[Workload] Security test: Check if the operator is installed with privileged rights.

[wvwatson]

Title: [Workload] Check if the operator is installed with privileged rights.

Is your workload test idea related to a problem? Please describe.

• security

Describe the solution you'd like

• Check if the operator is installed with privileged rights.

Test Category Name

• Use existing Security category

Type of test

• runtime

---

Documentation tasks:

• [ ] Update installation instructions if needed
• [ ] Update Test Categories md if needed
• [ ] Update USAGE md if needed
  • [ ] How to run
  • [ ] Description and details
  • [ ] What the best practice is
  • [ ] Why are we testing this
  • [ ] Remediation steps if test does not pass

QA tasks

Dev Review:

• [ ] walk through A/C
• [ ] do you get the expected result?
• [ ] if yes,
  • [ ] move to Needs Peer Review column
  • [ ] create Pull Request and follow check list
  • [ ] Assign 1 or more people for peer review
• [ ] if no, document what additional tasks will be needed

Peer review:

• [ ] walk through A/C
• [ ] do you get the expected result?
• [ ] if yes,
  • [ ] move to Reviewer Approved column
  • [ ] Approve pull request
• [ ] if no,
  • [ ] document what did not go as expected, including error messages and screenshots (if possible)
  • [ ] Add comment to pull request
  • [ ] request changes to pull request

testname: operator_privileged

prerequisites

• [ ] create sample operator with privileged permissions (sample_operator_w_priv) -- should be in a helm chart

• [ ] create sample operator with no privileged permissions (sample_operator_no_priv) -- should be in a helm chart

  development criteria

• [ ] Create spec for operator_privileged test -- should use sample_operator_w_priv and expect failure

• [ ] Create spec for operator_privileged test -- should use sample_operator_no_priv and expect success

• [ ] Create test named operator_privileged

acceptance criteria

• [ ] Install cnf sample_operator_w_priv
• [ ] run ./cnf-testsuite operator_privileged
• [ ] test should fail
• [ ] Unintall cnf sample_operator_w_priv
• [ ] Install cnf sample_operator_no_priv
• [ ] run ./cnf-testsuite operator_privileged
• [ ] test should pass

what is an operator https://kubernetes.io/docs/concepts/extend-kubernetes/operator/ making an operator with a custom language https://www.weave.works/blog/creating-custom-kubernetes-operators

making an operator https://nubenetes.com/kubernetes-operators-controllers/#writing-kubernetes-operators-and-controllers https://stackoverflow.com/questions/69032478/how-to-list-installed-kubernetes-operators-and-delete-them-via-kubectl https://betterprogramming.pub/build-a-kubernetes-operator-in-10-minutes-11eec1492d30 https://developers.redhat.com/articles/2021/09/07/build-kubernetes-operator-six-steps https://www.techtarget.com/searchitoperations/tutorial/How-to-build-a-Kubernetes-operator https://developer.ibm.com/learningpaths/kubernetes-operators/develop-deploy-advanced-operator-janusgraph/how-to-make-an-operator/

[wvwatson]

points: watson: 8 Denver: 8

[lixuna]

@wavell @denverwilliams @taylor @HashNuke @agentpoyo can we close this issue and the related WIP PR? If not, what do you suggest as the next steps?

[wvwatson]

It's a valid test. Maybe someone else wants to take it over.