stackrox · davdhacs · Jun 25, 2026 · Jun 25, 2026 · Jun 25, 2026 · Jun 25, 2026
@@ -3,29 +3,66 @@ import withAuth from '../../helpers/basicAuth';
 import {
     checkNetworkGraphEmptyState,
     selectCluster,
+    selectDeployment,
     selectNamespace,
     visitNetworkGraph,
+    waitForNetworkFlows,
 } from './networkGraph.helpers';
 import { networkGraphSelectors } from './networkGraph.selectors';
 
 describe('Network Graph deployment sidebar', () => {
     withAuth();
 
+    before(() => {
+        waitForNetworkFlows();
+    });
+
     it('should render a graph when cluster and namespace are selected', () => {
         visitNetworkGraph();
 
         checkNetworkGraphEmptyState();
 
         selectCluster();
         selectNamespace('stackrox');
+        selectDeployment('collector');
+
+        cy.get(
+            `${networkGraphSelectors.nodes} > [data-type="node"] .pf-topology__node__label:contains("sensor")`,
+            { timeout: 30000 }
+        );
+
+        // With the addition of the compliance node indexer, it is possible for a flow to exist between central and collector
+        // https://github.com/stackrox/stackrox/pull/12573
+        //
+        // cy.get(
+        //  `${networkGraphSelectors.nodes} > [data-type="node"] .pf-topology__node__label:contains("central")`
+        // ).should('not.exist');
+        cy.get(
+            `${networkGraphSelectors.nodes} > [data-type="node"] .pf-topology__node__label:contains("scanner")`
+        ).should('not.exist');
+        cy.get(
+            `${networkGraphSelectors.nodes} > [data-type="node"] .pf-topology__node__label:contains("admission-controller")`
+        ).should('not.exist');
+
+        // click on Collector node, too
+        cy.get(`${networkGraphSelectors.nodes} > [data-type="node"] .pf-topology__node__label`)
+            .contains('collector')
+            .parent()
+            .click();
+
+        cy.get(networkGraphSelectors.drawerTitle).contains('collector');
+        cy.get(`${networkGraphSelectors.drawerSubtitle}:contains("stackrox")`); // cluster name flexible for any test environment
 
-        // Verify sensor node exists in the namespace graph (no deployment filter)
-        cy.get(networkGraphSelectors.deploymentNode('sensor'), { timeout: 30000 });
+        // check Details tab
+        cy.get(`${networkGraphSelectors.drawerTabs} .pf-m-current`).contains('Details');
 
-        // Click on sensor node to open sidebar (force: nodes may overlap in topology)
-        cy.get(networkGraphSelectors.deploymentNode('sensor')).click({ force: true });
+        cy.get('h2:contains("Network security")');
+        cy.get('h2:contains("Deployment overview")');
+        cy.get('h2:contains("Port configurations")');
+        cy.get('h2:contains("Container configurations")');
 
-        cy.get(networkGraphSelectors.drawerTitle).contains('sensor');
-        cy.get(`${networkGraphSelectors.drawerSubtitle}:contains("stackrox")`);
+        // check list of containers in Container Config section
+        cy.get('[data-testid="deployment-container-config"]').contains('collector');
+        cy.get('[data-testid="deployment-container-config"]').contains('compliance');
     });
 });
@@ -98,6 +98,57 @@ export function checkNetworkGraphEmptyState() {
     );
 }
 
+export function waitForNetworkFlows(timeoutMs = 600000) {
+    const interval = 15000;
+    const maxAttempts = Math.ceil(timeoutMs / interval);
+
+    function poll(attempt) {
+        if (attempt >= maxAttempts) {
+            throw new Error(
+                `Timed out after ${timeoutMs / 1000}s waiting for network flow data`
+            );
+        }
+        const auth = { bearer: Cypress.env('ROX_AUTH_TOKEN') };
+        return cy
+            .request({ url: '/v1/clusters', auth, failOnStatusCode: false })
+            .then((clustersResponse) => {
+                const clusters = clustersResponse?.body?.clusters ?? [];
+                if (clusters.length === 0) {
+                    cy.log('No clusters found, retrying...');
+                    cy.wait(interval);
+                    return poll(attempt + 1);
+                }
+                const clusterId = clusters[0].id;
+                return cy
+                    .request({
+                        url: `/v1/networkgraph/cluster/${clusterId}?query=Namespace:stackrox`,
+                        auth,
+                        failOnStatusCode: false,
+                    })
+                    .then((graphResponse) => {
+                        const nodes = graphResponse?.body?.nodes ?? [];
+                        const collectorNode = nodes.find(
+                            (n) => n?.entity?.deployment?.name === 'collector'
+                        );
+                        const hasOutEdges =
+                            collectorNode?.outEdges &&
+                            Object.keys(collectorNode.outEdges).length > 0;
+                        if (hasOutEdges) {
+                            cy.log('Network flow data ready for collector');
+                            return;
+                        }
+                        cy.log(
+                            `Network flows not ready (attempt ${attempt + 1}/${maxAttempts}), retrying...`
+                        );
+                        cy.wait(interval);
+                        return poll(attempt + 1);
+                    });
+            });
+    }
+
+    return poll(0);
+}
+
 export function updateAndCloseCidrModal() {
     cy.clock();
     cy.get(networkGraphSelectors.updateCidrBlocksButton).click();

@@ -149,6 +149,42 @@ export function clickFirstDrillDownButtonInEventTimeline(fixtureForPodEventTimel
     );
 }
 
+// data readiness
+
+export function waitForProcessEvents(timeoutMs = 600000) {
+    const interval = 15000;
+    const maxAttempts = Math.ceil(timeoutMs / interval);
+
+    function poll(attempt) {
+        if (attempt >= maxAttempts) {
+            throw new Error(
+                `Timed out after ${timeoutMs / 1000}s waiting for process events`
+            );
+        }
+        const auth = { bearer: Cypress.env('ROX_AUTH_TOKEN') };
+        return cy
+            .request({
+                url: '/v1/processcount',
+                auth,
+                failOnStatusCode: false,
+            })
+            .then((response) => {
+                const count = response?.body?.count ?? 0;
+                if (count > 10) {
+                    cy.log(`Process events ready: ${count} processes`);
+                    return;
+                }
+                cy.log(
+                    `Process count: ${count} (attempt ${attempt + 1}/${maxAttempts}), retrying...`
+                );
+                cy.wait(interval);
+                return poll(attempt + 1);
+            });
+    }
+
+    return poll(0);
+}
+
 // interact
 
 export function clickTab(tabText) {

@@ -12,6 +12,7 @@ import {
     viewFirstRiskDeployment,
     viewGraph,
     visitRiskDeployments,
+    waitForProcessEvents,
 } from './Risk.helpers';
 import { selectors } from './Risk.selectors';
 
@@ -27,6 +28,10 @@ const fixtureForDeploymentEventTimeline = 'risks/eventTimeline/deploymentEventTi
 describe('Risk Event Timeline for Deployment', () => {
     withAuth();
 
+    before(() => {
+        waitForProcessEvents();
+    });
+
     describe('Clustering Events', () => {
         it('should show the clustered event markers', () => {
             // mocking data to thoroughly test the clustering

@@ -11,6 +11,7 @@ import {
     viewFirstRiskDeployment,
     viewGraph,
     visitRiskDeployments,
+    waitForProcessEvents,
 } from './Risk.helpers';
 import { selectors } from './Risk.selectors';
 
@@ -30,6 +31,10 @@ const fixtureForPodEventTimeline = 'risks/eventTimeline/podEventTimeline.json';
 describe('Risk Event Timeline for Pod', () => {
     withAuth();
 
+    before(() => {
+        waitForProcessEvents();
+    });
+
     describe('Clustering Events', () => {
         it('should show the clustered event markers', () => {
             openEventTimeline();

@@ -432,3 +432,61 @@ export function hasTableColumnHeadings(tableColumnHeadings) {
 
     cy.get('.rt-th').should('have.length', tableColumnHeadings.length);
 }
+
+// data readiness
+
+/**
+ * Triggers an image scan and polls GraphQL until imageCVECount > 0.
+ * Used as a before() hook for vulnmanagement tests that depend on
+ * real image CVE data from the API.
+ *
+ * The workflow also triggers a scan before Cypress starts, so this
+ * is a safety net that ensures the data is actually indexed.
+ *
+ * @param {number} timeoutMs - Maximum time to wait (default 2 minutes)
+ */
+export function waitForImageCVEs(timeoutMs = 120000) {
+    const interval = 5000;
+    const maxAttempts = Math.ceil(timeoutMs / interval);
+    const auth = { bearer: Cypress.env('ROX_AUTH_TOKEN') };
+
+    // Trigger a scan in case the workflow hasn't already
+    cy.request({
+        method: 'POST',
+        url: '/v1/images/scan',
+        auth,
+        body: { imageName: 'docker.io/nginx:1.12', force: true },
+        failOnStatusCode: false,
+    }).then((scanResponse) => {
+        cy.log(`Image scan triggered: ${scanResponse.status}`);
+    });
+
+    function poll(attempt) {
+        if (attempt >= maxAttempts) {
+            throw new Error(
+                `Timed out after ${timeoutMs / 1000}s waiting for image CVE data`
+            );
+        }
+        return cy
+            .request({
+                method: 'POST',
+                url: '/api/graphql',
+                auth,
+                headers: { 'Content-Type': 'application/json' },
+                body: { query: '{ imageCVECount }' },
+                failOnStatusCode: false,
+            })
+            .then((response) => {
+                const count = response?.body?.data?.imageCVECount ?? 0;
+                if (count > 0) {
+                    cy.log(`Image CVE data ready: imageCVECount=${count}`);
+                    return;
+                }
+                cy.log(`Waiting for image CVEs... attempt ${attempt + 1}/${maxAttempts}`);
+                cy.wait(interval);
+                return poll(attempt + 1);
+            });
+    }
+
+    return poll(0);
+}
@@ -10,13 +10,18 @@ import {
     verifyConditionalCVEs,
     verifySecondaryEntities,
     visitVulnerabilityManagementEntities,
+    waitForImageCVEs,
 } from './VulnerabilityManagement.helpers';
 
 const entitiesKey = 'clusters';
 
 describe('Vulnerability Management Clusters', () => {
     withAuth();
 
+    before(() => {
+        waitForImageCVEs();
+    });
+
     it('should display all the columns', () => {
         visitVulnerabilityManagementEntities(entitiesKey);
 

@@ -5,6 +5,7 @@ import {
     verifyVulnerabilityManagementDashboardCVEs,
     visitVulnerabilityManagementDashboard,
     visitVulnerabilityManagementDashboardFromLeftNav,
+    waitForImageCVEs,
 } from './VulnerabilityManagement.helpers';
 import { selectors } from './VulnerabilityManagement.selectors';
 
@@ -35,6 +36,10 @@ function selectTopRiskyOption(optionText) {
 describe('Vulnerability Management Dashboard', () => {
     withAuth();
 
+    before(() => {
+        waitForImageCVEs();
+    });
+
     it('should visit using the left nav', () => {
         visitVulnerabilityManagementDashboardFromLeftNav();
     });

@@ -2,6 +2,7 @@ import withAuth from '../../helpers/basicAuth';
 import {
     interactAndWaitForVulnerabilityManagementEntity,
     visitVulnerabilityManagementDashboard,
+    waitForImageCVEs,
 } from './VulnerabilityManagement.helpers';
 import { selectors } from './VulnerabilityManagement.selectors';
 
@@ -51,6 +52,10 @@ function selectTopRiskiestOption(optionText) {
 describe('Vulnerability Management Dashboard', () => {
     withAuth();
 
+    before(() => {
+        waitForImageCVEs();
+    });
+
     // Some tests might fail in local deployment.
 
     it('has item link to image page from Top riskiest images', () => {

@@ -10,13 +10,18 @@ import {
     verifyConditionalCVEs,
     verifySecondaryEntities,
     visitVulnerabilityManagementEntities,
+    waitForImageCVEs,
 } from './VulnerabilityManagement.helpers';
 
 const entitiesKey = 'deployments';
 
 describe('Vulnerability Management Deployments', () => {
     withAuth();
 
+    before(() => {
+        waitForImageCVEs();
+    });
+
     it('should display table columns', () => {
         visitVulnerabilityManagementEntities(entitiesKey);
 

@@ -2,12 +2,17 @@ import withAuth from '../../helpers/basicAuth';
 import {
     interactAndWaitForVulnerabilityManagementEntity,
     visitVulnerabilityManagementEntities,
+    waitForImageCVEs,
 } from './VulnerabilityManagement.helpers';
 import { selectors } from './VulnerabilityManagement.selectors';
 
 describe('Entities single views', () => {
     withAuth();
 
+    before(() => {
+        waitForImageCVEs();
+    });
+
     // Some tests might fail in local deployment.
 
     it('should show a CVE description in overview when coming from cve list', () => {

@@ -10,13 +10,18 @@ import {
     verifyConditionalCVEs,
     verifySecondaryEntities,
     visitVulnerabilityManagementEntities,
+    waitForImageCVEs,
 } from './VulnerabilityManagement.helpers';
 
 const entitiesKey = 'image-components';
 
 describe('Vulnerability Management Image Components', () => {
     withAuth();
 
+    before(() => {
+        waitForImageCVEs();
+    });
+
     it('should display table columns', () => {
         visitVulnerabilityManagementEntities(entitiesKey);