...
- The
bpa_verifier.sh
script get the MAC addresses and IP addresses of the 2 VMs nodes provisioned by metal3, then creates a fake DHCP lease file using the IP address and MAC address information. It also creates a provisioning CR using the MAC address information. - The script creates an ssh secret key using the ssh keys of the test host, applies the provisioning CR.
- The script busy loops until the KUD installation job completes or fails. If it completes successfully, it runs a curl command using the authentication info of the new cluster to confirm if it was successful or not. On completing all the steps, it runs a teardown where it deletes everything it created.
...
- OVN4NFV provides Provider networks using VLAN networking and Service Function Chaining.
- After the pod is up and running, we will be able to attach to the pod and check for multiple interfaces created inside the container.
- OVN4NFV networking is setup and created along the EMCO composite vFW testing.
Node Feature Discovery
- Node Feature Discovery for Kubernetes detects hardware features available on each node in a Kubernetes cluster and advertises those features using node labels.
- Creates a pod with specific label information in the case the pods are scheduled only on nodes whose major kernel version is 3 and above. Since the NFD master and worker daemonset is already running, the master has all the label information about the nodes which is collected by the worker.
- If the OS version matches, the Pod will be scheduled and launched. Otherwise, the Pod will be in a pending state in case there are no nodes with matching labels that are requested by the Pod.
CMK
- CPU Manager for Kubernetes provides CPU pinning for K8s workloads. In KUD, there are two test cases for the exclusive and shared CPU pools testing.
...
Layer | Result | Comments | Nexus |
os/lynis | PASS with exceptions | Exceptions:
| Logs |
os/vuls | PASS with exceptions | Exceptions:
| Logs |
k8s/conformance | PASS with exceptions | Exceptions:
| Logs |
k8s/kube-hunter | PASS | With aquasec/kube-hunter:edge image | Logs |
Release 5 Blueprint Scanning Status
Akraino CVE Vulnerability Exception Request
...