Cameron Baird bdd98ec623 ci: Add test case for iptables, exercised via istio init container ...

Introduce new test case in k8s-iptables.bats which verifies that
workloads can configure iptables in the UVM.

Users discovered that they weren't able to do this for common usecases
such as istio. Proper support for this should be built into UVM
kernels. This test ensures that current and future kernel
configurations don't regress this functionality.

Signed-off-by: Cameron Baird <cameronbaird@microsoft.com>

2025-09-04 07:18:45 +02:00

..

confidential

tests: fix confidential ssh Dockerfile

2025-03-10 18:31:05 -05:00

stress

tests: Update ubuntu image for stress Dockerfile

2024-08-09 15:29:10 +00:00

busybox-pod.yaml

…

busybox-template.yaml

…

configmap.yaml

…

cron-job.yaml

tests: add test for cron job support

2024-08-13 10:47:42 -07:00

custom-node-debugger.yaml

tests: Create and delete node debugger pod only once

2024-09-20 14:37:43 +02:00

footloose-configmap.yaml

…

initContainer-shared-volume.yaml

…

initcontainer-shareprocesspid.yaml

…

inject_secret.yaml

…

inotify-configmap-pod.yaml

…

inotify-configmap.yaml

…

inotify-updated-configmap.yaml

…

job-template.yaml

…

job.yaml

…

k8s-layered-sc-deployment.yaml

tests: update container image for ci and unit test

2025-06-20 10:46:56 -07:00

k8s-pod-sc-deployment.yaml

tests: update container image for ci and unit test

2025-06-20 10:46:56 -07:00

k8s-pod-sc-nobodyupdate-deployment.yaml

tests: update container image for ci and unit test

2025-06-20 10:46:56 -07:00

k8s-pod-sc-supplementalgroups-deployment.yaml

tests: update container image for ci and unit test

2025-06-20 10:46:56 -07:00

k8s-policy-configmap.yaml

genpolicy: read binaryData value as String

2024-10-14 20:03:11 +02:00

k8s-policy-deployment.yaml

tests: update container image for ci and unit test

2025-06-20 10:46:56 -07:00

k8s-policy-hard-coded.yaml

tests: k8s: rename hard-coded policy test script

2024-07-26 20:14:05 +00:00

k8s-policy-job.yaml

…

k8s-policy-pod-pvc.yaml

genpolicy: check requested devices

2024-05-31 22:05:49 +02:00

k8s-policy-pod.yaml

policy: support optional metadata uid field

2024-12-02 11:24:58 -08:00

k8s-policy-pvc.yaml

genpolicy: check requested devices

2024-05-31 22:05:49 +02:00

k8s-policy-rc.yaml

tests: k8s-policy-rc: remove default UID from YAML

2024-10-01 00:10:30 +00:00

k8s-policy-set-keys.rego

…

k8s-policy-set-keys.yaml

…

k8s-priority-class.yaml

genpolicy: add priorityClassName as a field in PodSpec interface

2024-08-27 19:54:02 -07:00

kata-runtimeclass.yaml

…

lifecycle-events.yaml

ci: k8s: Replace nginx alpine images

2024-08-17 12:19:33 +02:00

limit-range.yaml

…

nginx-deployment.yaml

ci: k8s: Replace nginx alpine images

2024-08-17 12:19:33 +02:00

nvidia-nim-llama-3-1-8b-instruct.yaml.in

gpu: Add embeding service

2025-08-14 16:34:21 +00:00

nvidia-nim-llama-3-2-nv-embedqa-1b-v2.yaml.in

gpu: Add embeding service

2025-08-14 16:34:21 +00:00

pod-attestable.yaml

CI: Use multi-arch image for alpine-bash-curl

2024-06-28 12:01:53 +02:00

pod-besteffort.yaml

…

pod-block-pv.yaml

tests: Add k8s-block-volume test

2024-09-30 10:58:30 -05:00

pod-burstable.yaml

…

pod-caps.yaml

…

pod-confidential-unencrypted.yaml

tests: k8s: confidential: Increase log_buf_len to 4M

2025-01-23 12:04:13 +01:00

pod-config.yaml.in

…

pod-configmap.yaml

…

pod-cpu-defaults.yaml

…

pod-cpu.yaml

tests: k8s: Retry output of kubectl exec in k8s-cpu-ns

2025-04-30 15:01:08 +01:00

pod-custom-dns.yaml

…

pod-empty-dir-fsgroup.yaml

…

pod-empty-dir.yaml

…

pod-env.yaml

…

pod-file-volume.yaml

tests: replace busybox from docker with quay in guest pull

2024-06-03 01:14:16 -05:00

pod-footloose.yaml

…

pod-guaranteed.yaml

…

pod-guest-pull-in-trusted-storage.yaml.in

tests:k8s: add tests for pull images in the guest using trusted storage

2024-08-15 13:55:22 +08:00

pod-hostname.yaml

ci: Introduce CI to validate pod hostname

2024-10-21 16:32:56 +01:00

pod-http-liveness.yaml

…

pod-hugepage.yaml

…

pod-istio.yaml

ci: Add test case for iptables, exercised via istio init container

2025-09-04 07:18:45 +02:00

pod-liveness.yaml

…

pod-memory-limit.yaml

…

pod-nested-configmap-secret.yaml

…

pod-number-cpu.yaml

…

pod-oom.yaml

tests: Prevent the shim from being killed in k8s-oom test

2025-07-24 23:44:21 +08:00

pod-optional-empty-configmap.yaml

…

pod-optional-empty-secret.yaml

…

pod-projected-volume.yaml

…

pod-quota-deployment.yaml

…

pod-readonly-volume.yaml

tests: replace busybox from docker with quay in guest pull

2024-06-03 01:14:16 -05:00

pod-sandbox-vcpus-allocation.yaml

tests: remove object separation mark from eof

2024-05-31 13:28:34 -04:00

pod-sealed-secret-as-file.yaml

tests: add test for sealed file secrets

2024-10-08 16:01:48 +08:00

pod-sealed-secret.yaml

tests: add test for sealed env secrets

2024-07-08 17:41:20 -05:00

pod-seccomp.yaml

…

pod-secret-env.yaml

…

pod-secret.yaml

…

pod-security-context.yaml

tests: fix ps command in k8s-security-context

2024-07-17 01:33:31 +00:00

pod-shared-volume.yaml

…

pod-sysctl.yaml

…

pod-tcp-liveness.yaml

…

pv-pod.yaml

…

pv-volume.yaml

…

redis-master-deployment.yaml

…

redis-master-service.yaml

…

replication-controller.yaml

ci: k8s: Replace nginx alpine images

2024-08-17 12:19:33 +02:00

resource-quota.yaml

…

tests-namespace.yaml

…

vfio.yaml

…

volume-claim.yaml

…