From e8c2a45ce0d0010c271b99d3a7960ac2110cc05c Mon Sep 17 00:00:00 2001 From: Dan Mihai Date: Wed, 14 Feb 2024 20:16:01 +0000 Subject: [PATCH] tests: k8s: k8s-pid-ns.bats auto-generated policy Auto-generate policy for k8s-pid-ns.bats. Fixes: #9249 Signed-off-by: Dan Mihai --- tests/integration/kubernetes/k8s-pid-ns.bats | 20 +++++++++++++++++--- 1 file changed, 17 insertions(+), 3 deletions(-) diff --git a/tests/integration/kubernetes/k8s-pid-ns.bats b/tests/integration/kubernetes/k8s-pid-ns.bats index 8726af48b7..1658843956 100644 --- a/tests/integration/kubernetes/k8s-pid-ns.bats +++ b/tests/integration/kubernetes/k8s-pid-ns.bats @@ -14,25 +14,36 @@ setup() { second_container_name="second-test-container" get_pod_config_dir + + test_yaml_file="${pod_config_dir}/pid-ns-busybox-pod.yaml" + cp "$pod_config_dir/busybox-pod.yaml" "${test_yaml_file}" + + policy_settings_dir="$(create_tmp_policy_settings_dir "${pod_config_dir}")" + + ps_command="ps" + add_exec_to_policy_settings "${policy_settings_dir}" "${ps_command}" + + add_requests_to_policy_settings "${policy_settings_dir}" "ReadStreamRequest" + auto_generate_policy "${policy_settings_dir}" "${test_yaml_file}" } @test "Check PID namespaces" { # Create the pod - kubectl create -f "${pod_config_dir}/busybox-pod.yaml" + kubectl create -f "${test_yaml_file}" # Check pod creation kubectl wait --for=condition=Ready --timeout=$timeout pod $pod_name # Check PID from first container first_pid_container=$(kubectl exec $pod_name -c $first_container_name \ - -- ps | grep "/pause") + -- $ps_command | grep "/pause") # Verify that is not empty check_first_pid=$(echo $first_pid_container | wc -l) [ "$check_first_pid" == "1" ] # Check PID from second container second_pid_container=$(kubectl exec $pod_name -c $second_container_name \ - -- ps | grep "/pause") + -- $ps_command | grep "/pause") # Verify that is not empty check_second_pid=$(echo $second_pid_container | wc -l) [ "$check_second_pid" == "1" ] @@ -45,4 +56,7 @@ teardown() { kubectl describe "pod/$pod_name" kubectl delete pod "$pod_name" + + rm "${test_yaml_file}" + delete_tmp_policy_settings_dir "${policy_settings_dir}" }