Update assertions for kubelet-client-cert|key rules

We recently enabled these rules for 4.17, but didn't update the 4.17 assertion files for STIG, FedRAMP High, FedRAMP Moderate, or CIS. This commit does that so that so the tests assert the correct behavior on 4.17. ComplianceAsCode#12311
rhmdnd · Sep 5, 2024 · cd32877 · cd32877
1 parent bd48adc
commit cd32877
Show file tree

Hide file tree

Showing 5 changed files with 20 additions and 20 deletions.
diff --git a/tests/assertions/ocp4/ocp4-cis-4.17.yml b/tests/assertions/ocp4/ocp4-cis-4.17.yml
@@ -78,14 +78,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-cis-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-cis-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-cis-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-cis-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-high-4.17.yml b/tests/assertions/ocp4/ocp4-high-4.17.yml
@@ -90,14 +90,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-high-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-high-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-high-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-high-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-moderate-4.17.yml b/tests/assertions/ocp4/ocp4-moderate-4.17.yml
@@ -87,14 +87,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-moderate-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-moderate-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-moderate-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-moderate-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.17.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.17.yml
@@ -78,14 +78,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-pci-dss-4-0-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE

diff --git a/tests/assertions/ocp4/ocp4-stig-4.17.yml b/tests/assertions/ocp4/ocp4-stig-4.17.yml
@@ -81,14 +81,14 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-stig-api-server-kubelet-client-cert:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-stig-api-server-kubelet-client-cert-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
  e2e-stig-api-server-kubelet-client-key:
-   default_result: NOT-APPLICABLE
-   result_after_remediation: NOT-APPLICABLE
+   default_result: PASS
+   result_after_remediation: PASS
  e2e-stig-api-server-kubelet-client-key-pre-4-9:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE