add Flatcar k3d security test host

2026-08-14 21:47:10 -04:00
parent e79045712d
commit 2bd22db276
3 changed files with 259 additions and 0 deletions
@@ -45,3 +45,10 @@ The image URL and optional SHA256 value can be overridden through environment
 variables. The default URL tracks the Flatcar Stable current amd64 image. Pin
 `FLATCAR_IMAGE_URL` and set `FLATCAR_IMAGE_SHA256` for a reproducible change
 controlled deployment.
+
+## Dedicated k3d test host
+
+Use [k3d-test-host.md](k3d-test-host.md) and
+`create-flatcar-k3d-test-host.sh` for a separate Flatcar VM used for Linux
+k3d, Kyverno, Falco, and kube-bench testing. This VM has no Gitea runner token
+and should remain separate from the CI runner trust boundary.