test/e2e/framework: configure pod security admission level for e2e tests

This commit is contained in:
Sergiusz Urbaniak
2022-01-30 13:37:24 +01:00
parent e06e6771ef
commit 373c08e0c7
123 changed files with 297 additions and 4 deletions

View File

@@ -74,6 +74,7 @@ import (
testutils "k8s.io/kubernetes/test/utils"
"k8s.io/kubernetes/test/utils/crd"
imageutils "k8s.io/kubernetes/test/utils/image"
admissionapi "k8s.io/pod-security-admission/api"
uexec "k8s.io/utils/exec"
"k8s.io/utils/pointer"
@@ -225,6 +226,7 @@ func runKubectlRetryOrDie(ns string, args ...string) string {
var _ = SIGDescribe("Kubectl client", func() {
defer ginkgo.GinkgoRecover()
f := framework.NewDefaultFramework("kubectl")
f.NamespacePodSecurityEnforceLevel = admissionapi.LevelBaseline
// Reusable cluster state function. This won't be adversely affected by lazy initialization of framework.
clusterState := func() *framework.ClusterVerification {

View File

@@ -42,6 +42,7 @@ import (
e2ewebsocket "k8s.io/kubernetes/test/e2e/framework/websocket"
testutils "k8s.io/kubernetes/test/utils"
imageutils "k8s.io/kubernetes/test/utils/image"
admissionapi "k8s.io/pod-security-admission/api"
"github.com/onsi/ginkgo"
"github.com/onsi/gomega"
@@ -448,6 +449,7 @@ func doTestOverWebSockets(bindAddress string, f *framework.Framework) {
var _ = SIGDescribe("Kubectl Port forwarding", func() {
f := framework.NewDefaultFramework("port-forwarding")
f.NamespacePodSecurityEnforceLevel = admissionapi.LevelBaseline
ginkgo.Describe("With a server listening on 0.0.0.0", func() {
ginkgo.Describe("that expects a client request", func() {