mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-07 10:45:21 +00:00
6d27459da8
The genpolicy guest-pull check now fails closed when an image carries supplemental groups that containerd won't reproduce while pulling the layers inside the guest, and quay.io/prometheus/busybox:latest happens to ship gid 10 (wheel). pod-number-cpu.yaml was simply missed when the other busybox manifests got their securityContext, so genpolicy bails out on the expected/actual gid mismatch. Let's declare supplementalGroups: [10] explicitly, just like we already do for the other busybox-based pods, so the generated policy lines up with what containerd actually applies. Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com> Assisted-by: Cursor <cursoragent@cursor.com>
Kata Containers Tests
This directory contains various types of tests for testing the Kata Containers repository.
Test Content
We provide several tests to ensure Kata-Containers run on different scenarios and with different container managers.
- Integration tests to ensure compatibility with:
- Stability tests
- Functional
GitHub Actions
Kata Containers uses GitHub Actions in the Kata Containers repository.