No description
Find a file
2025-08-20 13:48:15 +02:00
results Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
.gitignore Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
cleaned.json Initial commit 2025-08-20 12:30:21 +02:00
cleanup.sh Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
download-charts.py Initial commit 2025-08-20 12:30:21 +02:00
fetch-raw-check-results.py Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
get-results.sh Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
helm-ready.sh Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
install-commands.py Initial commit 2025-08-20 12:30:21 +02:00
named.json Update README 2025-08-20 12:31:12 +02:00
README.md Update README 2025-08-20 12:31:12 +02:00
requirements.txt Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00
wait-for-namespacehardeningcheck.sh Add scripts to fetch all results from kubectl as well as valkey, add cleanup scripts 2025-08-20 13:48:15 +02:00

Helm Chart based testing

Preparation

  1. Get most popular charts from Artifacthub
ToDo: document curl command
  1. Extract repos
jq '[.packages[] | {"name":  .name, "version": .version, "repo": .repository.url}]'
  1. Run main.py to download charts
python main.py
  1. Run tests for each charts

Per chart

  1. Install Chart using default values
helm install ./charts/<chart-name>.tgz
  1. Make sure chart is running successfully
kubectl -n <namespace> get pods
  1. Create NamespaceHardeningCheck
apiVersion: checks.funk.fhnw.ch/v1alpha1
kind: NamespaceHardeningCheck
metadata:
  labels:
    app.kubernetes.io/name: orakel-of-funk
  name: <tool-name>
spec:
  targetNamespace: <tool-namespace>
  recordingDuration: 1m
  1. Wait for results

  2. Analyze results