mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-17 15:50:10 +00:00
Verify that AppArmor pod is colocated with the loader
This commit is contained in:
parent
13558e3fe7
commit
7d180ce009
@ -24,6 +24,8 @@ import (
|
|||||||
"k8s.io/apimachinery/pkg/labels"
|
"k8s.io/apimachinery/pkg/labels"
|
||||||
"k8s.io/kubernetes/pkg/security/apparmor"
|
"k8s.io/kubernetes/pkg/security/apparmor"
|
||||||
"k8s.io/kubernetes/test/e2e/framework"
|
"k8s.io/kubernetes/test/e2e/framework"
|
||||||
|
|
||||||
|
. "github.com/onsi/gomega"
|
||||||
)
|
)
|
||||||
|
|
||||||
const (
|
const (
|
||||||
@ -109,11 +111,18 @@ done`, testCmd)
|
|||||||
pod = f.PodClient().Create(pod)
|
pod = f.PodClient().Create(pod)
|
||||||
framework.ExpectNoError(framework.WaitForPodSuccessInNamespace(
|
framework.ExpectNoError(framework.WaitForPodSuccessInNamespace(
|
||||||
f.ClientSet, pod.Name, f.Namespace.Name))
|
f.ClientSet, pod.Name, f.Namespace.Name))
|
||||||
|
var err error
|
||||||
|
pod, err = f.PodClient().Get(pod.Name, metav1.GetOptions{})
|
||||||
|
framework.ExpectNoError(err)
|
||||||
} else {
|
} else {
|
||||||
pod = f.PodClient().CreateSync(pod)
|
pod = f.PodClient().CreateSync(pod)
|
||||||
framework.ExpectNoError(f.WaitForPodReady(pod.Name))
|
framework.ExpectNoError(f.WaitForPodReady(pod.Name))
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Verify Pod affinity colocated the Pods.
|
||||||
|
loader := getRunningLoaderPod(f)
|
||||||
|
Expect(pod.Spec.NodeName).To(Equal(loader.Spec.NodeName))
|
||||||
|
|
||||||
return pod
|
return pod
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -211,8 +220,14 @@ func createAppArmorProfileLoader(f *framework.Framework) {
|
|||||||
framework.ExpectNoError(err, "Failed to create apparmor-loader ReplicationController")
|
framework.ExpectNoError(err, "Failed to create apparmor-loader ReplicationController")
|
||||||
|
|
||||||
// Wait for loader to be ready.
|
// Wait for loader to be ready.
|
||||||
|
getRunningLoaderPod(f)
|
||||||
|
}
|
||||||
|
|
||||||
|
func getRunningLoaderPod(f *framework.Framework) *api.Pod {
|
||||||
label := labels.SelectorFromSet(labels.Set(map[string]string{loaderLabelKey: loaderLabelValue}))
|
label := labels.SelectorFromSet(labels.Set(map[string]string{loaderLabelKey: loaderLabelValue}))
|
||||||
pods, err := framework.WaitForPodsWithLabelScheduled(f.ClientSet, f.Namespace.Name, label)
|
pods, err := framework.WaitForPodsWithLabelScheduled(f.ClientSet, f.Namespace.Name, label)
|
||||||
framework.ExpectNoError(err, "Failed to schedule apparmor-loader Pod")
|
framework.ExpectNoError(err, "Failed to schedule apparmor-loader Pod")
|
||||||
framework.ExpectNoError(framework.WaitForPodRunningInNamespace(f.ClientSet, &pods.Items[0]), "Failed to run apparmor-loader Pod")
|
pod := &pods.Items[0]
|
||||||
|
framework.ExpectNoError(framework.WaitForPodRunningInNamespace(f.ClientSet, pod), "Failed to run apparmor-loader Pod")
|
||||||
|
return pod
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user