From 7179e92142ddc7acac7a762fbdad37b28e129564 Mon Sep 17 00:00:00 2001 From: stevenhorsman Date: Mon, 20 Apr 2026 09:35:06 +0100 Subject: [PATCH 1/2] tests/confidentials: Remove pointless skip The skip conditional is wrong, but it's not needed as the setup and teardown only allow confidential hardware anyway Signed-off-by: stevenhorsman --- tests/integration/kubernetes/k8s-confidential.bats | 1 - 1 file changed, 1 deletion(-) diff --git a/tests/integration/kubernetes/k8s-confidential.bats b/tests/integration/kubernetes/k8s-confidential.bats index d834ee7892..de921e49b6 100644 --- a/tests/integration/kubernetes/k8s-confidential.bats +++ b/tests/integration/kubernetes/k8s-confidential.bats @@ -19,7 +19,6 @@ setup() { } @test "Test unencrypted confidential container launch success and verify that we are running in a secure enclave." { - [[ " ${SUPPORTED_NON_TEE_HYPERVISORS} " =~ " ${KATA_HYPERVISOR} " ]] && skip "Test not supported for ${KATA_HYPERVISOR}." # Start the service/deployment/pod kubectl apply -f "${pod_config_dir}/pod-confidential-unencrypted.yaml" From c75c432c012ef36c0d5a42bf7f56afb94f0c1134 Mon Sep 17 00:00:00 2001 From: stevenhorsman Date: Mon, 20 Apr 2026 09:35:57 +0100 Subject: [PATCH 2/2] ci: Update TEE scope `k8s-confidential.bats` technically doesn't need attestation, but only runs on TEE hardware, so include it in the attestation list so we can test it in PRs Signed-off-by: stevenhorsman --- tests/integration/kubernetes/run_kubernetes_tests.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/integration/kubernetes/run_kubernetes_tests.sh b/tests/integration/kubernetes/run_kubernetes_tests.sh index c5deca3383..627bade218 100755 --- a/tests/integration/kubernetes/run_kubernetes_tests.sh +++ b/tests/integration/kubernetes/run_kubernetes_tests.sh @@ -35,6 +35,7 @@ else # by other cases which are using 'alpine' and 'quay.io/prometheus/busybox:latest' image. # more details https://github.com/kata-containers/kata-containers/issues/8337 K8S_TEST_SMALL_HOST_ATTESTATION_REQUIRED_UNION=( \ + "k8s-confidential.bats" \ "k8s-guest-pull-image-encrypted.bats" \ "k8s-guest-pull-image-authenticated.bats" \ "k8s-guest-pull-image-signature.bats" \ @@ -56,7 +57,6 @@ else K8S_TEST_SMALL_HOST_UNION=( \ "k8s-empty-image.bats" \ "k8s-guest-pull-image.bats" \ - "k8s-confidential.bats" \ "k8s-sealed-secret.bats" \ "k8s-attach-handlers.bats" \ "k8s-block-volume.bats" \