update test versions and durations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Author: JimBugwadia

.github/workflows/cel-test.yml

@@ -18,16 +18,14 @@ jobs:
       fail-fast: false
       matrix:
         k8s-version:
-          - name: v1.25
-            version: v1.25.16
-          - name: v1.26
-            version: v1.26.14
-          - name: v1.27
-            version: v1.27.11
           - name: v1.28
-            version: v1.28.7
+            version: v1.28.13
           - name: v1.29
-            version: v1.29.2
+            version: v1.29.8
+          - name: v1.30
+            version: v1.30.4
+          - name: v1.31
+            version: v1.31.0
         tests:
           - ^argo-cel$
           - ^aws-cel$

other-cel/prevent-bare-pods/.chainsaw-test/chainsaw-test.yaml

@@ -38,7 +38,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           if [ $(kubectl get pods -n prevent-naked-pods-ns | grep gooddeployment01 | wc -l) -gt 0 ]; then exit 0; else exit 1; fi

other-cel/restrict-node-label-creation/.chainsaw-test/chainsaw-test.yaml

@@ -12,7 +12,7 @@ spec:
         content: |
           kubectl get configmap kyverno -n kyverno -o yaml | sed 's/\[Node\/\*,\*,\*\]//g' - | sed 's/\[Node,\*,\*\]//g' - | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/add-node-labels-pod/.chainsaw-test/chainsaw-test.yaml

@@ -16,7 +16,7 @@ spec:
         content: |
           kubectl get configmap -n kyverno kyverno -o yaml | sed 's/\[Binding,\*,\*\]//g' | sed 's/\[Pod\/binding,\*,\*\]//g' | sed 's/\[Node\/\*,\*,\*\]//g' | sed 's/\[Node,\*,\*\]//g' | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/audit-event-on-exec/.chainsaw-test/chainsaw-test.yaml

@@ -25,7 +25,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: kubectl exec -n exec-event-ns execevent-pod -- ls /
   - name: step-04

other/block-pod-exec-by-namespace-label/.chainsaw-test/chainsaw-test.yaml

@@ -23,7 +23,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-04
     try:
     - script:

other/block-pod-exec-by-namespace/.chainsaw-test/chainsaw-test.yaml

@@ -23,7 +23,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-04
     try:
     - script:

other/block-pod-exec-by-pod-and-container/.chainsaw-test/chainsaw-test.yaml

@@ -25,7 +25,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-04
     try:
     - script:

other/block-pod-exec-by-pod-label/.chainsaw-test/chainsaw-test.yaml

@@ -21,7 +21,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-04
     try:
     - script:

other/block-pod-exec-by-pod-name/.chainsaw-test/chainsaw-test.yaml

@@ -25,7 +25,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-04
     try:
     - script:

other/label-nodes-cri/.chainsaw-test/chainsaw-test.yaml

@@ -16,7 +16,7 @@ spec:
         content: |
           kubectl get configmap kyverno -n kyverno -o yaml | sed 's/\[Node\/\*,\*,\*\]//g' - | sed 's/\[Node,\*,\*\]//g' - | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/mutate-pod-binding/.chainsaw-test/chainsaw-test.yaml

@@ -14,7 +14,7 @@ spec:
         content: |
           kubectl get configmap -n kyverno kyverno -o yaml | sed 's/\[Binding,\*,\*\]//g' | sed 's/\[Pod\/binding,\*,\*\]//g' | sed 's/\[Node\/\*,\*,\*\]//g' | sed 's/\[Node,\*,\*\]//g' | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/prevent-bare-pods/.chainsaw-test/chainsaw-test.yaml

@@ -36,7 +36,7 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           if [ $(kubectl get pods -n prevent-naked-pods-ns | grep gooddeployment01 | wc -l) -gt 0 ]; then exit 0; else exit 1; fi

other/protect-node-taints/.chainsaw-test/chainsaw-test.yaml

@@ -14,7 +14,7 @@ spec:
           node=$(kubectl get nodes --no-headers | awk '{print $1}' | head -n 1)
           kubectl taint nodes "$node" foo=bar:NoSchedule
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/refresh-env-var-in-pod/.chainsaw-test/chainsaw-test.yaml

@@ -27,22 +27,22 @@ spec:
   - name: step-03
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           kubectl get pod -n refresh-env-var-ns --no-headers | awk '{print $1}' > deploy-names.txt
   - name: step-04
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - apply:
         file: chainsaw-step-04-apply-1.yaml
     - apply:
         file: chainsaw-step-04-apply-2.yaml
   - name: step-05
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           annotation=$(kubectl get deploy deployment01 -n refresh-env-var-ns -o json | kyverno jp query "spec.template.metadata.annotations.\"corp.org/random\" || '' " | tail -n 1 | cut -d '"' -f 2)
@@ -56,7 +56,7 @@ spec:
           annotation=$(kubectl get deploy deployment03 -n refresh-env-var-ns -o json | kyverno jp query "spec.template.metadata.annotations.\"corp.org/random\" || '' " | tail -n 1 | cut -d '"' -f 2)
           if [ "$annotation" = "1234abcd" ]; then exit 0; exit 1; fi
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           pod_one=$(kubectl get pod --no-headers -n refresh-env-var-ns | awk '{print $1}' | grep deployment01 | awk 'NR==1{print $1}')
@@ -73,7 +73,7 @@ spec:
               exit 0;
           fi
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           pod_one=$(kubectl get pod --no-headers -n refresh-env-var-ns | awk '{print $1}' | grep deployment02 | awk 'NR==1{print $1}')
@@ -90,7 +90,7 @@ spec:
               exit 0;
           fi
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           pod_one=$(kubectl get pod --no-headers -n refresh-env-var-ns | awk '{print $1}' | grep deployment03 | awk 'NR==1{print $1}')

other/refresh-volumes-in-pods/.chainsaw-test/chainsaw-test.yaml

@@ -39,7 +39,7 @@ spec:
   - name: step-04
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           annotation=$(kubectl get pod pod01 -n refresh-vols-ns -o json | kyverno jp query "metadata.annotations.\"corp.org/random\" || '' " | tail -n 1 | cut -d '"' -f 2)

other/restart-deployment-on-secret-change/.chainsaw-test/chainsaw-test.yaml

@@ -30,7 +30,7 @@ spec:
   - name: step-04
     try:
     - sleep:
-        duration: 5s
+        duration: 10s
     - script:
         content: |
           annotation=$(kubectl get deployment -n default busybox -o json | kyverno jp query "spec.template.metadata.annotations.\"ops.corp.com\/triggerrestart\" || 'annotation-404' " | tail -n 1 | cut -d '"' -f 2)

other/restrict-node-label-changes/.chainsaw-test/chainsaw-test.yaml

@@ -18,7 +18,7 @@ spec:
         content: |
           kubectl get configmap kyverno -n kyverno -o yaml | sed 's/\[Node\/\*,\*,\*\]//g' - | sed 's/\[Node,\*,\*\]//g' - | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/restrict-node-label-creation/.chainsaw-test/chainsaw-test.yaml

@@ -12,7 +12,7 @@ spec:
         content: |
           kubectl get configmap kyverno -n kyverno -o yaml | sed 's/\[Node\/\*,\*,\*\]//g' - | sed 's/\[Node,\*,\*\]//g' - | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:

other/scale-deployment-zero/.chainsaw-test/chainsaw-test.yaml

@@ -16,7 +16,7 @@ spec:
         content: |
           kubectl get configmap -n kyverno kyverno -o yaml | sed 's/system\:nodes/system\:thisisjunk/g' | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s
   - name: step-02
     try:
     - apply:
@@ -41,4 +41,4 @@ spec:
         content: |
           kubectl get configmap -n kyverno kyverno -o yaml | sed 's/system\:thisisjunk/system\:nodes/g' | kubectl apply -f -
     - sleep:
-        duration: 5s
+        duration: 10s

psa-cel/deny-privileged-profile/.chainsaw-test/chainsaw-test.yaml

@@ -80,7 +80,7 @@ spec:
           export KUBECONFIG=./temp
           if kubectl --context=denyprivilegeduser-context create -f ns-bad.yaml; then exit 1; else exit 0; fi
     - sleep:
-        duration: 5s
+        duration: 10s
     finally:
     - script:
         content: kubectl delete -f ns-good.yaml --ignore-not-found

psa/deny-privileged-profile/.chainsaw-test/chainsaw-test.yaml

@@ -80,7 +80,7 @@ spec:
           export KUBECONFIG=./temp
           if kubectl --context=denyprivilegeduser-context create -f ns-bad.yaml; then exit 1; else exit 0; fi
     - sleep:
-        duration: 5s
+        duration: 10s
     finally:
     - script:
         content: kubectl delete -f ns-good.yaml --ignore-not-found