@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Feature: 0043 - OpenSCAP audit of Red Hat-like Salt minion

Description: In order to audit a Red Hat-like Salt minion
As an authorized user
I want to run an OpenSCAP scan on it

File name: min_rhlike_openscap_audit.feature

Relative path: secondary/min_rhlike_openscap_audit.feature

Scenarios

Chart

Status

Progress

Passed	100.00 %
Failed	0.00 %

Total duration:

00:03:54.393

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Log in as admin user

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Enable repositories for openSCAP on the Red Hat-like minion

When I enable the repositories "Rocky-BaseOS Rocky-AppStream" on this "rhlike_minion" 00:00:00.404

And I refresh the metadata for "rhlike_minion" 00:00:37.187

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Install the OpenSCAP packages on the Red Hat-like minion

Given I am on the Systems overview page of this "rhlike_minion" 00:00:01.582

And I install OpenSCAP dependencies on "rhlike_minion" 00:00:42.698

And I follow "Software" in the content area 00:00:00.083

And I click on "Update Package List" 00:00:00.682

And I wait until event "Package List Refresh" is completed 00:00:38.503

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Schedule an OpenSCAP audit job on the Red Hat-like minion

Given I am on the Systems overview page of this "rhlike_minion" 00:00:01.539

When I follow "Audit" in the content area 00:00:00.083

And I follow "OpenSCAP" in the content area 00:00:00.073

And I follow "Schedule" in the content area 00:00:00.067

And I wait at most 30 seconds until I do not see "This system does not yet have OpenSCAP scan capability." text, refreshing the page 00:00:00.067

And I enter "--profile xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary" as "params" 00:00:00.129

And I enter "/usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml" as "path" 00:00:00.095

And I click on "Schedule" 00:00:00.062

Then I should see a "XCCDF scan has been scheduled" text 00:00:00.073

And I wait at most 500 seconds until event "OpenSCAP xccdf scanning" is completed 00:01:11.997

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Check the results of the OpenSCAP scan on the Red Hat-like minion

Given I am on the Systems overview page of this "rhlike_minion" 00:00:01.760

When I follow "Audit" in the content area 00:00:00.089

And I follow "OpenSCAP" in the content area 00:00:00.079

And I follow "xccdf_org.open-scap_testresult" 00:00:01.047

Then I should see a "Details of XCCDF Scan" text 00:00:00.208

And I should see a "RHEL-8" text 00:00:00.216

And I should see a "XCCDF Rule Results" text 00:00:00.200

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Cleanup: remove audit scans retention period from Red Hat-like minion

When I follow the left menu "Admin > Organizations" 00:00:00.158

When I follow "SUSE Test" in the content area 00:00:00.084

And I follow "Configuration" in the content area 00:00:00.069

And I enter "0" as "scap_retention_period" 00:00:00.065

And I click on "Update Organization" 00:00:00.454

Then I should see a "Organization SUSE Test was successfully updated." text 00:00:00.065

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Cleanup: delete audit results from Red Hat-like minion

Given I am on the Systems overview page of this "rhlike_minion" 00:00:01.668

When I follow "Audit" in the content area 00:00:00.064

And I follow "OpenSCAP" in the content area 00:00:00.059

And I follow "List Scans" in the content area 00:00:00.065

And I click on "Select All" 00:00:00.507

And I click on "Remove" 00:00:00.658

And I click on "Confirm" 00:00:01.810

Then I should see a " SCAP Scan(s) deleted. 0 SCAP Scan(s) retained" text 00:00:00.067

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Cleanup: restore audit scans retention period on Red Hat-like minion

When I follow the left menu "Admin > Organizations" 00:00:00.113

When I follow "SUSE Test" in the content area 00:00:00.080

And I follow "Configuration" in the content area 00:00:00.058

And I enter "90" as "scap_retention_period" 00:00:00.050

And I click on "Update Organization" 00:00:00.574

Then I should see a "Organization SUSE Test was successfully updated." text 00:00:00.066

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Cleanup: remove the OpenSCAP packages from the Red Hat-like minion

When I remove OpenSCAP dependencies from "rhlike_minion" 00:00:05.116

And I disable repository "Rocky-BaseOS" on this "rhlike_minion" 00:00:00.196

@skip_if_github_validation @scope_openscap @scope_res @rhlike_minion

Scenario: Cleanup: restore the base channel for the Red Hat-like minion

Given I am on the Systems overview page of this "rhlike_minion" 00:00:01.590

When I follow "Software" in the content area 00:00:00.073

And I follow "Software Channels" in the content area 00:00:00.067

And I wait until I do not see "Loading..." text 00:00:00.065

And I check radio button "Fake-Base-Channel-RH-like" 00:00:00.202

+ Show Info

Warning: Radio button 'Fake-Base-Channel-RH-like' is already checked

And I wait until I do not see "Loading..." text 00:00:00.835

And I click on "Next" 00:00:00.064

Then I should see a "Confirm Software Channel Change" text 00:00:00.061

When I click on "Confirm" 00:00:00.057

Then I should see a "Changing the channels has been scheduled." text 00:00:00.920

And I wait until event "Subscribe channels scheduled" is completed 00:00:19.015