STOR-3001: Add TLS scanner job for aws-efs - #82656
Conversation
Adds an optional, manually-triggered TLS scanner presubmit job (tls-scanner-aws-efs) to csi-operator for the AWS EFS CSI driver. Covers main, release-4.23, release-5.0, and release-5.1 branches. The job reuses the existing openshift-e2e-aws-csi-efs workflow with the test phase overridden to run tls-13 and tls-scanner-run against the openshift-cluster-csi-drivers namespace.
openshift-ci-robot
added
the
jira/valid-reference
|
@RomanBednar: This pull request references STOR-3001 which is a valid jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository YAML (base), Central YAML (inherited) Review profile: CHILL Plan: Enterprise Run ID: ⛔ Files ignored due to path filters (4)
📒 Files selected for processing (4)
WalkthroughAdds an optional ChangesAWS EFS TLS scanner
Estimated code review effort: 2 (Simple) | ~10 minutes Possibly related PRs
Suggested reviewers: Sequence Diagram(s)sequenceDiagram
participant CI as CI test job
participant Operator as AWS EFS CSI driver operator
participant Scanner as TLS scanner
CI->>Operator: Install AWS EFS CSI driver operator
CI->>Scanner: Run tls-13 and tls-scanner-run
Scanner->>Operator: Validate strict TLS 1.3 adherence
🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
/assign @dfajmon For review. |
openshift-ci
Bot
added
the
approved
|
[REHEARSALNOTIFIER]
Prior to this PR being merged, you will need to either run and acknowledge or opt to skip these rehearsals. Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
|
@RomanBednar: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dfajmon, RomanBednar The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/pj-rehearse ack |
|
@RomanBednar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
openshift-merge-bot
Bot
added
the
rehearsals-ack
3 participants
Adds an optional, manually-triggered TLS scanner presubmit job (tls-scanner-aws-efs) to csi-operator for the AWS EFS CSI driver. Covers main, release-4.23, release-5.0, and release-5.1 branches.
The job reuses the existing openshift-e2e-aws-csi-efs workflow with the test phase overridden to run tls-13 and tls-scanner-run against the openshift-cluster-csi-drivers namespace.
Summary by CodeRabbit
Adds an optional, manually triggered TLS scanner presubmit job for the AWS EFS CSI driver to
csi-operatorCI on themain,release-4.23,release-5.0, andrelease-5.1branches. The job reuses the existing AWS EFS workflow, installs the EFS CSI driver operator, and runs TLS 1.3 compliance and scanner tests with strict component coverage.