github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-09-01 08:56:32 +00:00
Code Issues Projects Releases Wiki Activity

tests: k8s: explain the default containerd settings

Browse Source 
Explain why the containerd settings on the local machine get set to
containerd's defaults when testing GENPOLICY_PULL_METHOD=containerd.

Signed-off-by: Dan Mihai <dmihai@microsoft.com>
This commit is contained in:
Dan Mihai
2024-07-11 15:37:45 +00:00
parent 3b62eb4695
commit c1247cc254
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
tests/integration/kubernetes/gha-run.sh
View File

@@ -271,15 +271,21 @@ function run_tests() {
[ "$platform" = "kcli" ] && \ [ "$platform" = "kcli" ] && \
export KUBECONFIG="$HOME/.kcli/clusters/${CLUSTER_NAME:-kata-k8s}/auth/kubeconfig" export KUBECONFIG="$HOME/.kcli/clusters/${CLUSTER_NAME:-kata-k8s}/auth/kubeconfig"
# Enable auto-generated policy for CI images that support policy
# and enable cri plugin in containerd config.
# TODO: enable testing auto-generated policy for other types of hosts too. # TODO: enable testing auto-generated policy for other types of hosts too.
if [ "${KATA_HOST_OS}" = "cbl-mariner" ]; then if [ "${KATA_HOST_OS}" = "cbl-mariner" ]; then
export AUTO_GENERATE_POLICY="yes" export AUTO_GENERATE_POLICY="yes"
fi
# set default containerd config if [ "${AUTO_GENERATE_POLICY}" = "yes" ] && [ "${GENPOLICY_PULL_METHOD}" = "containerd" ]; then
# containerd's config on the local machine (where kubectl and genpolicy are executed by CI),
# might have been provided by a distro-specific package that disables the cri plug-in by using:
#
# disabled_plugins = ["cri"]
#
# When testing genpolicy's container image pull through containerd the cri plug-in must be
# enabled. Therefore, use containerd's default settings instead of distro's defaults. Note that
# the k8s test cluster nodes have their own containerd settings (created by kata-deploy),
# independent from the local settings being created here.
sudo containerd config default | sudo tee /etc/containerd/config.toml > /dev/null sudo containerd config default | sudo tee /etc/containerd/config.toml > /dev/null
echo "containerd config has been set to default" echo "containerd config has been set to default"
sudo systemctl restart containerd && sudo systemctl is-active containerd sudo systemctl restart containerd && sudo systemctl is-active containerd