github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-07 11:13:48 +00:00
Code Issues Projects Releases Wiki Activity

make service_account e2e test verify that RootCA cert file exists

Browse Source
This commit is contained in:
Mike Danese 2015-06-27 14:55:48 -07:00
parent 1c83591c3a
commit 595220d1a7
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
test/e2e/service_accounts.go
View File

@ -37,6 +37,7 @@ var _ = Describe("ServiceAccounts", func() {
It("should mount an API token into pods", func() { It("should mount an API token into pods", func() {
var tokenName string var tokenName string
var tokenContent string var tokenContent string
var rootCAContent string
// Standard get, update retry loop // Standard get, update retry loop
expectNoError(wait.Poll(time.Millisecond*500, time.Second*10, func() (bool, error) { expectNoError(wait.Poll(time.Millisecond*500, time.Second*10, func() (bool, error) {
@ -54,6 +55,7 @@ var _ = Describe("ServiceAccounts", func() {
} }
tokenName = secrets.Items[0].Name tokenName = secrets.Items[0].Name
tokenContent = string(secrets.Items[0].Data[api.ServiceAccountTokenKey]) tokenContent = string(secrets.Items[0].Data[api.ServiceAccountTokenKey])
rootCAContent = string(secrets.Items[0].Data[api.ServiceAccountRootCAKey])
return true, nil return true, nil
})) }))
@ -64,12 +66,19 @@ var _ = Describe("ServiceAccounts", func() {
Spec: api.PodSpec{ Spec: api.PodSpec{
Containers: []api.Container{ Containers: []api.Container{
{ {
Name: "service-account-test", Name: "token-test",
Image: "gcr.io/google_containers/mounttest:0.2", Image: "gcr.io/google_containers/mounttest:0.2",
Args: []string{ Args: []string{
fmt.Sprintf("--file_content=%s/%s", serviceaccount.DefaultAPITokenMountPath, api.ServiceAccountTokenKey), fmt.Sprintf("--file_content=%s/%s", serviceaccount.DefaultAPITokenMountPath, api.ServiceAccountTokenKey),
}, },
}, },
{
Name: "root-ca-test",
Image: "gcr.io/google_containers/mounttest:0.2",
Args: []string{
fmt.Sprintf("--file_content=%s/%s", serviceaccount.DefaultAPITokenMountPath, api.ServiceAccountRootCAKey),
},
},
}, },
RestartPolicy: api.RestartPolicyNever, RestartPolicy: api.RestartPolicyNever,
}, },
@ -78,5 +87,8 @@ var _ = Describe("ServiceAccounts", func() {
f.TestContainerOutput("consume service account token", pod, 0, []string{ f.TestContainerOutput("consume service account token", pod, 0, []string{
fmt.Sprintf(`content of file "%s/%s": %s`, serviceaccount.DefaultAPITokenMountPath, api.ServiceAccountTokenKey, tokenContent), fmt.Sprintf(`content of file "%s/%s": %s`, serviceaccount.DefaultAPITokenMountPath, api.ServiceAccountTokenKey, tokenContent),
}) })
f.TestContainerOutput("consume service account root CA", pod, 1, []string{
fmt.Sprintf(`content of file "%s/%s": %s`, serviceaccount.DefaultAPITokenMountPath, api.ServiceAccountRootCAKey, rootCAContent),
})
}) })
}) })