From 0e86a9615792782d01a455365275a9d74aca86a7 Mon Sep 17 00:00:00 2001 From: Dan Mihai Date: Tue, 16 Jul 2024 20:39:32 +0000 Subject: [PATCH] tests: fix ps command in k8s-security-context 1. Use a container image that supports "ps --user 1000 -f". 2. Execute that command using: sh -c "ps --user 1000 -f" instead of passing additional arguments to sh: sh -c ps --user 1000 -f Fixes: #10019 Signed-off-by: Dan Mihai --- tests/integration/kubernetes/k8s-security-context.bats | 2 +- .../kubernetes/runtimeclass_workloads/pod-security-context.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/integration/kubernetes/k8s-security-context.bats b/tests/integration/kubernetes/k8s-security-context.bats index 9ba22c72ba..5d6b5380ee 100644 --- a/tests/integration/kubernetes/k8s-security-context.bats +++ b/tests/integration/kubernetes/k8s-security-context.bats @@ -33,7 +33,7 @@ setup() { # Check user process="tail -f /dev/null" - kubectl exec $pod_name -- sh -c $cmd | grep "$process" + kubectl exec $pod_name -- sh -c "$cmd" | grep "$process" } teardown() { diff --git a/tests/integration/kubernetes/runtimeclass_workloads/pod-security-context.yaml b/tests/integration/kubernetes/runtimeclass_workloads/pod-security-context.yaml index 60b92b79b4..04879d2688 100644 --- a/tests/integration/kubernetes/runtimeclass_workloads/pod-security-context.yaml +++ b/tests/integration/kubernetes/runtimeclass_workloads/pod-security-context.yaml @@ -14,5 +14,5 @@ spec: runAsUser: 1000 containers: - name: sec-text - image: quay.io/prometheus/busybox:latest + image: quay.io/kata-containers/sysbench-kata:latest command: ["tail", "-f", "/dev/null"]