diff --git a/.vib/mlflow/goss/goss.yaml b/.vib/mlflow/goss/goss.yaml new file mode 100644 index 000000000000..f838ffa6e599 --- /dev/null +++ b/.vib/mlflow/goss/goss.yaml @@ -0,0 +1,14 @@ +# Copyright VMware, Inc. +# SPDX-License-Identifier: APACHE-2.0 + +gossfile: + # Goss tests exclusive to the current container + ../../mlflow/goss/mlflow.yaml: {} + # Load scripts from .vib/common/goss/templates + ../../common/goss/templates/check-app-version.yaml: {} + ../../common/goss/templates/check-binaries.yaml: {} + ../../common/goss/templates/check-broken-symlinks.yaml: {} + ../../common/goss/templates/check-ca-certs.yaml: {} + ../../common/goss/templates/check-directories.yaml: {} + ../../common/goss/templates/check-linked-libraries.yaml: {} + ../../common/goss/templates/check-spdx.yaml: {} diff --git a/.vib/mlflow/goss/mlflow.yaml b/.vib/mlflow/goss/mlflow.yaml new file mode 100644 index 000000000000..b73b2635ea50 --- /dev/null +++ b/.vib/mlflow/goss/mlflow.yaml @@ -0,0 +1,15 @@ +# Copyright VMware, Inc. +# SPDX-License-Identifier: APACHE-2.0 + +user: + mlflow: + exists: true + uid: 1001 + gid: 0 +command: + mlflow-serve: + exec: cd /app && timeout --signal 2 --preserve-status 5 mlflow server + timeout: 10000 + exit-status: 1 + stderr: + - "Listening at" diff --git a/.vib/mlflow/goss/vars.yaml b/.vib/mlflow/goss/vars.yaml new file mode 100644 index 000000000000..193f0c3d0b9a --- /dev/null +++ b/.vib/mlflow/goss/vars.yaml @@ -0,0 +1,14 @@ +binaries: + - python + - mlflow +root_dir: /opt/bitnami +directories: + - mode: "0755" + paths: + - /opt/bitnami/python + - mode: "0775" + paths: + - /app +version: + bin_name: python + flag: "-c 'import mlflow; print(mlflow.__version__)'" diff --git a/.vib/mlflow/vib-verify.json b/.vib/mlflow/vib-verify.json new file mode 100644 index 000000000000..4be0b79bfb41 --- /dev/null +++ b/.vib/mlflow/vib-verify.json @@ -0,0 +1,66 @@ +{ + "context": { + "resources": { + "url": "{SHA_ARCHIVE}", + "path": "{VIB_ENV_PATH}" + }, + "runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd" + }, + "phases": { + "package": { + "actions": [ + { + "action_id": "container-image-package", + "params": { + "application": { + "details": { + "name": "{VIB_ENV_CONTAINER}", + "tag": "{VIB_ENV_TAG}" + } + }, + "architectures": ["linux/amd64", "linux/arm64"] + } + }, + { + "action_id": "container-image-lint", + "params": { + "threshold": "error" + } + } + ] + }, + "verify": { + "actions": [ + { + "action_id": "goss", + "params": { + "resources": { + "path": "/.vib" + }, + "tests_file": "mlflow/goss/goss.yaml", + "vars_file": "mlflow/goss/vars.yaml", + "remote": { + "pod": { + "workload": "deploy-mlflow" + } + } + } + }, + { + "action_id": "trivy", + "params": { + "threshold": "CRITICAL", + "vuln_type": ["OS"] + } + }, + { + "action_id": "grype", + "params": { + "threshold": "CRITICAL", + "package_type": ["OS"] + } + } + ] + } + } +}