docker/security/testcases.yaml

   1 ---
   2 tiers:
   3     -
   4         name: security
   5         description: >-
   6             Set of basic security tests.
   7         testcases:
   8             -
   9                 case_name: kube_hunter
  10                 project_name: functest
  11                 criteria: 100
  12                 blocking: false
  13                 description: >-
  14                     Check that the kubernetes cluster has no known
  15                     vulnerabilities
  16                 run:
  17                     name: kube_hunter
  18                     args:
  19                         severity: high
  20
  21             -
  22                 case_name: kube_bench_master
  23                 project_name: functest
  24                 criteria: 100
  25                 blocking: false
  26                 description: >-
  27                     Checks whether Kubernetes is deployed securely by running
  28                     the master checks documented in the CIS Kubernetes
  29                     Benchmark.
  30                 run:
  31                     name: kube_bench
  32                     args:
  33                         target: master
  34
  35             -
  36                 case_name: kube_bench_node
  37                 project_name: functest
  38                 criteria: 100
  39                 blocking: false
  40                 description: >-
  41                     Checks whether Kubernetes is deployed securely by running
  42                     the node checks documented in the CIS Kubernetes
  43                     Benchmark.
  44                 run:
  45                     name: kube_bench
  46                     args:
  47                         target: node