For testing/demonstration we should make a set of workflow examples demonstrating features of fridge, - Normal usage - [ ] Using "custom" containers from harbor - [ ] Pulling containers from docker hub and quay through harbor proxies - [ ] Getting input (sensitive, immutable) data from minio - [ ] Getting user data (scripts) from minio - [ ] Using intermediate results from minio - [ ] Storing intermediate outputs in minio - Security demonstration/smoke tests - [x] Attempt to post/get data to/from the internet (_e.g._ curl) - [ ] Attempt to access external DNS - [ ] Attempt to access the k8s API (_e.g._ create a pod, modify resources) - [ ] Attempt to submit a workflow which doesn't meet the PSS (_e.g._ a container running as root, uid <= 1000, host network)
For testing/demonstration we should make a set of workflow examples demonstrating features of fridge,