Remove unused docker tests

Signed-off-by: Derek Nola <derek.nola@suse.com>

scripts/hardened/cluster-level-pss.yaml

@@ -1,18 +0,0 @@
-apiVersion: apiserver.config.k8s.io/v1
-kind: AdmissionConfiguration
-plugins:
-- name: PodSecurity
-  configuration:
-    apiVersion: pod-security.admission.config.k8s.io/v1beta1
-    kind: PodSecurityConfiguration
-    defaults:
-      enforce: "privileged"
-      enforce-version: "latest"
-      audit: "baseline"
-      audit-version: "latest"
-      warn: "baseline"
-      warn-version: "latest"
-    exemptions:
-      usernames: []
-      runtimeClasses: []
-      namespaces: [kube-system]

scripts/hardened/hardened-k3s-ingress.yaml

@@ -1,128 +0,0 @@
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  name: example
-  namespace: default
-  labels:
-    app.kubernetes.io: example
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: example
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: example
-    spec:
-      automountServiceAccountToken: false
-      securityContext:
-        runAsUser: 405
-        runAsGroup: 100
-      containers:
-      - name: socat
-        image: docker.io/alpine/socat:1.7.4.3-r1
-        args:
-        - "TCP-LISTEN:8080,reuseaddr,fork"
-        - "EXEC:echo -e 'HTTP/1.1 200 OK\r\nConnection: close\r\n\r\n$(NODE_IP) $(POD_NAMESPACE)/$(POD_NAME)\r\n'"
-        ports:
-        - containerPort: 8080
-          name: http
-        env:
-        - name: NODE_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.hostIP
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: POD_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        readinessProbe:
-          initialDelaySeconds: 2
-          periodSeconds: 10
-          httpGet:
-            path: /
-            port: 8080
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: example
-  namespace: default
-spec:
-  type: NodePort
-  selector:
-    app.kubernetes.io/name: example
-  ports:
-  - name: http
-    protocol: TCP
-    port: 80
-    nodePort: 30096
-    targetPort: http
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: example
-spec:
-  rules:
-  - host: "example.com"
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: example
-            port:
-              name: http
----
-# Allow access to example backend from traefik ingress
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: ingress-to-backend-example
-  namespace: default
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: example
-  ingress:
-  - ports:
-    - port: 8080
-      protocol: TCP
-  - from:
-    - namespaceSelector:
-        matchLabels:
-          kubernetes.io/metadata.name: kube-system
-      podSelector:
-        matchLabels:
-          app.kubernetes.io/name: traefik
-  policyTypes:
-  - Ingress
----
-# Allow access to example backend from outside the cluster via nodeport service
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: nodeport-to-backend-example
-  namespace: default
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: example
-  ingress:
-  - ports:
-    - port: 8080
-      protocol: TCP
-  - from:
-    - ipBlock:
-        cidr: 0.0.0.0/0
-        except:
-          - 10.42.0.0/16
-          - 10.43.0.0/16
-  policyTypes:
-  - Ingress

scripts/hardened/hardened-k3s-netpol.yaml

@@ -1,120 +0,0 @@
----
-# Allow all traffic within the kube-system namespace; block all other access
-kind: NetworkPolicy
-apiVersion: networking.k8s.io/v1
-metadata:
-  name: intra-namespace
-  namespace: kube-system
-spec:
-  podSelector: {}
-  ingress:
-    - from:
-      - namespaceSelector:
-          matchLabels:
-            name: kube-system
-  policyTypes:
-  - Ingress
----
-# Allow all traffic within the default namespace; block all other access
-kind: NetworkPolicy
-apiVersion: networking.k8s.io/v1
-metadata:
-  name: intra-namespace
-  namespace: default
-spec:
-  podSelector: {}
-  ingress:
-    - from:
-      - namespaceSelector:
-          matchLabels:
-            name: default
-  policyTypes:
-  - Ingress
----
-# Allow traffic within the kube-public namespace; block all other access
-kind: NetworkPolicy
-apiVersion: networking.k8s.io/v1
-metadata:
-  name: intra-namespace
-  namespace: kube-public
-spec:
-  podSelector: {}
-  ingress:
-    - from:
-      - namespaceSelector:
-          matchLabels:
-            name: kube-public
-  policyTypes:
-  - Ingress
----
-# Allow all access to metrics-server
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-metrics-server
-  namespace: kube-system
-spec:
-  podSelector:
-    matchLabels:
-      k8s-app: metrics-server
-  ingress:
-  - {}
-  policyTypes:
-  - Ingress
----
-# Allow all access to coredns DNS ports
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: default-network-dns-policy
-  namespace: kube-system
-spec:
-  ingress:
-  - ports:
-    - port: 53
-      protocol: TCP
-    - port: 53
-      protocol: UDP
-  podSelector:
-    matchLabels:
-      k8s-app: kube-dns
-  policyTypes:
-  - Ingress
----
-# Allow all access to the servicelb traefik HTTP/HTTPS ports
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-svclb-traefik
-  namespace: kube-system
-spec:
-  podSelector:
-    matchLabels:
-      svccontroller.k3s.cattle.io/svcname: traefik
-  ingress:
-  - ports:
-    - port: 80
-      protocol: TCP
-    - port: 443
-      protocol: TCP
-  policyTypes:
-  - Ingress
----
-# Allow all access to traefik HTTP/HTTPS ports
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-traefik
-  namespace: kube-system
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: traefik
-  ingress:
-  - ports:
-    - port: 8000
-      protocol: TCP
-    - port: 8443
-      protocol: TCP
-  policyTypes:
-  - Ingress

scripts/test

@@ -50,10 +50,6 @@ if [ "$ARCH" == 'arm' ] ||  [ "$DRONE_BUILD_EVENT" = 'tag' ]; then
 fi
 
 
-#TODO convert this to new go test framework
-. ./tests/docker/test-run-hardened
-echo "Did test-run-hardened $?"
-
 # ---
 
 [ "$ARCH" != 'amd64' ] && \