Update kind config

michal-gubricky · michal-gubricky · commit 70c8cc91cab8 · 2024-11-20T15:45:19.000+01:00
Signed-off-by: michal.gubricky &lt;michal.gubricky@dnation.cloud&gt;
diff --git a/Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml b/Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml
@@ -12,6 +12,9 @@ kubeadmConfigPatches:
     apiServer:
       extraArgs:
         enable-admission-plugins: "NodeRestriction,PodSecurity"
+        oidc-issuer-url: https://localhost:8443
+        oidc-client-id: kubernetes
+        oidc-username-claim: sub
 nodes:
 - role: control-plane
 - role: worker
diff --git a/Tests/kaas/kaas-sonobuoy-tests/scs_k8s_conformance_tests/scs_0217_cluster_hardening_test.go b/Tests/kaas/kaas-sonobuoy-tests/scs_k8s_conformance_tests/scs_0217_cluster_hardening_test.go
@@ -467,7 +467,6 @@ func Test_scs_0217_sonobuoy_Control_Plane_Ports_Security(t *testing.T) {
 	testenv.Test(t, f.Feature())
 }
 
-// Test_K8s_Endpoints_HTTPS checks if all Kubernetes endpoints are secured via HTTPS.
 // Test_K8s_Endpoints_HTTPS checks if all Kubernetes endpoints are secured via HTTPS.
 func Test_scs_0217_sonobuoy_K8s_Endpoints_HTTPS(t *testing.T) {
 	f := features.New("Kubernetes endpoint security").Assess(

Original file line number	Diff line number	Diff line change
`@@ -467,7 +467,6 @@ func Test_scs_0217_sonobuoy_Control_Plane_Ports_Security(t *testing.T) {`
`467`	`467`	`testenv.Test(t, f.Feature())`
`468`	`468`	`}`
`469`	`469`
`470`		`-// Test_K8s_Endpoints_HTTPS checks if all Kubernetes endpoints are secured via HTTPS.`
`471`	`470`	`// Test_K8s_Endpoints_HTTPS checks if all Kubernetes endpoints are secured via HTTPS.`
`472`	`471`	`func Test_scs_0217_sonobuoy_K8s_Endpoints_HTTPS(t *testing.T) {`
`473`	`472`	`f := features.New("Kubernetes endpoint security").Assess(`