From 076869aa39d96b548aa1ab4c12c999239392e823 Mon Sep 17 00:00:00 2001 From: Dan Mihai Date: Fri, 26 Jan 2024 16:30:55 +0000 Subject: [PATCH] genpolicy: ignore the nodeName field Validating the node name is currently outside the scope of the CoCo policy. This change unblocks testing using Kata CI's test-pod-file-volume.yaml and pv-pod.yaml. Fixes: #8888 Signed-off-by: Dan Mihai --- src/tools/genpolicy/src/pod.rs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/tools/genpolicy/src/pod.rs b/src/tools/genpolicy/src/pod.rs index 2066f94aa9..cdc87db5c2 100644 --- a/src/tools/genpolicy/src/pod.rs +++ b/src/tools/genpolicy/src/pod.rs @@ -59,6 +59,9 @@ pub struct PodSpec { #[serde(skip_serializing_if = "Option::is_none")] pub volumes: Option>, + #[serde(skip_serializing_if = "Option::is_none")] + nodeName: Option, + #[serde(skip_serializing_if = "Option::is_none")] serviceAccountName: Option,