github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-07 11:13:48 +00:00
Code Issues Projects Releases Wiki Activity

security_context_test.go(TestVerifyRunAsNonRoot): remove unused variables.

Browse Source
This commit is contained in:
Slava Semushin 2017-11-29 16:10:07 +01:00
parent 2aeace402a
commit 0512f2b448
1 changed files with 11 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
pkg/kubelet/kuberuntime/security_context_test.go
View File

@ -47,35 +47,29 @@ func TestVerifyRunAsNonRoot(t *testing.T) {
rootUser := int64(0) rootUser := int64(0)
runAsNonRootTrue := true runAsNonRootTrue := true
runAsNonRootFalse := false runAsNonRootFalse := false
imageRootUser := int64(0)
imageNonRootUser := int64(123)
for _, test := range []struct { for _, test := range []struct {
desc string desc string
sc *v1.SecurityContext sc *v1.SecurityContext
imageUser int64 fail bool
fail bool
}{ }{
{ {
desc: "Pass if SecurityContext is not set", desc: "Pass if SecurityContext is not set",
sc: nil, sc: nil,
imageUser: imageRootUser, fail: false,
fail: false,
}, },
{ {
desc: "Pass if RunAsNonRoot is not set", desc: "Pass if RunAsNonRoot is not set",
sc: &v1.SecurityContext{ sc: &v1.SecurityContext{
RunAsUser: &rootUser, RunAsUser: &rootUser,
}, },
imageUser: imageRootUser, fail: false,
fail: false,
}, },
{ {
desc: "Pass if RunAsNonRoot is false (image user is root)", desc: "Pass if RunAsNonRoot is false (image user is root)",
sc: &v1.SecurityContext{ sc: &v1.SecurityContext{
RunAsNonRoot: &runAsNonRootFalse, RunAsNonRoot: &runAsNonRootFalse,
}, },
imageUser: imageRootUser, fail: false,
fail: false,
}, },
{ {
desc: "Pass if RunAsNonRoot is false (RunAsUser is root)", desc: "Pass if RunAsNonRoot is false (RunAsUser is root)",
@ -83,8 +77,7 @@ func TestVerifyRunAsNonRoot(t *testing.T) {
RunAsNonRoot: &runAsNonRootFalse, RunAsNonRoot: &runAsNonRootFalse,
RunAsUser: &rootUser, RunAsUser: &rootUser,
}, },
imageUser: imageNonRootUser, fail: false,
fail: false,
}, },
{ {
desc: "Fail if container's RunAsUser is root and RunAsNonRoot is true", desc: "Fail if container's RunAsUser is root and RunAsNonRoot is true",
@ -92,16 +85,14 @@ func TestVerifyRunAsNonRoot(t *testing.T) {
RunAsNonRoot: &runAsNonRootTrue, RunAsNonRoot: &runAsNonRootTrue,
RunAsUser: &rootUser, RunAsUser: &rootUser,
}, },
imageUser: imageNonRootUser, fail: true,
fail: true,
}, },
{ {
desc: "Fail if image's user is root and RunAsNonRoot is true", desc: "Fail if image's user is root and RunAsNonRoot is true",
sc: &v1.SecurityContext{ sc: &v1.SecurityContext{
RunAsNonRoot: &runAsNonRootTrue, RunAsNonRoot: &runAsNonRootTrue,
}, },
imageUser: imageRootUser, fail: true,
fail: true,
}, },
} { } {
pod.Spec.Containers[0].SecurityContext = test.sc pod.Spec.Containers[0].SecurityContext = test.sc