From fe5ee7f67c09ec63b51e382b89ec25fd2c9e0ffe Mon Sep 17 00:00:00 2001 From: "michal.gubricky" Date: Tue, 19 Nov 2024 10:59:17 +0100 Subject: [PATCH] Update kind config Signed-off-by: michal.gubricky --- Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml | 3 +++ .../scs_0217_cluster_hardening_test.go | 1 - 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml b/Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml index 9cb7327d6..04f448fd6 100644 --- a/Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml +++ b/Tests/kaas/kaas-sonobuoy-tests/kind_config.yaml @@ -12,6 +12,9 @@ kubeadmConfigPatches: apiServer: extraArgs: enable-admission-plugins: "NodeRestriction,PodSecurity" + oidc-issuer-url: https://localhost:8443 + oidc-client-id: kubernetes + oidc-username-claim: sub nodes: - role: control-plane - role: worker diff --git a/Tests/kaas/kaas-sonobuoy-tests/scs_k8s_conformance_tests/scs_0217_cluster_hardening_test.go b/Tests/kaas/kaas-sonobuoy-tests/scs_k8s_conformance_tests/scs_0217_cluster_hardening_test.go index a7b83ccbc..3cca9b095 100644 --- a/Tests/kaas/kaas-sonobuoy-tests/scs_k8s_conformance_tests/scs_0217_cluster_hardening_test.go +++ b/Tests/kaas/kaas-sonobuoy-tests/scs_k8s_conformance_tests/scs_0217_cluster_hardening_test.go @@ -467,7 +467,6 @@ func Test_scs_0217_sonobuoy_Control_Plane_Ports_Security(t *testing.T) { testenv.Test(t, f.Feature()) } -// Test_K8s_Endpoints_HTTPS checks if all Kubernetes endpoints are secured via HTTPS. // Test_K8s_Endpoints_HTTPS checks if all Kubernetes endpoints are secured via HTTPS. func Test_scs_0217_sonobuoy_K8s_Endpoints_HTTPS(t *testing.T) { f := features.New("Kubernetes endpoint security").Assess(