github/krkn
1
0
Fork 0
mirror of https://github.com/krkn-chaos/krkn.git synced 2026-08-25 09:27:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
869 Commits 34 Branches 103 Tags
v5.1.1
Commit Graph
108 Commits
Author SHA1 Message Date
Paige Patton 55d8bf7062 no build isolation (#1430) 
Assisted By: Claude Code:
Assisted By: Claude Code:

Signed-off-by: Paige Patton <prubenda@redhat.com>
 2026-06-30 13:43:34 -04:00
Paige PattonandClaude Sonnet 4.6 4328c24d28 feat: add label_selector support to kubevirt vm outage and virt health check (#1341) 
Allows selecting VMIs by label selector as an alternative to vm_name regex,
making vm_name optional when label_selector is provided.

Signed-off-by: Paige Patton <prubenda@redhat.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 17:02:10 -04:00
Tullio SebastianiClaude Sonnet 4.5Paige Patton
 		7c94a307d0 fixes krkn source dependencies cves and introduces grype scan in GH Action (#1336) 
* adding member request information

Signed-off-by: Paige Patton <prubenda@redhat.com>
Assisted By: Claude Code:

fixes krkn source dependencies cves

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
introduced grype scan on github images

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

golang downgrade

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

golang dependency pinning

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

golang dependency pinning

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

setuptools downgrade

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

go-ntlmssp downgrade

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

security scan in summary

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

setuptools downgrade

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

upgrade to fedora 45

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

golang dependencies

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

removed pinned dependencies

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

pinned dependency for oc latest

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

golang stdlib stable version

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

upgrading oc release

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

upgrading yq

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

yq build in pipeline

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

pinned transitive dependencies

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

removed not working

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

buildkit unpinned

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

other pinned dependencies

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

other pinned

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

other pinned

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

go work vendor

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

other pinned

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

pin buildkit and distribution

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

reinstated distribution

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

nit

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

SECURITY.md

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

feat: add Grype security scanning badge and comprehensive security policy

- Add security badge job to docker-image workflow
  - Generates detailed badge showing C:X H:Y M:Z vulnerability counts
  - Runs on every push to main branch
  - Publishes badge to krkn-lib-docs repository
  - Uses Grype to scan container image for CVEs
  - Dynamic color based on severity (green/yellow/orange/red)

- Add security badge to README.md
  - Displays current vulnerability baseline
  - Placed after coverage badge for visibility

- Enhance SECURITY.md with CNCF-ready security policy
  - Document proactive security approach with Grype CI/CD integration
  - Define security baseline: 0 Critical, 7 High, 3 Medium, 0 Low (12 total)
  - Detail accepted risks with mitigation strategies
  - Document all 12 known CVEs in transitive dependencies
  - Explain why each CVE cannot be fixed (dependency constraints)
  - Establish quarterly review process for accepted risks
  - Add SLA commitments for vulnerability remediation

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

fix: remove moby/buildkit v0.28.1 pin that breaks oc build

The moby/buildkit v0.28.1 upgrade has breaking API changes (undefined: archive.Compression)
that are incompatible with docker/docker v28.5.2 vendored in oc.

This CVE is documented as accepted risk in SECURITY.md.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

DCO

krkn-lib update

krkn-lib update

* increased krkn-lib version

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: Paige Patton <prubenda@redhat.com>
 2026-05-20 14:21:51 -04:00
Paige Patton 7d4aba9df6 adding kubectl cli (#1321) 
Assisted By: Claude Code:

Assisted By: Claude Code:

Signed-off-by: Paige Patton <prubenda@redhat.com>
 2026-05-14 13:55:08 -04:00
Arpit Raj 1623dbac53 fix: resolve Python version mismatch in container entrypoint (#1222) 
Signed-off-by: 1PoPTRoN <vrxn.arp1traj@gmail.com>
 2026-04-08 09:00:37 -04:00
Tullio Sebastiani 62dadfe25c Resiliency Score krknctl compatibility fixes (#1195) 
* added console log of the resiliency score when mode is "detailed"

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* base image krknctl input

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

resiliency score flag

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* removed json print in run_krkn.py

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* unit test fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2026-03-20 11:08:56 -04:00
Paige Patton 2a60a519cd adding run tag (#1179) 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2026-03-16 16:18:50 -04:00
Nesar Kavri aee61061ac Fix: make entrypoint fail fast if setup-ssh.sh fails (#1170) 
Signed-off-by: Nesar976 <kavrinesar@gmail.com>
 2026-02-27 14:18:01 -05:00
Paige Patton 898ce76648 adding python3.11 updates (#1012) 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2026-02-02 12:00:33 -05:00
Paige Patton 6acd6f9bd3 adding common vars for new kubevirt checks (#973)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m58s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-11-21 09:51:46 -05:00
Tullio Sebastiani fd3e7ee2c8 Fixes several Image cves (#941) 
* fixes some CVEs on the base image

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* oc dependencies updated

* virtctl build

fix

removed virtctil installation

pip

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2025-11-11 19:50:12 +01:00
Paige Patton d5284ace25 adding prometheus url to krknctl input (#943) 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-11-11 13:45:27 -05:00
Paige Patton 6629c7ec33 adding virt checks (#932)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 8m46s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Assisted By: Claude Code

Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-11-05 21:17:21 -05:00
Paige Patton 8c05e44c23 adding ssh install and virtctl version
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 9m59s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-09-04 13:57:34 -07:00
Paige Patton 88f8cf49f1 fixing kubevirt name not duplicate namespace 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-09-04 12:45:05 -07:00
Paige Patton 84169e2d4e adding no scenario type (#869)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 5m32s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-08-29 08:55:06 -04:00
Sahil Shah 05bc404d32 Adding IPMI tool to dockerfile
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 10m56s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Sahil Shah <sahshah@redhat.com>
 2025-08-25 12:28:03 -04:00
Naga Ravi Chaitanya Ellurisnyk-botTullio Sebastiani
 		ca6995a1a1 [Snyk] Fix for 3 vulnerabilities (#859) 
* fix: requirements.txt to reduce vulnerabilities


The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194

* partial vulnerability fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: Tullio Sebastiani <tsebasti@redhat.com>
 2025-07-22 16:50:31 +02:00
ShAsHi 0dcb901da1 Update README.md
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 8m56s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
2025-05-28 07:43:14 -04:00
Paige Patton 32fb6eec07 enum of true/false variables
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 8m20s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-05-07 16:25:18 -04:00
Paige Patton edd0159251 adding health check global variables (#798)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m12s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Paige Patton <prubenda@redhat.com>
 2025-05-07 15:47:03 +02:00
Tullio Sebastiani cfe624f153 changed get_node_ip to krkn-lib and removed kubectl dependency (#799) 
* changed get_node_ip to krkn-lib and removed kubectl dependency

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* updated krkn-lib to 5.0.1

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2025-05-07 15:43:27 +02:00
Tullio SebastianiandNaga Ravi Chaitanya Elluri 9c5251d52f setuptools + golang stdlib (#781)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m54s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
* setuptools + golang stdlib

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* equals

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
Co-authored-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2025-03-24 14:41:25 +01:00
Tullio Sebastiani 0d0143d1e0 added metrics-patch global krknctl flag
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 8m41s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

indent

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2025-03-21 14:29:24 +00:00
Tullio Sebastiani 57a747a34a fix funtests on main branch + removed golang vulnerabilities (#777)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 3m30s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
* fix funtests on main branch + removed golang vulnerabilities

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* upgraded go to 1.23.0 + library updates

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2025-03-20 13:12:19 +01:00
Tullio Sebastiani cecaa1eda3 removed deprecated ES fields + removed host validator (#774)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m6s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
DCO

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2025-03-19 13:10:44 -04:00
Tullio Sebastiani 64cfd2ca4d fixes krknctl describe bug
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 4m36s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped
2025-01-20 09:43:59 -05:00
Tullio Sebastiani 4fea1a354d added krknctl types to krkn baseimage for global variables (#741)
Functional & Unit Tests / Functional & Unit Tests (push) Failing after 7m55s
Functional & Unit Tests / Generate Coverage Badge (push) Has been skipped 
* added krknctl types to krkn baseimage for global variables

fixed

* fixed dockerfile

* dockerfile compile script

fix
 2025-01-07 10:12:37 -05:00
Tullio Sebastiani 32142cc159 CVEs fix (#698) 
* golang cves fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* arcaflow update

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-09-20 08:33:41 -04:00
Naga Ravi Chaitanya Elluri 5484828b67 Deprecate running krkn as kubernetes app 
This commit removes the instructions on running krkn as kubernetes
deployment as it is not supported/maintained and also not recommended.

Signed-off-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2024-08-09 13:44:43 -04:00
Naga Ravi Chaitanya Elluri 56ff0a8c72 Deprecate setting release version in the container source file 
This commit also deprecates building container image for ppc64le as it
is not actively maintained. We will add support if users request for it
in the future.

Signed-off-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2024-07-18 12:56:08 -04:00
Paige Rubendall ef1a55438b taking out need for az cli to be installed 
rh-pre-commit.version: 2.2.0
rh-pre-commit.check-secrets: ENABLED

Signed-off-by: Paige Rubendall <prubenda@redhat.com>
 2024-07-05 15:18:06 -04:00
Tullio Sebastiani 4870c86515 moves the krkn-hub build from push on main to tag (#660) 
* moves the krkn-hub build from push on main to tag + final image enhancement

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

fixed syntax

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

typo

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

typo

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* quotes

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-07-05 16:09:34 +02:00
Naga Ravi Chaitanya Elluri 6ae17cf678 Update dockerfile to install azure-cli using dnf 
Avoids architecture issues such as "bash: /usr/bin/az: cannot execute: required file not found"

Signed-off-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2024-07-03 18:35:45 -04:00
Tullio Sebastiani ce9f8aa050 Dockerfile update v1.6.2 (#659) 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-07-03 16:34:37 +02:00
Tullio Sebastiani 5f836f294b Kill pod arca plugin update adaptation (#656) 
* new kill-pod interface adaptation

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* unit test fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* requirements update

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* fixed duplicate requirement

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* added conditional dockerfile build

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

fix

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

removed useless print

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-07-03 15:50:43 +02:00
Naga Ravi Chaitanya Elluri 5ddfff5a85 Make krkn dir executable 
Signed-off-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2024-06-20 14:32:20 -04:00
Tullio Sebastiani 7d18487228 Dockerfile update 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-06-12 14:36:38 -04:00
Tullio Sebastiani ea3444d375 added dependencies removed from the hub 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

jsonschema

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-06-11 12:07:28 -04:00
Tullio Sebastiani 7b660a0878 Fixes system and oc vulnerabilities detected by trivy (#644) 
* fixes system and oc vulnerabilities detected by trivy

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

* updated base image to run as krkn user instead of root

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

---------

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-06-10 14:26:03 -04:00
Tullio Sebastiani 5fe0655f22 libnghttp2 version update 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-06-06 08:21:08 -04:00
Tullio Sebastiani 5df343c183 dockerfile update 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-06-04 14:36:11 -04:00
Tullio Sebastiani 86a7427606 Dockerfile refactoring to build oc together with krkn 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

added oc in /usr/local/bin as well

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>

fixed dumb docker build copy

Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-06-04 10:41:11 -04:00
Tullio Sebastiani 57de3769e7 ubi 9 base image + quay.io vulnerability fixes 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-05-31 10:58:52 -04:00
Tullio Sebastiani dbe3ea9718 Dockerfiles update 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-05-13 10:56:58 -04:00
Tullio Sebastiani 2327531e46 Dockerfiles update (#614) 
Signed-off-by: Tullio Sebastiani <tsebasti@redhat.com>
 2024-04-24 11:40:58 -04:00
Paige Rubendall 54af2fc6ff adding v1.5.12 tag 
Signed-off-by: Paige Rubendall <prubenda@redhat.com>
 2024-03-29 18:45:52 -04:00
Naga Ravi Chaitanya Elluri a5efd7d06c Bump release version to v1.5.11 
Signed-off-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2024-03-22 15:24:04 -04:00
Naga Ravi Chaitanya Elluri 782440c8c4 Copy oc and kubectl clients to additional paths 
This will make sure oc and kubectl clients are accessible for users
with both /usr/bin and /usr/local/bin paths set on the host.

Signed-off-by: Naga Ravi Chaitanya Elluri <nelluri@redhat.com>
 2024-03-21 11:29:50 -04:00
Paige Rubendall 8dd9b30030 updating tag (#589) 
Signed-off-by: Paige Rubendall <prubenda@redhat.com>
 2024-03-06 13:11:44 -05:00