Add security checks 75/98775/3
authorPawel Wieczorek <p.wieczorek2@samsung.com>
Fri, 22 Nov 2019 18:33:56 +0000 (19:33 +0100)
committerPawel Wieczorek <p.wieczorek2@samsung.com>
Thu, 12 Dec 2019 11:05:47 +0000 (12:05 +0100)
commitea01108626400b58c8571f55eece1129a060b7d3
tree39f700b42dd3e4724fcb66bd57a3eb7270c117d3
parentb45993c7d4eaba9634fbe5453e39522655172298
Add security checks

This patch adds initial security validation check. It includes JSON file
containing dictionary of acknowledged NodePorts with corresponding
services [1].

Data required to perform added security check cannot be easily obtained
from within "robot" pod (without granting it access to "kubectl" tool
and as a side effect - cluster modifications). That is why it should be
collected beforehand by the test operator and stored as a JSON file.

Added suite expects having "${ACTUAL_NODEPORTS_FILE}" variable defined.
It will attempt parsing data stored in the file pointed by the said
variable and compare it against expected NodePorts.

[1] https://docs.onap.org/en/elalto/guides/onap-developer/settingup/index.html#nodeports

Issue-ID: SECCOM-261
Change-Id: Ib8078c50e943125f8452120368891c3e3a7056bc
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
robot/assets/security/ExpectedNodePorts.json [new file with mode: 0644]
robot/testsuites/security.robot [new file with mode: 0644]