Dan Mihai 2c4d1ef76b tests: k8s: inject agent policy failures (part 3) ...

Auto-generate the policy and then simulate attacks from the K8s
control plane by modifying the test yaml files. The policy then
detects and blocks those changes.

These test cases are using K8s Pods. Additional policy failures
are injected during CI using other types of K8s resources - e.g.,
using Jobs and Replication Controllers - from separate PRs.

Fixes: #9491

Signed-off-by: Dan Mihai <dmihai@microsoft.com>

2024-04-16 18:15:12 +00:00

..

confidential/unencrypted

k8s: confidential: Update cpuid to its latest release

2024-03-26 10:21:12 +01:00

stress

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

busybox-pod.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

busybox-template.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

footloose-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

initContainer-shared-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

initcontainer-shareprocesspid.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

inject_secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

inotify-configmap-pod.yaml

ci: k8s: Don't set cpu limit request for k8s-inotofy test

2023-09-14 22:03:16 +02:00

inotify-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

inotify-updated-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

job-template.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

job.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

k8s-policy-configmap.yaml

tests: k8s: inject agent policy failures (part 3)

2024-04-16 18:15:12 +00:00

k8s-policy-exec-rejected.yaml

tests: more k8s-exec-rejected debug output

2023-11-29 18:05:15 +00:00

k8s-policy-job.yaml

tests: k8s: inject agent policy failures

2024-04-09 15:36:57 +00:00

k8s-policy-pod.yaml

tests: k8s: inject agent policy failures (part 3)

2024-04-16 18:15:12 +00:00

k8s-policy-rc.yaml

tests: k8s: inject agent policy failures (part2)

2024-04-11 21:08:53 +00:00

k8s-policy-set-keys.rego

tests: query data from the OPA service

2023-10-17 13:31:43 +00:00

k8s-policy-set-keys.yaml

tests: query data from the OPA service

2023-10-17 13:31:43 +00:00

kata-runtimeclass.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

lifecycle-events.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

limit-range.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

nginx-deployment.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-attestable.yaml

test/k8s: Add basic attestation test

2024-04-08 11:38:53 +01:00

pod-besteffort.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-burstable.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-caps.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-confidential-unencrypted.yaml

tests: Add confidential test for SEV

2023-08-29 14:10:34 +02:00

pod-config.yaml.in

tests/k8s: add new_pod_config() to lib.sh

2023-11-28 11:21:53 -03:00

pod-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-cpu-defaults.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-cpu.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-custom-dns.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

pod-empty-dir-fsgroup.yaml

kubernetes: add agnhost command in pod yaml

2023-05-23 18:11:45 +08:00

pod-empty-dir.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-env.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-file-volume.yaml

tests: run k8s-file-volume on a given node

2023-10-09 11:08:48 -03:00

pod-footloose.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-guaranteed.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-http-liveness.yaml

kubernetes: add agnhost command in pod yaml

2023-05-23 18:11:45 +08:00

pod-hugepage.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-liveness.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-manifest-v1.yaml

genpolicy: toggle containerd pull in tests

2024-04-08 19:28:29 -07:00

pod-memory-limit.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-nested-configmap-secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-number-cpu.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-oom.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

pod-optional-empty-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-optional-empty-secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-projected-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-quota-deployment.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

pod-readonly-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-sandbox-vcpus-allocation.yaml

tests: Add a simple test to check the VMM vcpu allocation

2023-11-10 18:26:01 +01:00

pod-seccomp.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-secret-env.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-security-context.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-shared-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-sysctl.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-tcp-liveness.yaml

kubernetes: add agnhost command in pod yaml

2023-05-23 18:11:45 +08:00

pv-pod.yaml

tests: run k8s-volume on a given node

2023-10-09 11:08:48 -03:00

pv-volume.yaml

tests: Add k8s-volume test

2023-07-27 14:06:43 -07:00

redis-master-deployment.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

redis-master-service.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

replication-controller.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

resource-quota.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

tests-namespace.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

vfio.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

volume-claim.yaml

tests: Add k8s-volume test

2023-07-27 14:06:43 -07:00