Skip to content

ROX-37162: add Groovy e2e for Job workload type exclusion - #22965

Open
clickboo wants to merge 1 commit into
boo-policy-excl-type-uifrom
boo-policy-excl-type-e2e
Open

ROX-37162: add Groovy e2e for Job workload type exclusion#22965
clickboo wants to merge 1 commit into
boo-policy-excl-type-uifrom
boo-policy-excl-type-e2e

Conversation

@clickboo

@clickboo clickboo commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Description

Adds a Groovy BAT that creates a Deployment and a Job (createJob), waits for StackRox to index the Job by UID, then checks violations. A baseline Image Tag policy fires on both; a matching policy with exclude_by_type: JOB still fires on the Deployment and not on the Job. The Job sleeps so it is not dropped after completion. CronJob is not covered: the framework has no createCronJob helper.

This is PR 6 of 6 (flag → proto → validate → sync → UI → e2e). Stacked on #22964.

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

  • added unit tests
  • added e2e tests
  • added regression tests
  • added compatibility tests
  • modified existing tests

How I validated my change

make -C qa-tests-backend style (Codenarc). The new Groovy test was not run against a live cluster in this change.

@openshift-ci

openshift-ci Bot commented Sep 22, 2026

Copy link
Copy Markdown

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@clickboo

clickboo commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

This change is part of the following stack:

Change managed by git-spice.

This was referenced Sep 22, 2026
Merged
Merged
Merged
Draft
Merged
@github-actions

github-actions Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🚀 Build Images Ready

Images are ready for commit fd4fd8a. To use with deploy scripts:

export MAIN_IMAGE_TAG=5.1.x-296-gfd4fd8a26c

@codecov

codecov Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.97%. Comparing base (29e618e) to head (fd4fd8a).

Additional details and impacted files 
@@                     Coverage Diff                     @@
##           boo-policy-excl-type-ui   #22965      +/-   ##
===========================================================
- Coverage                    51.98%   51.97%   -0.01%     
===========================================================
  Files                         2913     2913              
  Lines                       183638   183638              
===========================================================
- Hits                         95458    95451       -7     
- Misses                       79814    79821       +7     
  Partials                      8366     8366
Flag Coverage Δ
go-unit-tests 51.97% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 6f405fa to d2ad4b8 Compare September 23, 2026 00:27
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from ffbe87a to dd107c8 Compare September 23, 2026 00:27
@clickboo clickboo changed the title feat(be): add Groovy e2e for Job workload type exclusion ROX-37162: add Groovy e2e for Job workload type exclusion Sep 23, 2026
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from d2ad4b8 to 5796db8 Compare September 23, 2026 00:51
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from dd107c8 to 1d697a7 Compare September 23, 2026 00:51
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 5796db8 to 32d161a Compare September 23, 2026 02:56
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 1d697a7 to 9b58326 Compare September 23, 2026 02:56
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 32d161a to 85d915a Compare September 24, 2026 16:07
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 9b58326 to aee638e Compare September 24, 2026 16:08
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 85d915a to 43105a8 Compare September 24, 2026 16:10
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from aee638e to 752a243 Compare September 24, 2026 16:11
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 43105a8 to aa0a9e9 Compare September 25, 2026 01:26
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 752a243 to 00e2acb Compare September 25, 2026 01:26
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from aa0a9e9 to 751472a Compare September 25, 2026 02:53
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 00e2acb to eab1a30 Compare September 25, 2026 02:53
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 751472a to d8c63d7 Compare September 25, 2026 03:02
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from eab1a30 to ad7f2bb Compare September 25, 2026 03:02
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from d8c63d7 to e150f6b Compare September 25, 2026 05:28
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from ad7f2bb to ab913a7 Compare September 25, 2026 05:28
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from c359bff to 2499f82 Compare September 29, 2026 18:59
@clickboo clickboo mentioned this pull request Oct 5, 2026
Merged
3 of 9 tasks
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from c39fab6 to d69a8cc Compare October 10, 2026 04:10
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 2499f82 to e496dce Compare October 10, 2026 04:10
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from d69a8cc to cd91614 Compare October 10, 2026 04:56
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from e496dce to 2b35718 Compare October 10, 2026 04:56
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from cd91614 to 1c5ad46 Compare October 10, 2026 05:46
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 2b35718 to 9b0bac6 Compare October 10, 2026 05:46
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 1c5ad46 to 580a7d9 Compare October 10, 2026 23:27
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 9b0bac6 to 13be821 Compare October 10, 2026 23:27
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 580a7d9 to 04c706d Compare October 11, 2026 04:42
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 13be821 to b509abc Compare October 11, 2026 04:42
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 04c706d to f39304c Compare October 11, 2026 05:09
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from b509abc to caaeb10 Compare October 11, 2026 05:09
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from f39304c to 289535c Compare October 12, 2026 23:20
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from caaeb10 to b3fcac0 Compare October 12, 2026 23:20
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 289535c to 2cd4d0e Compare October 13, 2026 20:29
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from b3fcac0 to c0f3f92 Compare October 13, 2026 20:30
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 2cd4d0e to f832c47 Compare October 15, 2026 17:27
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from c0f3f92 to 7ff4839 Compare October 15, 2026 17:27
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from f832c47 to bdad186 Compare October 17, 2026 03:00
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 7ff4839 to 68e3a62 Compare October 17, 2026 03:00
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from bdad186 to 173caaa Compare October 17, 2026 03:21
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from 68e3a62 to f74ba8f Compare October 17, 2026 03:21
@clickboo @cursoragent
ROX-37162: add Groovy e2e for Job workload kind exclusion
fd4fd8a 
Co-authored-by: Cursor <cursoragent@cursor.com>
@clickboo
clickboo force-pushed the boo-policy-excl-type-ui branch from 173caaa to 29e618e Compare October 17, 2026 17:24
@clickboo
clickboo force-pushed the boo-policy-excl-type-e2e branch from f74ba8f to fd4fd8a Compare October 17, 2026 17:24
@clickboo
clickboo marked this pull request as ready for review October 17, 2026 23:39
@clickboo
clickboo requested a review from janisz as a code owner October 17, 2026 23:39

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@janisz janisz Awaiting requested review from janisz janisz is a code owner

Assignees

No one assigned

Labels

ai-assisted

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@clickboo