github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-07-08 21:04:35 +00:00
Code Issues Projects Releases Wiki Activity

tests: enable confidential_guest setting for coco

Browse Source 
This commit updates the `tests_common.sh` script
to enable the `confidential_guest`
setting for the coco tests in the Kubernetes
integration tests.

Signed-off-by: Archana Choudhary <archana1@microsoft.com>
This commit is contained in:
Archana Choudhary 2025-06-19 11:39:21 +00:00
parent 9dd365fdb5
commit abbe1be69f
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/tools/genpolicy/genpolicy-settings.json
View File

@ -165,8 +165,8 @@
}, },
"confidential_emptyDir": { "confidential_emptyDir": {
"mount_type": "local", "mount_type": "local",
"mount_source": "^$(cpath)/$(sandbox-id)/local/", "mount_source": "^$(cpath)/$(sandbox-id)/rootfs/local/",
"mount_point": "^$(cpath)/$(sandbox-id)/local/", "mount_point": "^$(cpath)/$(sandbox-id)/rootfs/local/",
"driver": "local", "driver": "local",
"source": "local", "source": "local",
"fstype": "local", "fstype": "local",

2
tests/integration/kubernetes/tests_common.sh
View File

@ -90,7 +90,7 @@ adapt_common_policy_settings_for_tdx() {
local settings_dir=$1 local settings_dir=$1
info "Adapting common policy settings for TDX, SNP, or the non-TEE development environment" info "Adapting common policy settings for TDX, SNP, or the non-TEE development environment"
jq '.common.cpath = "/run/kata-containers" | .volumes.configMap.mount_point = "^$(cpath)/$(bundle-id)-[a-z0-9]{16}-"' "${settings_dir}/genpolicy-settings.json" > temp.json && sudo mv temp.json "${settings_dir}/genpolicy-settings.json" jq '.kata_config.confidential_guest = true | .common.cpath = "/run/kata-containers" | .volumes.configMap.mount_point = "^$(cpath)/$(bundle-id)-[a-z0-9]{16}-"' "${settings_dir}/genpolicy-settings.json" > temp.json && sudo mv temp.json "${settings_dir}/genpolicy-settings.json"
} }
# adapt common policy settings for qemu-sev # adapt common policy settings for qemu-sev