Dan Mihai 5cc1024936 ci: k8s: AUTO_GENERATE_POLICY for coco-dev ...

Re-enable AUTO_GENERATE_POLICY for coco-dev Hosts, unless PULL_TYPE is
"experimental-force-guest-pull", or the caller specified a different
value for AUTO_GENERATE_POLICY.

Auto-generated Policy has been disabled accidentally and recently for
these Hosts, by a GHA workflow change.

Signed-off-by: Dan Mihai <dmihai@microsoft.com>

2025-11-14 15:53:34 +01:00

..

filter_out_per_arch

tests: remove manifest v1 test

2024-11-08 13:38:51 -08:00

runtimeclass_workloads

tests: nvidia: nims: Adjust to CC

2025-11-10 13:01:30 +01:00

volume

tests: Add k8s-block-volume test

2024-09-30 10:58:30 -05:00

.gitignore

tests/k8s: split and save bats outputs in files

2025-05-20 14:43:38 -03:00

confidential_common.sh

tests/k8s: Enable tests for qemu-coco-dev-runtime-rs

2025-11-13 14:18:43 +00:00

confidential_kbs.sh

tests: kbs: Try to get the pod logs on deployment failure

2025-11-11 08:08:24 +01:00

filter_k8s_test.sh

shellcheck: Fix shellcheck SC2068

2025-03-04 09:35:46 +00:00

gha-run.sh

ci: k8s: AUTO_GENERATE_POLICY for coco-dev

2025-11-14 15:53:34 +01:00

k8s-attach-handlers.bats

tests: k8s: reuse policy exec variable

2024-07-24 17:42:04 +00:00

k8s-block-volume.bats

tests: k8s-block-volume.bats generated policy

2025-10-21 21:36:40 +00:00

k8s-caps.bats

tests: k8s: reuse policy exec variable

2024-07-24 17:42:04 +00:00

k8s-confidential-attestation.bats

tests: confidential: Add KBS logging

2025-04-29 09:48:18 +01:00

k8s-confidential.bats

tests: k8s: confidential: Cleanup $HOME/.ssh/known_hosts

2025-01-23 12:04:13 +01:00

k8s-configmap.bats

tests: k8s-configmap.bats: log exec output

2025-03-07 19:35:45 +00:00

k8s-copy-file.bats

tests: k8s: reuse policy exec variable

2024-07-24 17:42:04 +00:00

k8s-cpu-ns.bats

tests: Fix wildcard skip in k8s-cpu-ns

2025-11-13 14:21:05 +00:00

k8s-credentials-secrets.bats

tests: k8s-credentials-secrets: auto-generate policy

2025-09-26 20:23:12 +00:00

k8s-cron-job.bats

tests: add test for cron job support

2024-08-13 10:47:42 -07:00

k8s-custom-dns.bats

tests: k8s: reuse policy exec variable

2024-07-24 17:42:04 +00:00

k8s-empty-dirs.bats

tests: k8s-empty-dirs.bats generated policy

2025-09-25 13:03:19 +00:00

k8s-env.bats

tests: k8s-env.bats: log exec output

2025-03-07 19:37:20 +00:00

k8s-exec.bats

tests: k8s-exec: reuse sh_command variable

2024-07-25 16:50:34 +00:00

k8s-file-volume.bats

tests: Use custom-node-debugger pod

2024-09-24 17:25:24 +02:00

k8s-footloose.bats

tests: k8s-footloose.bats allow all policy

2024-04-03 02:59:50 +00:00

k8s-guest-pull-image-authenticated.bats

tests/k8s: Skip initdata tests on tdx

2025-10-15 14:52:08 +01:00

k8s-guest-pull-image-encrypted.bats

tests: update negative test log assertions

2025-06-16 13:54:15 +08:00

k8s-guest-pull-image-signature.bats

tests/k8s: Skip initdata tests on tdx

2025-10-15 14:52:08 +01:00

k8s-guest-pull-image.bats

tests/k8s: Enable tests for qemu-coco-dev-runtime-rs

2025-11-13 14:18:43 +00:00

k8s-hostname.bats

tests: k8s-hostname.bats auto-generated policy

2025-09-25 13:03:19 +00:00

k8s-hostpath-volume.bats

runtime: Simplify mounting guest devices when using hostPath volumes

2025-10-01 15:32:21 -05:00

k8s-inotify.bats

tests: k8s-inotify.bats auto-generated policy

2025-09-25 13:03:19 +00:00

k8s-ip6tables.bats

ci: Add test case for iptables, exercised via istio init container

2025-09-04 07:18:45 +02:00

k8s-job.bats

tests: k8s-job debug information

2025-09-16 22:36:31 +02:00

k8s-kill-all-process-in-container.bats

tests: Re-enable k8s-kill-all-process-in-container.bats

2024-07-05 08:10:04 +08:00

k8s-limit-range.bats

policy: improve pod namespace validation

2024-12-04 10:17:54 -08:00

k8s-liveness-probes.bats

tests: k8s-liveness-probes: auto-generate policy

2025-09-26 20:23:12 +00:00

k8s-measured-rootfs.bats

tests: k8s-measured-rootfs auto generated policy

2025-10-21 21:36:27 +00:00

k8s-memory.bats

ci: k8s: arm: Enable skipped tests

2025-05-16 03:02:32 +02:00

k8s-nested-configmap-secret.bats

tests: k8s-nested-configmap-secret policy

2025-10-08 23:37:54 +00:00

k8s-nginx-connectivity.bats

tests: k8s-nginx-connectivity: auto-generated policy

2025-09-26 20:24:13 +00:00

k8s-number-cpus.bats

tests: k8s-number-cpus: retry on kubectl exec error

2025-09-19 17:44:55 +00:00

k8s-nvidia-cuda.bats

tests: nvidia: cc: Run CUDA vectorAdd tests on CC mode

2025-11-06 16:28:33 +01:00

k8s-nvidia-nim.bats

tests: nvidia: nims: Adjust to CC

2025-11-10 13:01:30 +01:00

k8s-oom.bats

tests: Prevent the shim from being killed in k8s-oom test

2025-07-24 23:44:21 +08:00

k8s-openvpn.bats

ci: Add test case for openvpn

2025-10-02 11:40:49 +02:00

k8s-optional-empty-configmap.bats

tests: k8s: reuse policy exec variable

2024-07-24 17:42:04 +00:00

k8s-optional-empty-secret.bats

tests: k8s-optional-empty-secret.bats policy

2025-10-21 15:27:31 +00:00

k8s-parallel.bats

tests: k8s: parallel: Increase timeout

2025-11-01 18:09:37 +01:00

k8s-pid-ns.bats

tests: k8s: k8s-pid-ns.bats auto-generated policy

2024-03-12 22:34:46 +00:00

k8s-pod-quota.bats

tests: k8s-pod-quota.bats auto-generated policy

2025-09-25 13:03:19 +00:00

k8s-policy-deployment-sc.bats

tests: policy-deployment-sc: detect create container errors early

2025-11-03 15:55:55 +00:00

k8s-policy-deployment.bats

tests: k8s-policy-deployment: add bad UID test

2024-09-13 22:05:31 +00:00

k8s-policy-hard-coded.bats

tests: update tests that manually set policy

2025-09-15 11:40:29 -07:00

k8s-policy-job.bats

tests/k8s: call teardown_common in some policy tests

2025-11-13 14:18:43 +00:00

k8s-policy-logs.bats

tests: policy-log: detect create container errors early

2025-11-03 15:55:55 +00:00

k8s-policy-pod.bats

tests/k8s: call teardown_common in some policy tests

2025-11-13 14:18:43 +00:00

k8s-policy-pvc.bats

tests: policy-pvc: detect create container errors early

2025-11-03 15:55:55 +00:00

k8s-policy-rc.bats

tests: Correct unexpected capability for policy failure test

2025-11-11 14:06:30 +08:00

k8s-port-forward.bats

tests: Move k8s tests to this repo

2023-03-31 21:55:41 +02:00

k8s-privileged.bats

tests/k8s: Add test for privileged containers

2025-10-07 09:59:05 -05:00

k8s-projected-volume.bats

ci: k8s: tdx: Re-enable projected-volume tests

2024-06-07 18:12:36 +02:00

k8s-qos-pods.bats

tests: k8s: k8s-qos-pods auto-generated policy

2024-03-07 05:57:30 +00:00

k8s-replication.bats

tests: k8s: k8s-replication auto-generated policy

2024-03-07 05:57:30 +00:00

k8s-sandbox-vcpus-allocation.bats

tests: k8s-sandbox-vcpus-allocation generated policy

2025-10-21 21:36:49 +00:00

k8s-scale-nginx.bats

tests: k8s: k8s-scale-nginx auto-generated policy

2024-03-07 05:57:30 +00:00

k8s-sealed-secret.bats

tests: confidential: Add KBS logging

2025-04-29 09:48:18 +01:00

k8s-seccomp.bats

tests/k8s: Enable tests for qemu-coco-dev-runtime-rs

2025-11-13 14:18:43 +00:00

k8s-security-context.bats

tests: k8s: reuse policy exec variable

2024-07-24 17:42:04 +00:00

k8s-shared-volume.bats

tests: Skip k8s tests for qemu-se-runtime-rs

2025-09-10 10:57:40 +02:00

k8s-sysctls.bats

tests: k8s-sysctls.bats auto-generated policy

2025-09-25 13:03:19 +00:00

k8s-volume.bats

tests: k8s-volume: auto-generate policy

2025-10-07 23:35:06 +02:00

lib.sh

tests/k8s: Add set -euo pipefail to lib.sh

2025-09-25 23:05:05 -05:00

run_kubernetes_nv_tests.sh

tests: nvidia: Be prepared for TDX

2025-11-10 13:01:30 +01:00

run_kubernetes_tests.sh

tests: k8s: run QoS tests on a bigger instance

2025-11-01 17:54:58 +01:00

setup.sh

tests/k8s: Enable tests for qemu-coco-dev-runtime-rs

2025-11-13 14:18:43 +00:00

tests_common.sh

tests/k8s: Enable tests for qemu-coco-dev-runtime-rs

2025-11-13 14:18:43 +00:00