Fabiano Fidêncio b2f7314d31 tests: harden sandbox sizing manifests for k8s cpu workloads ...

Route runtime-rs tests to dedicated manifests/templates and ensure the
CPU allocation workloads always carry explicit memory limits, avoiding
Dragonball sandbox startup failures from InvalidMemorySize(0).

Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
Assisted-by: Cursor <cursoragent@cursor.com>

2026-06-25 13:56:11 +02:00

..

confidential

tests: parametrize storage parameters

2026-04-01 10:22:26 +02:00

cryptsetup

tests: Add test for trusted ephemeral data storage

2026-03-09 14:52:17 -05:00

numa

tests: Add NUMA topology / GPU placement tests to the NV CIs

2026-05-24 22:00:46 +02:00

openvpn

tests: k8s-openvpn: enable kata for init pod

2026-04-17 17:10:09 +00:00

stress

…

busybox-pod.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

busybox-template.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

configmap.yaml

…

cron-job.yaml

tests: k8s-cron-job: set runtimeClassName to kata

2026-05-05 11:21:05 +02:00

custom-node-debugger.yaml

…

default-initdata.toml

tests: k8s: use default-initdata.toml when auto-generating policy

2025-10-13 10:47:53 -07:00

footloose-configmap.yaml

…

initContainer-shared-volume.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

initcontainer-shareprocesspid.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

inject_secret.yaml

…

inotify-configmap-pod.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

inotify-configmap.yaml

…

inotify-updated-configmap.yaml

…

job-template.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

job.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

k8s-layered-sc-deployment.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

k8s-pod-sc-deployment.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

k8s-pod-sc-nobodyupdate-deployment.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

k8s-pod-sc-supplementalgroups-deployment.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

k8s-policy-configmap.yaml

genpolicy: read binaryData value as String

2024-10-14 20:03:11 +02:00

k8s-policy-deployment.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

k8s-policy-hard-coded.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

k8s-policy-job.yaml

genpolicy: support empty environment variables

2026-05-05 18:53:25 +00:00

k8s-policy-pod-pvc.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

k8s-policy-pod.yaml

genpolicy: support pod-level resources

2026-06-16 15:30:22 +02:00

k8s-policy-pvc.yaml

…

k8s-policy-rc.yaml

genpolicy: ignore preemptionPolicy

2026-05-06 00:35:27 +00:00

k8s-policy-set-keys.rego

…

k8s-policy-set-keys.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

k8s-priority-class.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

kata-runtimeclass.yaml

…

lifecycle-events.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

limit-range.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

nginx-deployment.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

no-layer-image.yaml

runtime: DEFDISABLEBLOCK := true

2026-01-28 19:47:49 +01:00

numa-topology-gpu-test.yaml.in

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

numa-topology-test.yaml.in

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

nvidia-cuda-vectoradd.yaml.in

tests: nvidia: Always rely on the "kata" default runtime class

2025-12-12 16:31:42 +01:00

nvidia-nim-llama-3-1-8b-instruct-tee.yaml.in

tests: nvidia: Do not use elevated privileges

2026-04-01 10:23:26 -07:00

nvidia-nim-llama-3-1-8b-instruct.yaml.in

tests: nvidia: Do not use elevated privileges

2026-04-01 10:23:26 -07:00

nvidia-nim-llama-3-2-1b-instruct-service-tee.yaml.in

tests: nvidia: onboard NIM service test

2026-04-02 16:58:54 +02:00

nvidia-nim-llama-3-2-1b-instruct-service.yaml.in

tests: nvidia: onboard NIM service test

2026-04-02 16:58:54 +02:00

nvidia-nim-llama-3-2-nv-embedqa-1b-v2-tee.yaml.in

tests: nvidia: Do not use elevated privileges

2026-04-01 10:23:26 -07:00

nvidia-nim-llama-3-2-nv-embedqa-1b-v2.yaml.in

tests: nvidia: Do not use elevated privileges

2026-04-01 10:23:26 -07:00

pod-attestable-gpu.yaml.in

tests: Clean up superfluous GPU annotation

2026-02-09 11:28:24 -08:00

pod-attestable.yaml.in

tests: nvidia: cc: Add attestation test

2025-12-05 11:48:55 +01:00

pod-besteffort.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-block-pv.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-burstable.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

pod-caps.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-confidential-unencrypted.yaml

tests: k8s: confidential: Increase log_buf_len to 4M

2025-01-23 12:04:13 +01:00

pod-config.yaml.in

…

pod-configmap-volume.yaml

ci: Add integration tests for secret & configmap propagation

2026-02-14 08:56:21 +05:30

pod-configmap.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-cpu-defaults.yaml

tests: harden sandbox sizing manifests for k8s cpu workloads

2026-06-25 13:56:11 +02:00

pod-cpu.yaml

tests: harden sandbox sizing manifests for k8s cpu workloads

2026-06-25 13:56:11 +02:00

pod-custom-dns.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-empty-dir-fsgroup.yaml.in

tests: generate policy for pod-empty-dir-fsgroup

2026-04-01 10:23:26 -07:00

pod-empty-dir.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-env.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-file-volume.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-footloose.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-guaranteed.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

pod-guest-pull-in-trusted-storage.yaml.in

runtime-rs: size static sandboxes with overhead values

2026-06-25 13:56:11 +02:00

pod-hostname.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

pod-hostpath-kmsg.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

pod-http-liveness.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-hugepage.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

pod-istio.yaml

ci: Add test case for iptables, exercised via istio init container

2025-09-04 07:18:45 +02:00

pod-liveness.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-memory-limit.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

pod-nested-configmap-secret.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-number-cpu.yaml

tests: harden sandbox sizing manifests for k8s cpu workloads

2026-06-25 13:56:11 +02:00

pod-oom.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

pod-optional-empty-configmap.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

pod-optional-empty-secret.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

pod-privileged.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

pod-projected-volume.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-quota-deployment.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-readonly-volume.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-sandbox-cgroup.yaml

tests: Add regression test for sandbox_cgroup_only=false

2026-02-18 20:20:14 +01:00

pod-sandbox-vcpus-allocation.yaml

tests: harden sandbox sizing manifests for k8s cpu workloads

2026-06-25 13:56:11 +02:00

pod-sealed-secret-as-file.yaml

…

pod-sealed-secret.yaml

tests: Make editorconfig-checker happy

2026-02-10 21:58:28 +01:00

pod-seccomp.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-secret-env.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-secret.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-security-context.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-shared-volume.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-smb-volume.yaml

ci: Introduce smb server test

2026-04-23 21:04:46 -05:00

pod-sysctl.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-tcp-liveness.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pod-termination-log-fail.yaml

tests: add integration tests for termination log via GetDiagnosticData

2026-04-17 13:16:25 +02:00

pod-termination-log-success.yaml

tests: add integration tests for termination log via GetDiagnosticData

2026-04-17 13:16:25 +02:00

pod-trusted-ephemeral-data-storage.yaml

tests: Add test for trusted ephemeral data storage

2026-03-09 14:52:17 -05:00

pv-pod.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

pv-volume.yaml

…

redis-master-deployment.yaml

tests: use limits for Kata workload manifests

2026-06-19 09:38:15 -07:00

redis-master-service.yaml

…

replication-controller.yaml

tests: Remove terminationGracePeriod in manifests

2026-01-23 16:18:44 -08:00

resource-quota.yaml

…

smb-server.yaml

ci: Introduce smb server test

2026-04-23 21:04:46 -05:00

tests-namespace.yaml

…

volume-claim.yaml

…