From ef1336e3b1c8fc19410365b0a19e3722e64557b1 Mon Sep 17 00:00:00 2001 From: Simon Pasquier Date: Thu, 13 Aug 2026 17:23:42 +0200 Subject: [PATCH] Enable TLS scanner for COO This commit adds another step after running the COO e2e tests to run the TLS scanner to ensure that it meets the TLS security requirements. Signed-off-by: Simon Pasquier --- .../rhobs-observability-operator-main.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/ci-operator/config/rhobs/observability-operator/rhobs-observability-operator-main.yaml b/ci-operator/config/rhobs/observability-operator/rhobs-observability-operator-main.yaml index dfd0b5c629df5..e4c948ef3e898 100644 --- a/ci-operator/config/rhobs/observability-operator/rhobs-observability-operator-main.yaml +++ b/ci-operator/config/rhobs/observability-operator/rhobs-observability-operator-main.yaml @@ -7,6 +7,10 @@ base_images: name: "4.18" namespace: origin tag: operator-sdk + tls-scanner-tool: + name: tls-scanner + namespace: tls-scanner + tag: tls-scanner-tool build_root: from_repository: true images: @@ -56,6 +60,13 @@ tests: timeout: 3h0m0s version: "4.21" steps: + env: + PQC_CHECK: "true" + SCAN_NAMESPACE: coo + SCANNER_CPU_LIMIT: "4" + SCANNER_CPU_REQUEST: 500m + SCANNER_MEM_LIMIT: 4Gi + SCANNER_MEM_REQUEST: 1Gi test: - as: install cli: latest @@ -86,6 +97,7 @@ tests: memory: 400Mi - ref: rhobs-enable-ocp - ref: rhobs-obo-test-harness + - ref: tls-scanner-run workflow: generic-claim zz_generated_metadata: branch: main