Issues

• privilege_escalation remediation: cover non-root workloads that need file capabilities (real-time SYS_NICE)

  documentationenhancement
  lfn-cnti/testsuite#2923 · Filter by author martin-mat opened on Nov 13, 2026

• service_discovery remediation promises a "documented exception" that does not exist

  bugdocumentation
  lfn-cnti/testsuite#2922 · Filter by author martin-mat opened on Nov 13, 2026

• startup_probe: fail only on a liveness delay that covers a slow start, not any delay above 0

  lfn-cnti/testsuite#2921 · Filter by author martin-mat opened on Nov 13, 2026

• analyze render: show one reading per test when the model repeats a test

  lfn-cnti/testsuite#2920 · Filter by author martin-mat opened on Nov 13, 2026

• application_credentials: check the value of *_PATH/*_FILE/*_DIR settings, and document URLs with a secret in their path

  lfn-cnti/testsuite#2919 · Filter by author martin-mat opened on Nov 13, 2026

• specialized_init_system: accept minimal inits only, not supervisors (s6-overlay, gopherd)

  lfn-cnti/testsuite#2918 · Filter by author martin-mat opened on Nov 13, 2026

• pod_dns_error fails on every CNF with a read-only root file system: Litmus's interceptor can't rewrite /etc/resolv.conf

  lfn-cnti/testsuite#2910 · Filter by author martin-mat opened on Nov 7, 2026
  1

• Four test bugs found while documenting: non_root_containers, specialized_init_system, no_local_volume_configuration, hardcoded IPs

  lfn-cnti/testsuite#2898 · Filter by author martin-mat opened on Nov 4, 2026

• Chaos tests: a pass does not check the CNF, faults repeat per container, disk_fill can fill nothing

  lfn-cnti/testsuite#2897 · Filter by author martin-mat opened on Nov 4, 2026
  1

• TEST_DOCUMENTATION: brief Overviews for people, complete Details for agents

  lfn-cnti/testsuite#2888 · Filter by author martin-mat opened on Nov 3, 2026

• CI: kind clusters fail in bursts because every node pulls its control plane (containerd root in /tmp)

  lfn-cnti/testsuite#2883 · Filter by author martin-mat opened on Nov 2, 2026
  4

• New test metrics_exposed: the chart, on its defaults, declares a metrics endpoint a standard scraper discovers, and the endpoint serves metrics

  lfn-cnti/testsuite#2855 · Filter by author martin-mat opened on Oct 29, 2026
  

• open_metrics: ask for OpenMetrics, and tell a text-format endpoint and an unreachable one from invalid OpenMetrics

  lfn-cnti/testsuite#2854 · Filter by author martin-mat opened on Oct 29, 2026
  

• CI never runs 42 module specs: tags written without a space are not picked up by the spec matrix

  maintenance
  lfn-cnti/testsuite#2848 · Filter by author martin-mat opened on Oct 23, 2026

• Results: record the conditions around a failed test, and report a test that could not judge the CNF as an error

  lfn-cnti/testsuite#2806 · Filter by author martin-mat opened on Oct 15, 2026
  3

  

• Badge and evidence from any CI, including private repositories (tracking)

  lfn-cnti/testsuite#2738 · Filter by author martin-mat opened on Oct 10, 2026

• [Workload] CONFIGURATION test: no exec probes on CPU-pinned containers, and a budget of exec probes

  configuration + lifecyclehardware supportworkload
  lfn-cnti/testsuite#2734 · Filter by author martin-mat opened on Oct 5, 2026

• [Workload] CONFIGURATION test: CRD conformance for operator-managed CNFs (schema, status subresource, versions)

  configuration + lifecycleworkload
  lfn-cnti/testsuite#2733 · Filter by author martin-mat opened on Oct 5, 2026

• Dependency Dashboard

  lfn-cnti/testsuite#2715 · Filter by author renovate opened on Oct 2, 2026

• [Workload] SECURITY test: Pod Security Standards restricted: drop ALL capabilities and allowed volume types

  securityworkload
  lfn-cnti/testsuite#2701 · Filter by author martin-mat opened on Sep 29, 2026

• [Workload] SECURITY test: Pod Security Standards baseline, judged by the API server

  securityworkload
  lfn-cnti/testsuite#2700 · Filter by author martin-mat opened on Sep 29, 2026
  2

• [Workload] SECURITY test: TCP ports that accept plaintext connections (proposal, decisions needed)

  securityworkload
  lfn-cnti/testsuite#2698 · Filter by author martin-mat opened on Sep 29, 2026

• [Workload] SECURITY: insecure_capabilities should also flag DAC_OVERRIDE and DAC_READ_SEARCH

  securityworkload
  lfn-cnti/testsuite#2696 · Filter by author martin-mat opened on Sep 29, 2026
  1

• [Workload] SECURITY test: ports listened on but not declared in containerPort

  securityworkload
  lfn-cnti/testsuite#2693 · Filter by author martin-mat opened on Sep 29, 2026

• [Workload] SECURITY test: known fixable vulnerabilities in the CNF's images (proposal, decisions needed)

  securityworkload
  lfn-cnti/testsuite#2692 · Filter by author martin-mat opened on Sep 29, 2026
  5