github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-01 07:47:15 +00:00
Code Issues Projects Releases Wiki Activity

tests: confidential: Add KBS logging

Browse Source 
For help with debugging add, logging of the KBS,
like the container system logs if the confidential test fails

Signed-off-by: stevenhorsman <steven@uk.ibm.com>
This commit is contained in:
stevenhorsman 2025-02-14 14:21:52 +00:00
parent 57527c1ce4
commit 52b2662b75
6 changed files with 32 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
tests/integration/kubernetes/confidential_common.sh
View File

@ -207,3 +207,16 @@ function create_coco_pod_yaml_with_annotations() {
set_node "${kata_pod}" "$node"
fi
}
confidential_teardown_common() {
local node="$1"
local node_start_time="$2"
# Run common teardown
teardown_common "${node}" ${node_start_time}
# Also try and print the kbs logs on failure
if [[ -n "${node_start_time}" && -z "${BATS_TEST_COMPLETED}" ]]; then
kbs_k8s_print_logs "${node_start_time}"
fi
}

12
tests/integration/kubernetes/confidential_kbs.sh
View File

@ -463,6 +463,18 @@ kbs_k8s_svc_http_addr() {
echo "http://${host}:${port}"
}
kbs_k8s_print_logs() {
local start_time="$1"
# Convert to iso time for kubectl
local iso_start_time
iso_start_time=$(date -d "${start_time}" --iso-8601=seconds)
echo "::group::DEBUG - kbs logs since ${start_time}"
kubectl -n "${KBS_NS}" logs -l app=kbs --since-time="${iso_start_time}" --timestamps=true || true
echo "::endgroup::"
}
# Ensure rust is installed in the host.
#
# It won't install rust if it's already present, however, if the current

2
tests/integration/kubernetes/k8s-confidential-attestation.bats
View File

@ -90,5 +90,5 @@ teardown() {
skip "Test skipped as KBS not setup"
fi
teardown_common "${node}" "${node_start_time:-}"
confidential_teardown_common "${node}" "${node_start_time:-}"
}

2
tests/integration/kubernetes/k8s-guest-pull-image-authenticated.bats
View File

@ -110,6 +110,6 @@ teardown() {
[ "${SNAPSHOTTER:-}" = "nydus" ] || skip "None snapshotter was found but this test requires one"
teardown_common "${node}" "${node_start_time:-}"
confidential_teardown_common "${node}" "${node_start_time:-}"
kubectl delete secret cococred --ignore-not-found
}

2
tests/integration/kubernetes/k8s-guest-pull-image-encrypted.bats
View File

@ -95,5 +95,5 @@ teardown() {
[ "${SNAPSHOTTER:-}" = "nydus" ] || skip "None snapshotter was found but this test requires one"
teardown_common "${node}" "${node_start_time:-}"
confidential_teardown_common "${node}" "${node_start_time:-}"
}

2
tests/integration/kubernetes/k8s-sealed-secret.bats
View File

@ -115,7 +115,7 @@ teardown() {
skip "Test skipped as KBS not setup"
fi
teardown_common "${node}" "${node_start_time:-}"
confidential_teardown_common "${node}" "${node_start_time:-}"
kubectl delete secret sealed-secret --ignore-not-found
kubectl delete secret not-sealed-secret --ignore-not-found
}