mirror of
https://github.com/kubescape/kubescape.git
synced 2026-02-14 18:09:55 +00:00
4ea35eec00
* GitRegoStore moved to Regolibrary * httphandler go mod * update go.mod * test old regostorlibrary * restore gitRegoStore from regolibrary * Update github.com/kubescape/regolibrary to ver 249 Signed-off-by: kooomix <eranm@armosec.io> * update go mod Signed-off-by: kooomix <eranm@armosec.io> * print scan_control_id mesg Signed-off-by: kooomix <eranm@armosec.io> * Update regolibrary version - windows host fix Signed-off-by: kooomix <eranm@armosec.io> --------- Signed-off-by: kooomix <eranm@armosec.io> Co-authored-by: David Wertenteil <dwertent@armosec.io>
82 lines
2.7 KiB
Python
82 lines
2.7 KiB
Python
import os
|
|
import smoke_utils
|
|
import sys
|
|
|
|
|
|
all_files = os.path.join("..", "*.yaml")
|
|
# all_files = os.path.join("..", "examples", "online-boutique", "*.yaml")
|
|
single_file = os.path.join("..", "examples", "online-boutique", "frontend.yaml")
|
|
|
|
|
|
def scan_all(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_control_name(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", "control", 'HostPath mount', all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_control_id(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", "control", 'C-0048', all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_controls(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", "control", 'C-0048,C-0016', all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_framework(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", "framework", "nsa", all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_frameworks(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", "framework", "nsa,mitre", all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_all(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=[kubescape_exec, "scan", all_files, "--enable-host-scan=false"])
|
|
|
|
|
|
def scan_from_stdin(kubescape_exec: str):
|
|
return smoke_utils.run_command(command=["cat", single_file, "|", kubescape_exec, "scan", "framework", "nsa", "-", "--enable-host-scan=false"])
|
|
|
|
|
|
def run(kubescape_exec: str):
|
|
print("Testing E2E on yaml files")
|
|
|
|
# TODO - fix support
|
|
# print("Testing scan all yaml files")
|
|
# msg = scan_all(kubescape_exec=kubescape_exec)
|
|
# smoke_utils.assertion(msg)
|
|
|
|
print("Testing scan control id")
|
|
msg = scan_control_id(kubescape_exec=kubescape_exec)
|
|
print(f"scan_control_id message: {msg}")
|
|
smoke_utils.assertion(msg)
|
|
|
|
print("Testing scan controls")
|
|
msg = scan_controls(kubescape_exec=kubescape_exec)
|
|
smoke_utils.assertion(msg)
|
|
|
|
print("Testing scan framework")
|
|
msg = scan_framework(kubescape_exec=kubescape_exec)
|
|
smoke_utils.assertion(msg)
|
|
|
|
print("Testing scan frameworks")
|
|
msg = scan_frameworks(kubescape_exec=kubescape_exec)
|
|
smoke_utils.assertion(msg)
|
|
|
|
print("Testing scan all")
|
|
msg = scan_all(kubescape_exec=kubescape_exec)
|
|
smoke_utils.assertion(msg)
|
|
|
|
# TODO - fix test
|
|
# print("Testing scan from stdin")
|
|
# msg = scan_from_stdin(kubescape_exec=kubescape_exec)
|
|
# smoke_utils.assertion(msg)
|
|
|
|
print("Done E2E yaml files")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
run(kubescape_exec=smoke_utils.get_exec_from_args(sys.argv))
|