No description
| results | ||
| .gitignore | ||
| cleaned.json | ||
| cleanup.sh | ||
| download-charts.py | ||
| fetch-raw-check-results.py | ||
| get-results.sh | ||
| helm-ready.sh | ||
| install-commands.py | ||
| named.json | ||
| README.md | ||
| requirements.txt | ||
| wait-for-namespacehardeningcheck.sh | ||
Helm Chart based testing
Preparation
- Get most popular charts from Artifacthub
ToDo: document curl command
- Extract repos
jq '[.packages[] | {"name": .name, "version": .version, "repo": .repository.url}]'
- Run main.py to download charts
python main.py
- Run tests for each charts
Per chart
- Install Chart using default values
helm install ./charts/<chart-name>.tgz
- Make sure chart is running successfully
kubectl -n <namespace> get pods
- Create NamespaceHardeningCheck
apiVersion: checks.funk.fhnw.ch/v1alpha1
kind: NamespaceHardeningCheck
metadata:
labels:
app.kubernetes.io/name: orakel-of-funk
name: <tool-name>
spec:
targetNamespace: <tool-namespace>
recordingDuration: 1m
-
Wait for results
-
Analyze results