ONAP Security Tests

Disclaimer: Information below is work in progress and might not be accurate.

Available checkers

• Exposed HTTP endpoints

• Exposed JDWP interfaces

• Kubernetes CIS Benchmark compliance

On-premises execution

1. Test plans

2. Environment

3. Runner

Upstream execution

TBD if execution by Robot is possible

Blocked-by:

• kubectl access requirement (accessible by Runner)

• cluster access requirement (accessible within Jobs on Jenkins instances)

Jenkins instances

• https://jenkins.onap.org (probably whole CSIT)

• http://onapci.org/jenkins (selected test cases)

Relevant?

Creating a CSIT Test

https://git.onap.org/ci-management/