Skip to content

Commit a878112

Browse files
Add cluster hardening tests (#759)
* Add first tests for cluster hardening standard Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Add test for Pod security admission controller Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Add test for authorization methods Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Add test for authentication methods Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Add test if communication with etcd is secured via TLS Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Add test whether the etcd is isolated from k8s cluster Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Rebase after current sonobuoy golang framework was restructured Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Adjust test for etcd tls communication Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Adjust test which checks if kubelet readonly port is disabled Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Remove unused functions Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Remove development artifact Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Restructure the code to make it a bit more clearly Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Update kind config Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> * Remove kubeadmConfigPatches section in kind_config.yaml Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> --------- Signed-off-by: michal.gubricky <michal.gubricky@dnation.cloud> Co-authored-by: cah-patrickthiem <140701884+cah-patrickthiem@users.noreply.github.com>
1 parent 53b5e45 commit a878112

1 file changed

Lines changed: 837 additions & 0 deletions

File tree

0 commit comments

Comments
 (0)