summaryrefslogtreecommitdiffstats
path: root/robot/testsuites
diff options
context:
space:
mode:
authorPawel Wieczorek <p.wieczorek2@samsung.com>2019-11-22 19:33:56 +0100
committerPawel Wieczorek <p.wieczorek2@samsung.com>2019-12-12 12:05:47 +0100
commitea01108626400b58c8571f55eece1129a060b7d3 (patch)
tree39f700b42dd3e4724fcb66bd57a3eb7270c117d3 /robot/testsuites
parentb45993c7d4eaba9634fbe5453e39522655172298 (diff)
Add security checks
This patch adds initial security validation check. It includes JSON file containing dictionary of acknowledged NodePorts with corresponding services [1]. Data required to perform added security check cannot be easily obtained from within "robot" pod (without granting it access to "kubectl" tool and as a side effect - cluster modifications). That is why it should be collected beforehand by the test operator and stored as a JSON file. Added suite expects having "${ACTUAL_NODEPORTS_FILE}" variable defined. It will attempt parsing data stored in the file pointed by the said variable and compare it against expected NodePorts. [1] https://docs.onap.org/en/elalto/guides/onap-developer/settingup/index.html#nodeports Issue-ID: SECCOM-261 Change-Id: Ib8078c50e943125f8452120368891c3e3a7056bc Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Diffstat (limited to 'robot/testsuites')
-rw-r--r--robot/testsuites/security.robot14
1 files changed, 14 insertions, 0 deletions
diff --git a/robot/testsuites/security.robot b/robot/testsuites/security.robot
new file mode 100644
index 00000000..089e12ed
--- /dev/null
+++ b/robot/testsuites/security.robot
@@ -0,0 +1,14 @@
+*** Settings ***
+| Documentation | Security validation |
+| ... | This suite requires declaring ${ACTUAL_NODEPORTS_FILE} |
+| Default tags | security |
+| Library | ONAPLibrary.JSON |
+
+*** Variables ***
+| ${EXPECTED_NODEPORTS_FILE} | ../assets/security/ExpectedNodePorts.json |
+
+*** Test Cases ***
+Validate present NodePorts
+| | ${expected_nodeports}= | Get file | ${EXPECTED_NODEPORTS_FILE} |
+| | ${actual_nodeports}= | Get file | ${ACTUAL_NODEPORTS_FILE} |
+| | JSON should contain sub JSON | ${expected_node_ports} | ${actual_node_ports} |