Capture better debug logs on AppArmor test failure

This commit is contained in:
Tim St. Clair 2017-05-31 12:58:43 -07:00
parent 7043372d05
commit 81c9181995
No known key found for this signature in database
GPG Key ID: 434D16BCEF479EAB
2 changed files with 15 additions and 7 deletions

View File

@ -26,13 +26,20 @@ import (
var _ = framework.KubeDescribe("AppArmor", func() {
f := framework.NewDefaultFramework("apparmor")
Context("load AppArmor profiles", func() {
BeforeEach(func() {
common.SkipIfAppArmorNotSupported()
common.LoadAppArmorProfiles(f)
})
AfterEach(func() {
if !CurrentGinkgoTestDescription().Failed {
return
}
framework.LogFailedContainers(f.ClientSet, f.Namespace.Name, framework.Logf)
})
It("should enforce an AppArmor profile", func() {
common.CreateAppArmorTestPod(f, true)
framework.LogFailedContainers(f.ClientSet, f.Namespace.Name, framework.Logf)
})
})
})

View File

@ -60,6 +60,7 @@ elif ! touch %[2]s; then
exit 2
elif ! grep "%[3]s" /proc/1/attr/current; then
echo "FAILURE: not running with expected profile %[3]s"
echo "found: $(cat /proc/1/attr/current)"
exit 3
fi`, appArmorDeniedPath, appArmorAllowedPath, appArmorProfilePrefix+f.Namespace.Name)