Code

Add cluster hardening tests#759

Code

Merged

cah-patrickthiem merged 15 commits intomainSovereignCloudStack/standards:mainfrom feat/cluster-hardening-testsSovereignCloudStack/standards:feat/cluster-hardening-testsCopy head branch name to clipboardDec 2, 2024

+837

Commits

Commits on Nov 22, 2024

• Add first tests for cluster hardening standard

  Show description for 7235787
  michal-gubricky

  committed
  7235787

  Copy full SHA for 7235787

• Add test for Pod security admission controller

  Show description for 115505d
  michal-gubricky

  committed
  115505d

  Copy full SHA for 115505d

• Add test for authorization methods

  Show description for 6454e4b
  michal-gubricky

  committed
  6454e4b

  Copy full SHA for 6454e4b

• Add test for authentication methods

  Show description for 7a5f7fa
  michal-gubricky

  committed
  7a5f7fa

  Copy full SHA for 7a5f7fa

• Add test if communication with etcd is secured via TLS

  Show description for 527c226
  michal-gubricky

  committed
  527c226

  Copy full SHA for 527c226

• Add test whether the etcd is isolated from k8s cluster

  Show description for b220552
  michal-gubricky

  committed
  b220552

  Copy full SHA for b220552

• Rebase after current sonobuoy golang framework was restructured

  Show description for 797f42d
  michal-gubricky

  committed
  797f42d

  Copy full SHA for 797f42d

• Adjust test for etcd tls communication

  Show description for ac16507
  michal-gubricky

  committed
  ac16507

  Copy full SHA for ac16507

• Adjust test which checks if kubelet readonly port is disabled

  Show description for c9fb249
  michal-gubricky

  committed
  c9fb249

  Copy full SHA for c9fb249

• Remove unused functions

  Show description for 02eed35
  michal-gubricky

  committed
  02eed35

  Copy full SHA for 02eed35

• Remove development artifact

  Show description for 6ae8245
  michal-gubricky

  committed
  6ae8245

  Copy full SHA for 6ae8245

• Restructure the code to make it a bit more clearly

  Show description for dd4b1cd
  michal-gubricky

  committed
  dd4b1cd

  Copy full SHA for dd4b1cd

• Update kind config

  Show description for 21e9937
  michal-gubricky

  committed
  21e9937

  Copy full SHA for 21e9937

• Remove kubeadmConfigPatches section in kind_config.yaml

  Show description for b962d02
  michal-gubricky

  committed
  b962d02

  Copy full SHA for b962d02

Commits on Dec 2, 2024

• Merge branch 'main' into feat/cluster-hardening-tests

  cah-patrickthiem

  authored
  1149213

  Copy full SHA for 1149213