mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-08-22 09:49:35 +00:00
be3797ef7c
Use the "allow all" policy for k8s-footloose.bats, instead of relying on the Kata Guest image to use the same policy as its default. Signed-off-by: Dan Mihai <dmihai@microsoft.com>
63 lines
1.6 KiB
Bash
63 lines
1.6 KiB
Bash
#!/usr/bin/env bats
|
|
#
|
|
# Copyright (c) 2019 Intel Corporation
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
load "${BATS_TEST_DIRNAME}/../../common.bash"
|
|
load "${BATS_TEST_DIRNAME}/tests_common.sh"
|
|
|
|
setup() {
|
|
pod_name="footubuntu"
|
|
config_name="ssh-config-map"
|
|
get_pod_config_dir
|
|
|
|
# Creates ssh-key
|
|
key_path=$(mktemp --tmpdir)
|
|
public_key_path="${key_path}.pub"
|
|
echo -e 'y\n' | sudo ssh-keygen -t rsa -N "" -f "$key_path"
|
|
|
|
# Create ConfigMap.yaml
|
|
configmap_yaml="${pod_config_dir}/footloose-rsa-configmap.yaml"
|
|
sed -e "/\${ssh_key}/r ${public_key_path}" -e "/\${ssh_key}/d" \
|
|
"${pod_config_dir}/footloose-configmap.yaml" > "$configmap_yaml"
|
|
sed -i 's/ssh-rsa/ ssh-rsa/' "$configmap_yaml"
|
|
|
|
# Add an "allow all" policy to the pod yaml file.
|
|
pod_yaml="${pod_config_dir}/pod-footloose.yaml"
|
|
add_allow_all_policy_to_yaml "${pod_yaml}"
|
|
}
|
|
|
|
@test "Footloose pod" {
|
|
cmd="uname -r"
|
|
sleep_connect="10"
|
|
|
|
# Create ConfigMap
|
|
kubectl create -f "$configmap_yaml"
|
|
|
|
# Create pod
|
|
kubectl create -f "${pod_yaml}"
|
|
|
|
# Check pod creation
|
|
kubectl wait --for=condition=Ready --timeout=$timeout pod "$pod_name"
|
|
|
|
# Get pod ip
|
|
pod_ip=$(kubectl get pod $pod_name --template={{.status.podIP}})
|
|
|
|
# Exec to the pod
|
|
kubectl exec $pod_name -- sh -c "$cmd"
|
|
|
|
# Connect to the VM
|
|
sleep "$sleep_connect"
|
|
ssh -i "$key_path" -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no 2>/dev/null root@"$pod_ip" "$cmd"
|
|
}
|
|
|
|
teardown() {
|
|
kubectl delete pod "$pod_name"
|
|
kubectl delete configmap "$config_name"
|
|
sudo rm -rf "$public_key_path"
|
|
sudo rm -rf "$key_path"
|
|
sudo rm -rf "$configmap_yaml"
|
|
}
|