Introduction

This document covers  Test Deployment Environment and Test Case Result for  Enterprise Applications on CVB Blueprint. 

The topology  in this release for this version includes 3 CentOs 7.8 Physical Machine node .

Akarino Test Group Information

N/A

Overall Test Architecture

Test architecture/topology

The test environment consists of three virtual machines in total.

• one physical server for Jenkins CI.
• one physical server for TarsFramework and Jenkins slave
• one physical server for TarsNode and Jenkins slave.

Software Version

OpenStack: Rocky

k8s:1.15.0

Java:

openjdk version "1.8.0_232"
OpenJDK Runtime Environment (build 1.8.0_232-b09)
OpenJDK 64-Bit Server VM (build 25.232-b09, mixed mode)

Jenkins:  Ver 2.190.2

CentOS 7.8

Mysql  Ver 14.14 Distrib 5.6.26, for Linux

Devices Under Test

Test Script

The test is to fulfill by Jenkins Job.  The test script includes:

• Compile the Tars Framework

cd /usr/local/robert/testCompileCode

git clone -b arm https://github.com/qiuxin/Tars.git

cd /usr/local/robert/testCompileCode/Tars

git submodule update --init --recursive

cd /usr/local/robert/testCompileCode/Tars/framework/build

chmod u+x build.sh./build.sh all

rm -rf /usr/local/robert/testCompileCode/Tars

• Call the service deployed by Tars Framework

/usr/local/testClient/CVAppClient

The log is triggered periodically.

The log is updated to

https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/

BluVal Testing

1.Bluval installation

mkdir /home/demo
cd /home/demo
mkdir results
git clone https://gerrit.akraino.org/r/validation.git
cd validation
vi tests/variables.yaml  ## update k8s related ip. due to this bp do not use k8s , we don't need to change.

vi bluval/volumes.yaml

volumes:
# location of the ssh key to access the cluster
ssh_key_dir:
local: '/root/.ssh/'
target: '/root/.ssh/'
# location of the k8s access files (config file, certificates, keys)
kube_config_dir:
local: '/home/demo/.kube/'
target: '/root/demo/.kube/'
# location of the customized variables.yaml
custom_variables_file:
local: '/home/demo/validation/tests/variables.yaml'
target: '/opt/akraino/validation/tests/variables.yaml'
# location of the bluval-<blueprint>.yaml file
blueprint_dir:
local: '/home/demo/validation/bluval'
target: '/opt/akraino/validation/bluval'
# location on where to store the results on the local jumpserver
results_dir:
local: '/home/demo/results'
target: '/opt/akraino/results'
# location on where to store openrc file
openrc:
local: '/home/openrc'
target: '/root/openrc'

vi bluval/bluval-iec-type4.yaml

blueprint:
name: iec-type4
layers:
- os
- docker

os: &os
-
name: lynis
what: lynis
optional: "False"
-
name: vuls
what: vuls
optional: "False"

k8s: &k8s
-
name: conformance
what: conformance
optional: "False"
-
name: kube-hunter
what: kube-hunter
optional: "False"

./bluval/blucon.sh -l os iec-type4

==============================================================================
Debug: /opt/akraino/results/os/vuls/debug.log
Output: /opt/akraino/results/os/vuls/output.xml
Log: /opt/akraino/results/os/vuls/log.html
Report: /opt/akraino/results/os/vuls/report.html

2. Troubleshooting
##Iptable issues for centOS8
vi /etc/firewalld/firewalld.conf
in config file change
FirewallBackend=nftables
on
FirewallBackend=iptables
save change and reload firewalld
systemctl restart firewalld.service

Test API description

N/A

Test Dashboards

Single pane view of how the test score looks like for the Blue print.

Additional Testing

Lynis Report

Lynis log : https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/lynis.log

Vuls Report

vuls log : https://nexus.akraino.org/content/sites/logs/parserlabs/r4/jobs/cvb/vuls.log

Bottlenecks/Errata

N/A