From e84619d54be6def81d361af94ce1ee02c4773be0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Sun, 19 May 2024 14:33:02 +0200 Subject: [PATCH] tests: k8s: tdx: Add `add_runtime_handler_annotations` function MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This function will set the needed annotation for enforcing that the image pull will be handled by the snapshotter set for the runtime handler, instead of using the default one. Signed-off-by: Fabiano Fidêncio --- tests/integration/kubernetes/setup.sh | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/tests/integration/kubernetes/setup.sh b/tests/integration/kubernetes/setup.sh index 41538537f5..c61614fc1e 100755 --- a/tests/integration/kubernetes/setup.sh +++ b/tests/integration/kubernetes/setup.sh @@ -12,6 +12,7 @@ DEBUG="${DEBUG:-}" export AUTO_GENERATE_POLICY="${AUTO_GENERATE_POLICY:-no}" export KATA_HOST_OS="${KATA_HOST_OS:-}" +export KATA_HYPERVISOR="${KATA_HYPERVISOR:-}" if [ -n "${K8S_TEST_POLICY_FILES:-}" ]; then K8S_TEST_POLICY_FILES=($K8S_TEST_POLICY_FILES) @@ -102,10 +103,25 @@ add_cbl_mariner_kernel_initrd_annotations() { fi } +add_runtime_handler_annotations() { + case "${KATA_HYPERVISOR}" in + qemu-tdx) + info "Add runtime handler annotations for ${KATA_HYPERVISOR}" + local handler_annotation="io.containerd.cri.runtime-handler" + local handler_value="kata-${KATA_HYPERVISOR}" + for K8S_TEST_YAML in runtimeclass_workloads_work/*.yaml + do + add_annotations_to_yaml "${K8S_TEST_YAML}" "${handler_annotation}" "${handler_value}" + done + ;; + esac +} + main() { ensure_yq reset_workloads_work_dir add_cbl_mariner_kernel_initrd_annotations + add_runtime_handler_annotations } main "$@"