diff --git a/test/e2e/apparmor.go b/test/e2e/apparmor.go index 389d549045d..5bff1f974f9 100644 --- a/test/e2e/apparmor.go +++ b/test/e2e/apparmor.go @@ -26,13 +26,20 @@ import ( var _ = framework.KubeDescribe("AppArmor", func() { f := framework.NewDefaultFramework("apparmor") - BeforeEach(func() { - common.SkipIfAppArmorNotSupported() - common.LoadAppArmorProfiles(f) - }) + Context("load AppArmor profiles", func() { + BeforeEach(func() { + common.SkipIfAppArmorNotSupported() + common.LoadAppArmorProfiles(f) + }) + AfterEach(func() { + if !CurrentGinkgoTestDescription().Failed { + return + } + framework.LogFailedContainers(f.ClientSet, f.Namespace.Name, framework.Logf) + }) - It("should enforce an AppArmor profile", func() { - common.CreateAppArmorTestPod(f, true) - framework.LogFailedContainers(f.ClientSet, f.Namespace.Name, framework.Logf) + It("should enforce an AppArmor profile", func() { + common.CreateAppArmorTestPod(f, true) + }) }) }) diff --git a/test/e2e/common/apparmor.go b/test/e2e/common/apparmor.go index 68906cf70b8..f48488d3f9b 100644 --- a/test/e2e/common/apparmor.go +++ b/test/e2e/common/apparmor.go @@ -58,8 +58,9 @@ if touch %[1]s; then elif ! touch %[2]s; then echo "FAILURE: write to %[2]s should be allowed" exit 2 -elif ! grep "%[3]s" /proc/1/attr/current; then +elif ! grep "%[3]s" /proc/self/attr/current; then echo "FAILURE: not running with expected profile %[3]s" + echo "found: $(cat /proc/self/attr/current)" exit 3 fi`, appArmorDeniedPath, appArmorAllowedPath, appArmorProfilePrefix+f.Namespace.Name)