mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-06-27 07:48:55 +00:00
6c506cde86
add tests for pull images in the guest using trusted storage: 1) failed case: Test we cannot pull an image that exceeds the memory limit inside the guest 2) successful case: Test we can pull an image inside the guest using trusted ephemeral storage. Signed-off-by: ChengyuZhu6 <chengyu.zhu@intel.com>
33 lines
740 B
YAML
33 lines
740 B
YAML
#
|
|
# Copyright (c) 2024 Intel Corporation
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: large-image-pod
|
|
spec:
|
|
runtimeClassName: kata
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/hostname
|
|
operator: In
|
|
values:
|
|
- $NODE_NAME
|
|
volumes:
|
|
- name: trusted-storage
|
|
persistentVolumeClaim:
|
|
claimName: trusted-pvc
|
|
containers:
|
|
- name: app-container
|
|
image: $IMAGE
|
|
command: ["/bin/sh", "-c"]
|
|
args:
|
|
- sleep 6000
|
|
volumeDevices:
|
|
- devicePath: /dev/trusted_store
|
|
name: trusted-storage |