zhuguanyu Please add the Basic info of the k8s cluster you have deployed on UNH Lab including the version and config file.
Also you can give the self-test results here. Thanks.
basic
...
info
version: 1.21.1
kubeconfig:
...
| Expand |
|---|
|
2022-11-10 11:12:43,143 - xtesting.ci.run_tests - INFO - Deployment description:
+-------------------------+----------------------------------------------------------+
| ENV VAR | VALUE |
+-------------------------+----------------------------------------------------------+
| CI_LOOP | daily |
| DEBUG | false |
| DEPLOY_SCENARIO | k8-nosdn-nofeature-noha |
| INSTALLER_TYPE | unknown |
| BUILD_TAG | |
| NODE_NAME | |
| TEST_DB_URL | http://testresults.opnfv.org/test/api/v1/results |
| TEST_DB_EXT_URL | |
| S3_ENDPOINT_URL | |
| S3_DST_URL | |
| HTTP_DST_URL | |
+-------------------------+----------------------------------------------------------+
2022-11-10 11:12:43,242 - xtesting.ci.run_tests - INFO - Loading test case 'xrally_kubernetes'...
2022-11-10 11:12:43,936 - xtesting.ci.run_tests - INFO - Running test case 'xrally_kubernetes'...
2022-11-10 11:24:43,804 - xtesting.ci.run_tests - INFO - Test result:
+---------------------------+------------------+------------------+----------------+
| TEST CASE | PROJECT | DURATION | RESULT |
+---------------------------+------------------+------------------+----------------+
| xrally_kubernetes | functest | 11:59 | PASS |
+---------------------------+------------------+------------------+----------------+
2022-11-10 11:24:43,807 - xtesting.ci.run_tests - INFO - Execution exit value: Result.EX_OK
|
k8s_conformance: FAIL
| Expand |
|---|
|
2022.run_tests - INFO - Deployment description:
+-------------------------+----------------------------------------------------------+
| ENV VAR | VALUE |
+-------------------------+----------------------------------------------------------+
| CI_LOOP | daily |
| DEBUG | false |
| DEPLOY_SCENARIO | k8-nosdn-nofeature-noha |
| INSTALLER_TYPE | unknown |
| BUILD_TAG | |
| NODE_NAME | |
| TEST_DB_URL | http://testresults.opnfv.org/test/api/v1/results |
| TEST_DB_EXT_URL | |
| S3_ENDPOINT_URL | |
| S3_DST_URL | |
| HTTP_DST_URL | |
+-------------------------+----------------------------------------------------------+
2022-11-10 11:32:37,257 - xtesting.ci.run_tests - INFO - Loading test case 'k8s_conformance'...
2022-11-10 11:32:37,367 - xtesting.ci.run_tests - INFO - Running test case 'k8s_conformance'...
2022-11-10 11:46:36,493 - functest_kubernetes.k8stest - ERROR - Summarizing 7 Failures:
[Fail] [sig-network] Services [It] should be able to create a functioning NodePort service [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/network/service.go:1169
[Fail] [sig-node] Probing container [It] should *not* be restarted with a exec "cat /tmp/health" liveness probe [NodeConformance] [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/common/node/container_probe.go:148
[Fail] [sig-network] Services [It] should be able to switch session affinity for NodePort service [LinuxOnly] [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/network/service.go:2576
[Fail] [sig-network] Services [It] should have session affinity work for NodePort service [LinuxOnly] [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/network/service.go:2576
[Fail] [sig-apps] StatefulSet Basic StatefulSet functionality [StatefulSetBasic] [It] Should recreate evicted statefulset [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/github.com/onsi/ginkgo/internal/leafnodes/runner.go:113
[Fail] [sig-network] Services [It] should have session affinity timeout work for NodePort service [LinuxOnly] [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/network/service.go:2497
[Fail] [sig-network] Services [It] should be able to change the type from ExternalName to NodePort [Conformance]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/network/service.go:1351
2022-11-10 11:46:36,495 - xtesting.ci.run_tests - INFO - Test result:
+-------------------------+------------------+------------------+----------------+
| TEST CASE | PROJECT | DURATION | RESULT |
+-------------------------+------------------+------------------+----------------+
| k8s_conformance | functest | 13:59 | FAIL |
+-------------------------+------------------+------------------+----------------+
2022-11-10 11:46:36,497 - xtesting.ci.run_tests - ERROR - The test case 'k8s_conformance' failed.
2022-11-10 11:46:36,497 - xtesting.ci.run_tests - INFO - Execution exit value: Result.EX_ERROR
|
...
| Expand |
|---|
|
2022-11-10 12:34:29,184 - xtesting.ci.run_tests - INFO - Deployment description:
+-------------------------+----------------------------------------------------------+
| ENV VAR | VALUE |
+-------------------------+----------------------------------------------------------+
| CI_LOOP | daily |
| DEBUG | false |
| DEPLOY_SCENARIO | k8-nosdn-nofeature-noha |
| INSTALLER_TYPE | unknown |
| BUILD_TAG | |
| NODE_NAME | |
| TEST_DB_URL | http://testresults.opnfv.org/test/api/v1/results |
| TEST_DB_EXT_URL | |
| S3_ENDPOINT_URL | |
| S3_DST_URL | |
| HTTP_DST_URL | |
+-------------------------+----------------------------------------------------------+
2022-11-10 12:34:29,283 - xtesting.ci.run_tests - INFO - Loading test case 'sig_apps'...
2022-11-10 12:34:29,389 - xtesting.ci.run_tests - INFO - Running test case 'sig_apps'...
2022-11-10 12:36:32,646 - xtesting.ci.run_tests - INFO - Test result:
+-------------------+------------------+------------------+----------------+
| TEST CASE | PROJECT | DURATION | RESULT |
+-------------------+------------------+------------------+----------------+
| sig_apps | functest | 02:03 | PASS |
+-------------------+------------------+------------------+----------------+
2022-11-10 12:36:32,649 - xtesting.ci.run_tests - INFO - Execution exit value: Result.EX_OK
|
sig_apps_serial: FAIL
| Expand |
|---|
|
2022-11-10 12:43:03,217 - xtesting.ci.run_tests - INFO - Deployment description:
+-------------------------+----------------------------------------------------------+
| ENV VAR | VALUE |
+-------------------------+----------------------------------------------------------+
| CI_LOOP | daily |
| DEBUG | false |
| DEPLOY_SCENARIO | k8-nosdn-nofeature-noha |
| INSTALLER_TYPE | unknown |
| BUILD_TAG | |
| NODE_NAME | |
| TEST_DB_URL | http://testresults.opnfv.org/test/api/v1/results |
| TEST_DB_EXT_URL | |
| S3_ENDPOINT_URL | |
| S3_DST_URL | |
| HTTP_DST_URL | |
+-------------------------+----------------------------------------------------------+
2022-11-10 12:43:03,315 - xtesting.ci.run_tests - INFO - Loading test case 'sig_apps_serial'...
2022-11-10 12:43:03,420 - xtesting.ci.run_tests - INFO - Running test case 'sig_apps_serial'...
2022-11-10 13:03:29,449 - functest_kubernetes.k8stest - ERROR - Summarizing 2 Failures:
[Fail] [sig-apps] DisruptionController [It] evictions: maxUnavailable deny evictions, integer => should not allow an eviction [Serial]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/apps/disruption.go:286
[Fail] [sig-apps] DisruptionController [It] evictions: too few pods, replicaSet, percentage => should not allow an eviction [Serial]
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/apps/disruption.go:286
2022-11-10 13:03:29,450 - xtesting.ci.run_tests - INFO - Test result:
+-------------------------+------------------+------------------+----------------+
| TEST CASE | PROJECT | DURATION | RESULT |
+-------------------------+------------------+------------------+----------------+
| sig_apps_serial | functest | 20:26 | FAIL |
+-------------------------+------------------+------------------+----------------+
2022-11-10 13:03:29,451 - xtesting.ci.run_tests - ERROR - The test case 'sig_apps_serial' failed.
2022-11-10 13:03:29,452 - xtesting.ci.run_tests - INFO - Execution exit value: Result.EX_ERROR
|
...
functest-kubernetes-security
kube_hunter: WARN
| Expand |
|---|
|
022-11-10 11:20:38,300 - xtesting.ci.run_tests - INFO - Deployment description:
+-------------------------+----------------------------------------------------------+
| ENV VAR | VALUE |
+-------------------------+----------------------------------------------------------+
| CI_LOOP | daily |
| DEBUG | false |
| DEPLOY_SCENARIO | k8-nosdn-nofeature-noha |
| INSTALLER_TYPE | unknown |
| BUILD_TAG | |
| NODE_NAME | |
| TEST_DB_URL | http://testresults.opnfv.org/test/api/v1/results |
| TEST_DB_EXT_URL | |
| S3_ENDPOINT_URL | |
| S3_DST_URL | |
| HTTP_DST_URL | |
+-------------------------+----------------------------------------------------------+
2022-11-10 11:20:38,316 - xtesting.ci.run_tests - INFO - Loading test case 'kube_hunter'...
2022-11-10 11:20:38,823 - xtesting.ci.run_tests - INFO - Running test case 'kube_hunter'...
2022-11-10 11:21:07,061 - functest_kubernetes.security.security - WARNING - Skipping CAP_NET_RAW Enabled (severity is configured as high)
2022-11-10 11:21:07,061 - functest_kubernetes.security.security - WARNING - Skipping Read access to pod's service account token (severity is configured as high)
2022-11-10 11:21:07,062 - functest_kubernetes.security.security - WARNING - Skipping Access to pod's secrets (severity is configured as high)
2022-11-10 11:21:07,062 - functest_kubernetes.security.security - WARNING - Skipping K8s Version Disclosure (severity is configured as high)
2022-11-10 11:21:07,062 - functest_kubernetes.security.security - WARNING - Skipping Access to API using service account token (severity is configured as high)
2022-11-10 11:21:07,064 - functest_kubernetes.security.security - WARNING -
+--------------------------------+----------------------------------------------------+------------------+
| CATEGORY | VULNERABILITY | SEVERITY |
+--------------------------------+----------------------------------------------------+------------------+
| Access Risk | CAP_NET_RAW Enabled | low |
| Access Risk | Read access to pod's service account token | low |
| Access Risk | Access to pod's secrets | low |
| Information Disclosure | K8s Version Disclosure | medium |
| Information Disclosure | Access to API using service account token | medium |
+--------------------------------+----------------------------------------------------+------------------+
2022-11-10 11:21:07,074 - xtesting.ci.run_tests - INFO - Test result:
+---------------------+------------------+------------------+----------------+
| TEST CASE | PROJECT | DURATION | RESULT |
+---------------------+------------------+------------------+----------------+
| kube_hunter | functest | 00:28 | PASS |
+---------------------+------------------+------------------+----------------+
2022-11-10 11:21:07,126 - xtesting.ci.run_tests - INFO - Execution exit value: Result.EX_OK
|
...
functest-kubernetes-healthcheck
zip_campaign
...
stage
...
job
...
result
detail
...
functest-kubernetes-healthcheck
...
k8s_quick
...
PASS
...
...
PASS
...
functest-kubernetes-benchmarking
...
netperf
...
PASS
...
xrally_kubernetes_full
...
PASS
...
kube_bench_master
...
PASS
...
kube_bench_node
...
PASS
...
kube_hunter
...
PASS
...
2022-11-10 11:20:38,300 - xtesting.ci.run_tests - INFO - Deployment description:
+-------------------------+----------------------------------------------------------+
| ENV VAR | VALUE |
+-------------------------+----------------------------------------------------------+
| CI_LOOP | daily |
| DEBUG | false |
| DEPLOY_SCENARIO | k8-nosdn-nofeature-noha |
| INSTALLER_TYPE | unknown |
| BUILD_TAG | |
| NODE_NAME | |
| TEST_DB_URL | http://testresults.opnfv.org/test/api/v1/results |
| TEST_DB_EXT_URL | |
| S3_ENDPOINT_URL | |
| S3_DST_URL | |
| HTTP_DST_URL | |
+-------------------------+----------------------------------------------------------+
2022-11-10 11:20:38,316 - xtesting.ci.run_tests - INFO - Loading test case 'kube_hunter'...
2022-11-10 11:20:38,823 - xtesting.ci.run_tests - INFO - Running test case 'kube_hunter'...
2022-11-10 11:21:07,061 - functest_kubernetes.security.security - WARNING - Skipping CAP_NET_RAW Enabled (severity is configured as high)
2022-11-10 11:21:07,061 - functest_kubernetes.security.security - WARNING - Skipping Read access to pod's service account token (severity is configured as high)
2022-11-10 11:21:07,062 - functest_kubernetes.security.security - WARNING - Skipping Access to pod's secrets (severity is configured as high)
2022-11-10 11:21:07,062 - functest_kubernetes.security.security - WARNING - Skipping K8s Version Disclosure (severity is configured as high)
2022-11-10 11:21:07,062 - functest_kubernetes.security.security - WARNING - Skipping Access to API using service account token (severity is configured as high)
2022-11-10 11:21:07,064 - functest_kubernetes.security.security - WARNING -
+--------------------------------+----------------------------------------------------+------------------+
| CATEGORY | VULNERABILITY | SEVERITY |
+--------------------------------+----------------------------------------------------+------------------+
| Access Risk | CAP_NET_RAW Enabled | low |
| Access Risk | Read access to pod's service account token | low |
| Access Risk | Access to pod's secrets | low |
| Information Disclosure | K8s Version Disclosure | medium |
| Information Disclosure | Access to API using service account token | medium |
+--------------------------------+----------------------------------------------------+------------------+
2022-11-10 11:21:07,074 - xtesting.ci.run_tests - INFO - Test result:
+---------------------+------------------+------------------+----------------+
| TEST CASE | PROJECT | DURATION | RESULT |
+---------------------+------------------+------------------+----------------+
| kube_hunter | functest | 00:28 | PASS |
+---------------------+------------------+------------------+----------------+
...