --- a/security/scripts/check_unlimitted_pods.sh +++ b/security/scripts/check_unlimitted_pods.sh @@ -62,24 +62,24 @@ while IFS= read -r line; do # for each line we test if it is in the white list with a regular expression while IFS= read -r wl_line; do wl_name=$(echo $wl_line | awk {'print $1'}) - if grep -e $K8S_NAMESPACE-$wl_name <<< "$line" > /dev/null ;then - # Found in white list, exclude it - sed -i "/$line/d" $FILTERED_PODS_LIST - fi + if grep -e $K8S_NAMESPACE-$wl_name <<< "$line" > /dev/null ;then + # Found in white list, exclude it + sed -i "/$line/d" $FILTERED_PODS_LIST + fi # tmp ugly workaround to exlude dep (temporary dcae dockers) - if grep -e dep-$wl_name <<< "$line" > /dev/null ;then - sed -i "/$line/d" $FILTERED_PODS_LIST - fi + if grep -e "^dep.*dcae-tcagen2" <<< "$line" > /dev/null ;then + sed -i "/$line/d" $FILTERED_PODS_LIST + fi done < $WL_RAW_FILE_PATH done < $FILTERED_PODS_LIST if [ -s $FILTERED_PODS_LIST ] then - code=1 - nb_errors=`cat $FILTERED_PODS_LIST | wc -l` - echo "Test FAIL: $nb_errors pod(s) launched without limit" - cat $FILTERED_PODS_LIST + code=1 + nb_errors=`cat $FILTERED_PODS_LIST | wc -l` + echo "Test FAIL: $nb_errors pod(s) launched without limit" + cat $FILTERED_PODS_LIST else echo "Test PASS: No pod launched without limit" fi -- cgit 1.2.3-korg