SS8 MDF3 CNF Certification Notes
Updated -
SS8 MDF3 CNF has been validated and Certified on OCP 4.12.16 against the test suite version CNF certification test suite v4.3.5.
The different containers that are part of MDF3 CNF are:
| Container name | Container image | Version |
|---|---|---|
| x3im | mdf3 | 9.13.1.0B065 |
| log-daemon | mdf3 | 9.13.1.0B065 |
| stunnel-client | mdf3 | 9.13.1.0B065 |
| fluent-bit | fluent-bit | 2.0.5 |
Below are the tests failed which are optional for certification.
| Test Failure | Reason for failure | Reason for exception |
|---|---|---|
| Namespace resource quota | CNF is running in a namespace that does not have a Resource Quota applied | Optional |
| One process per container | All containers are running more than one process | Optional |
| Security context | container category is NOT category 1 or category NoUID0 | Optional |
| Container port name format | ContainerPort does not follow the partner naming conventions | Optional |
| Containers image tag | Container is missing image tag, | Optional |
| Dual stack service | Service supports only IPv4, Could not get IP Version from service | Optional |
| Network policy deny all | No network policy that denies all traffic (Ingress and Egress) by default | Optional |
| Undeclared container ports usage | Pods with undeclared port usage | Optional |
| Max resources exec probes | CNF has 10 or more exec probes (24 exec probes) | Optional |
Comments