Taylor Carpenter

@HashNuke @martin-mat @wavell ~~this test was removed upstream in this PR https://github.com/kubescape/regolibrary/pull/586~~ PR to remove was closed without merging. Test renamed. See @HashNuke comments below regarding - https://github.com/cnti-testcatalog/testsuite/blob/main/docs/LIST_OF_TESTS.md#resource-policies - https://hub.armosec.io/docs/c-0009

See https://hub.armosec.io/docs/c-0009 which is linked from https://github.com/cnti-testcatalog/testsuite/blob/main/docs/LIST_OF_TESTS.md#resource-policies

_(copying from https://github.com/cnti-testcatalog/testsuite/pull/2004)_ resource_policies test is split into: cpu_limits and memory_limits tests - The Resource Policies control has been split in the Kubescape NSA framework. - The test has been...

https://github.com/lfn-cnti/bestpractices/blob/main/doc/cbpps/0004-do-not-run-containers-with-privilege-flag.md#notesconstraintscaveats https://github.com/lfn-cnti/bestpractices/blob/main/doc/cbpps/0003-exceptions.md#summary

Needs further discussion and updates

@horecoli rebase and this should be good to merge. cc: @agentpoyo @HashNuke

@rannyh LFN and/or community donated resources will need to be allocated for the CNTi project needs. This includes the CI pipeline for GitHub actions. There were some ideas put forward...

Suggested resource requirements for the CNTi project CI runners, based on Equinix machine types: - Ideal: 7x c3.small.x86 - increases the speed of testing and allows some concurrent testing -...

Circle CI will probably be the most cost effective for a hosted solution.

1. Free GitHub runners They can only be used if test coverage is disabled/removed, including some telecom + networking-focused tests. This will lead to reduced velocity as a result of...