mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-06-21 05:02:12 +00:00
18896efa3c
This test fails with qemu-coco-dev configuration and guest-pull image pull. Unlike other tests that I've seen failing on this scenario, k8s-seccomp.bats fails after a couple of consecutive executions, so it's that kind of failure that happens once in a while. Signed-off-by: Wainer dos Santos Moschetta <wainersm@redhat.com>
43 lines
1.1 KiB
Bash
43 lines
1.1 KiB
Bash
#
|
|
# Copyright (c) 2021 Red Hat
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
load "${BATS_TEST_DIRNAME}/../../common.bash"
|
|
load "${BATS_TEST_DIRNAME}/tests_common.sh"
|
|
|
|
setup() {
|
|
[ "${KATA_HYPERVISOR:-}" = "qemu-coco-dev" ] && \
|
|
skip "This test fails intermittently for ${KATA_HYPERVISOR:-}"
|
|
pod_name="seccomp-container"
|
|
get_pod_config_dir
|
|
|
|
yaml_file="${pod_config_dir}/pod-seccomp.yaml"
|
|
add_allow_all_policy_to_yaml "${yaml_file}"
|
|
}
|
|
|
|
@test "Support seccomp runtime/default profile" {
|
|
expected_seccomp_mode="2"
|
|
# Create pod
|
|
kubectl create -f "${yaml_file}"
|
|
|
|
# Wait it to complete
|
|
cmd="kubectl get pods ${pod_name} | grep Completed"
|
|
waitForProcess "${wait_time}" "${sleep_time}" "${cmd}"
|
|
|
|
# Expect Seccomp on mode 2 (filter)
|
|
seccomp_mode="$(kubectl logs ${pod_name} | sed 's/Seccomp:\s*\([0-9]\)/\1/')"
|
|
[ "$seccomp_mode" -eq "$expected_seccomp_mode" ]
|
|
}
|
|
|
|
teardown() {
|
|
[ "${KATA_HYPERVISOR:-}" = "qemu-coco-dev" ] && \
|
|
skip "This test fails intermittently for ${KATA_HYPERVISOR:-}"
|
|
# For debugging purpose
|
|
echo "seccomp mode is ${seccomp_mode}, expected $expected_seccomp_mode"
|
|
kubectl describe "pod/${pod_name}"
|
|
|
|
kubectl delete -f "${yaml_file}" || true
|
|
}
|