Cameron Baird 19d502de76 ci: Add test cases for fsGroup and supplementalGroup fields ...

Introduce new test case to the security context bats file which verifies
that policy works properly for a deployment yaml containing fsGroup and
supplementalGroup configuration.

Signed-off-by: Cameron Baird <cameronbaird@microsoft.com>

2025-05-13 21:48:58 +00:00

..

confidential

tests: fix confidential ssh Dockerfile

2025-03-10 18:31:05 -05:00

stress

tests: Update ubuntu image for stress Dockerfile

2024-08-09 15:29:10 +00:00

busybox-pod.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

busybox-template.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

cron-job.yaml

tests: add test for cron job support

2024-08-13 10:47:42 -07:00

custom-node-debugger.yaml

tests: Create and delete node debugger pod only once

2024-09-20 14:37:43 +02:00

footloose-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

initContainer-shared-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

initcontainer-shareprocesspid.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

inject_secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

inotify-configmap-pod.yaml

ci: k8s: Don't set cpu limit request for k8s-inotofy test

2023-09-14 22:03:16 +02:00

inotify-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

inotify-updated-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

job-template.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

job.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

k8s-layered-sc-deployment.yaml

ci: Add CI tests for runAsGroup, GID policy

2025-04-28 16:28:31 +00:00

k8s-pod-sc-deployment.yaml

ci: Add CI tests for runAsGroup, GID policy

2025-04-28 16:28:31 +00:00

k8s-pod-sc-nobodyupdate-deployment.yaml

ci: Add CI tests for runAsGroup, GID policy

2025-04-28 16:28:31 +00:00

k8s-pod-sc-supplementalgroups-deployment.yaml

ci: Add test cases for fsGroup and supplementalGroup fields

2025-05-13 21:48:58 +00:00

k8s-policy-configmap.yaml

genpolicy: read binaryData value as String

2024-10-14 20:03:11 +02:00

k8s-policy-deployment.yaml

tests: k8s-policy-deployment: add bad UID test

2024-09-13 22:05:31 +00:00

k8s-policy-hard-coded.yaml

tests: k8s: rename hard-coded policy test script

2024-07-26 20:14:05 +00:00

k8s-policy-job.yaml

tests: k8s: inject agent policy failures

2024-04-09 15:36:57 +00:00

k8s-policy-pod-pvc.yaml

genpolicy: check requested devices

2024-05-31 22:05:49 +02:00

k8s-policy-pod.yaml

policy: support optional metadata uid field

2024-12-02 11:24:58 -08:00

k8s-policy-pvc.yaml

genpolicy: check requested devices

2024-05-31 22:05:49 +02:00

k8s-policy-rc.yaml

tests: k8s-policy-rc: remove default UID from YAML

2024-10-01 00:10:30 +00:00

k8s-policy-set-keys.rego

tests: query data from the OPA service

2023-10-17 13:31:43 +00:00

k8s-policy-set-keys.yaml

tests: query data from the OPA service

2023-10-17 13:31:43 +00:00

k8s-priority-class.yaml

genpolicy: add priorityClassName as a field in PodSpec interface

2024-08-27 19:54:02 -07:00

kata-runtimeclass.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

lifecycle-events.yaml

ci: k8s: Replace nginx alpine images

2024-08-17 12:19:33 +02:00

limit-range.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

nginx-deployment.yaml

ci: k8s: Replace nginx alpine images

2024-08-17 12:19:33 +02:00

pod-attestable.yaml

CI: Use multi-arch image for alpine-bash-curl

2024-06-28 12:01:53 +02:00

pod-besteffort.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-block-pv.yaml

tests: Add k8s-block-volume test

2024-09-30 10:58:30 -05:00

pod-burstable.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-caps.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-confidential-unencrypted.yaml

tests: k8s: confidential: Increase log_buf_len to 4M

2025-01-23 12:04:13 +01:00

pod-config.yaml.in

tests/k8s: add new_pod_config() to lib.sh

2023-11-28 11:21:53 -03:00

pod-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-cpu-defaults.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-cpu.yaml

tests: k8s: Retry output of kubectl exec in k8s-cpu-ns

2025-04-30 15:01:08 +01:00

pod-custom-dns.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

pod-empty-dir-fsgroup.yaml

kubernetes: add agnhost command in pod yaml

2023-05-23 18:11:45 +08:00

pod-empty-dir.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-env.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-file-volume.yaml

tests: replace busybox from docker with quay in guest pull

2024-06-03 01:14:16 -05:00

pod-footloose.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-guaranteed.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-guest-pull-in-trusted-storage.yaml.in

tests:k8s: add tests for pull images in the guest using trusted storage

2024-08-15 13:55:22 +08:00

pod-hostname.yaml

ci: Introduce CI to validate pod hostname

2024-10-21 16:32:56 +01:00

pod-http-liveness.yaml

kubernetes: add agnhost command in pod yaml

2023-05-23 18:11:45 +08:00

pod-hugepage.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-liveness.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-memory-limit.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-nested-configmap-secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-number-cpu.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-oom.yaml

tests: k8s: Be more aggressive to get OOM

2025-01-06 21:48:20 +01:00

pod-optional-empty-configmap.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-optional-empty-secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-projected-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-quota-deployment.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

pod-readonly-volume.yaml

tests: replace busybox from docker with quay in guest pull

2024-06-03 01:14:16 -05:00

pod-sandbox-vcpus-allocation.yaml

tests: remove object separation mark from eof

2024-05-31 13:28:34 -04:00

pod-sealed-secret-as-file.yaml

tests: add test for sealed file secrets

2024-10-08 16:01:48 +08:00

pod-sealed-secret.yaml

tests: add test for sealed env secrets

2024-07-08 17:41:20 -05:00

pod-seccomp.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-secret-env.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-secret.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-security-context.yaml

tests: fix ps command in k8s-security-context

2024-07-17 01:33:31 +00:00

pod-shared-volume.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-sysctl.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

pod-tcp-liveness.yaml

kubernetes: add agnhost command in pod yaml

2023-05-23 18:11:45 +08:00

pv-pod.yaml

tests: run k8s-volume on a given node

2023-10-09 11:08:48 -03:00

pv-volume.yaml

tests: Add k8s-volume test

2023-07-27 14:06:43 -07:00

redis-master-deployment.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

redis-master-service.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

replication-controller.yaml

ci: k8s: Replace nginx alpine images

2024-08-17 12:19:33 +02:00

resource-quota.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

tests-namespace.yaml

gha: k8s: Ensure tests are running on a specific namespace

2023-07-06 14:14:50 +02:00

vfio.yaml

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

volume-claim.yaml

tests: Add k8s-volume test

2023-07-27 14:06:43 -07:00