Skip to content

Conversation

@anners
Copy link
Collaborator

@anners anners commented Jan 28, 2026

Summary

  • Adds security tests (welcome-to-edera, leaky-vessel, falco)
  • Adds performance benchmarks (iperf, sysbench) with comparison targets
  • Adds operations tests (Grafana/Prometheus, Kyverno auto-assignment)
  • Includes Makefile targets for easy test execution

Test plan

  • Security tests validated on POV cluster
  • Performance benchmarks working with comparison output
  • Falco integration working with zone kernel 6.16 annotation

…ons tests

Structured testing framework for POV evaluations:
- Security: welcome-to-edera, leaky-vessel demo, falco integration
- Performance: iperf network benchmarks, kbench CPU/storage tests
- Operations: Grafana observability, Kyverno automation

Includes Makefile with targets for all tests and cleanup.
- Add falco-edera-values.yaml for Helm-based Falco installation
- Add falco-install and cleanup targets to Makefile
- Update Leaky Vessel demo to use vulnerable-pod + raider pattern
- Add secure-pod.yaml for Edera-protected demonstration
Add sysbench CPU benchmark (iperf already existed) with Edera and
baseline variants. Update Makefile with comparison targets that
output formatted tables showing throughput/events and percentage
of baseline. Replace separate iperf client/server with combined
pod manifests for simpler testing.
- Fix ServiceMonitor to scrape Edera metrics at port 3035
- Add Service and Endpoints for node-level metrics endpoint
- Use helm upgrade --install for idempotent installs
- Fix Grafana password retrieval command in output
@anners anners requested review from found-it and jedsalazar January 28, 2026 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants