Update assertions for kubelet-client-cert|key rules

We recently enabled these rules for 4.17, but didn't update the 4.17 assertion files for FedRAMP High, FedRAMP Moderate, PCI-DSS, or CIS. This commit does that so that so the tests assert the correct behavior on 4.17. ComplianceAsCode#12311
rhmdnd · Sep 12, 2024 · 24fef5b · 24fef5b
1 parent f2cf061
commit 24fef5b
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 16 deletions.
diff --git a/tests/assertions/ocp4/ocp4-cis-4.17.yml b/tests/assertions/ocp4/ocp4-cis-4.17.yml
@@ -78,14 +78,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-cis-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-cis-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-cis-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-cis-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-high-4.17.yml b/tests/assertions/ocp4/ocp4-high-4.17.yml
@@ -90,14 +90,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-high-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-high-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-high-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-high-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-moderate-4.17.yml b/tests/assertions/ocp4/ocp4-moderate-4.17.yml
@@ -87,14 +87,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-moderate-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-moderate-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-moderate-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-moderate-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.17.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.17.yml
@@ -78,14 +78,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-pci-dss-4-0-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE