mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-21 02:41:25 +00:00
Add node e2e tests for runAsUser
This commit is contained in:
parent
b353792f9c
commit
00eeb7f53a
@ -274,4 +274,45 @@ var _ = framework.KubeDescribe("Security Context", func() {
|
|||||||
})
|
})
|
||||||
})
|
})
|
||||||
|
|
||||||
|
Context("When creating a container with runAsUser", func() {
|
||||||
|
makeUserPod := func(podName, image string, command []string, userid int64) *v1.Pod {
|
||||||
|
return &v1.Pod{
|
||||||
|
ObjectMeta: metav1.ObjectMeta{
|
||||||
|
Name: podName,
|
||||||
|
},
|
||||||
|
Spec: v1.PodSpec{
|
||||||
|
RestartPolicy: v1.RestartPolicyNever,
|
||||||
|
Containers: []v1.Container{
|
||||||
|
{
|
||||||
|
Image: image,
|
||||||
|
Name: podName,
|
||||||
|
Command: command,
|
||||||
|
SecurityContext: &v1.SecurityContext{
|
||||||
|
RunAsUser: &userid,
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
}
|
||||||
|
}
|
||||||
|
createAndWaitUserPod := func(userid int64) {
|
||||||
|
podName := fmt.Sprintf("busybox-user-%d-%s", userid, uuid.NewUUID())
|
||||||
|
podClient.Create(makeUserPod(podName,
|
||||||
|
"gcr.io/google_containers/busybox:1.24",
|
||||||
|
[]string{"sh", "-c", fmt.Sprintf("test $(id -u) -eq %d", userid)},
|
||||||
|
userid,
|
||||||
|
))
|
||||||
|
|
||||||
|
podClient.WaitForSuccess(podName, framework.PodStartTimeout)
|
||||||
|
}
|
||||||
|
|
||||||
|
It("should run the container with uid 65534", func() {
|
||||||
|
createAndWaitUserPod(65534)
|
||||||
|
})
|
||||||
|
|
||||||
|
It("should run the container with uid 0", func() {
|
||||||
|
createAndWaitUserPod(0)
|
||||||
|
})
|
||||||
|
|
||||||
|
})
|
||||||
})
|
})
|
||||||
|
Loading…
Reference in New Issue
Block a user