mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-03 17:30:00 +00:00
Capture better debug logs on AppArmor test failure
This commit is contained in:
parent
7043372d05
commit
81c9181995
@ -26,13 +26,20 @@ import (
|
|||||||
var _ = framework.KubeDescribe("AppArmor", func() {
|
var _ = framework.KubeDescribe("AppArmor", func() {
|
||||||
f := framework.NewDefaultFramework("apparmor")
|
f := framework.NewDefaultFramework("apparmor")
|
||||||
|
|
||||||
|
Context("load AppArmor profiles", func() {
|
||||||
BeforeEach(func() {
|
BeforeEach(func() {
|
||||||
common.SkipIfAppArmorNotSupported()
|
common.SkipIfAppArmorNotSupported()
|
||||||
common.LoadAppArmorProfiles(f)
|
common.LoadAppArmorProfiles(f)
|
||||||
})
|
})
|
||||||
|
AfterEach(func() {
|
||||||
|
if !CurrentGinkgoTestDescription().Failed {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
framework.LogFailedContainers(f.ClientSet, f.Namespace.Name, framework.Logf)
|
||||||
|
})
|
||||||
|
|
||||||
It("should enforce an AppArmor profile", func() {
|
It("should enforce an AppArmor profile", func() {
|
||||||
common.CreateAppArmorTestPod(f, true)
|
common.CreateAppArmorTestPod(f, true)
|
||||||
framework.LogFailedContainers(f.ClientSet, f.Namespace.Name, framework.Logf)
|
})
|
||||||
})
|
})
|
||||||
})
|
})
|
||||||
|
@ -60,6 +60,7 @@ elif ! touch %[2]s; then
|
|||||||
exit 2
|
exit 2
|
||||||
elif ! grep "%[3]s" /proc/1/attr/current; then
|
elif ! grep "%[3]s" /proc/1/attr/current; then
|
||||||
echo "FAILURE: not running with expected profile %[3]s"
|
echo "FAILURE: not running with expected profile %[3]s"
|
||||||
|
echo "found: $(cat /proc/1/attr/current)"
|
||||||
exit 3
|
exit 3
|
||||||
fi`, appArmorDeniedPath, appArmorAllowedPath, appArmorProfilePrefix+f.Namespace.Name)
|
fi`, appArmorDeniedPath, appArmorAllowedPath, appArmorProfilePrefix+f.Namespace.Name)
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user