diff --git a/test/images/ipc-utils/README.md b/test/images/ipc-utils/README.md new file mode 100644 index 00000000000..c5b1e5f5fa7 --- /dev/null +++ b/test/images/ipc-utils/README.md @@ -0,0 +1,13 @@ +# ipc-utils + +This container will be used to exercise the HostIPC functionality in +e2e-node tests. + +The version of `ipcs` shipped in busybox performs operations that get +blocked by SELinux on hosts where it is enabled. The version of `ipcs` +in util-linux does not perform those operations, rather it checks +whether the /proc files it needs are available and proceeds to read +from them directly. + +Using `ipcs` from util-linux makes these tests pass, even when running +under SELinux enabled, so let's use them here. \ No newline at end of file diff --git a/test/images/jessie-dnsutils/README.md b/test/images/jessie-dnsutils/README.md new file mode 100644 index 00000000000..b0c433127e9 --- /dev/null +++ b/test/images/jessie-dnsutils/README.md @@ -0,0 +1,4 @@ +# jessie-dnsutils + +DNS utils but implemented in a different OS to have some basic check across OSes. +See issue #10161 for original issue and discussion. \ No newline at end of file diff --git a/test/images/kitten/README.md b/test/images/kitten/README.md new file mode 100644 index 00000000000..e69de29bb2d diff --git a/test/images/metadata-concealment/README.md b/test/images/metadata-concealment/README.md new file mode 100644 index 00000000000..fc1055659a5 --- /dev/null +++ b/test/images/metadata-concealment/README.md @@ -0,0 +1,5 @@ +# metadata-concealment + +Runs various checks against the GCE metadata API. If the checks pass, the job is run to completion. It fails and stops at the first error encountered. + +Only valid if using the GCE provider. \ No newline at end of file diff --git a/test/images/nautilus/README.md b/test/images/nautilus/README.md new file mode 100644 index 00000000000..049d788a855 --- /dev/null +++ b/test/images/nautilus/README.md @@ -0,0 +1,6 @@ +# nautilus + +A basic file server that serves an image. The underlying base image does most +of the work but we load a specific image when building this one so that we +can test that a pod's image really changed. Often used to contrast against +the kitten image which loads/serves a different image. \ No newline at end of file diff --git a/test/images/nonewprivs/README.md b/test/images/nonewprivs/README.md new file mode 100644 index 00000000000..996d571a470 --- /dev/null +++ b/test/images/nonewprivs/README.md @@ -0,0 +1,3 @@ +# nonewprivs + +A simple go app that prints the UID of the process running to test security context features. \ No newline at end of file diff --git a/test/images/nonroot/README.md b/test/images/nonroot/README.md new file mode 100644 index 00000000000..44bbd3a33fd --- /dev/null +++ b/test/images/nonroot/README.md @@ -0,0 +1,3 @@ +# nonroot + +A trivial image that just builds in the default user ID to confirm how it interacts with other security settings. \ No newline at end of file diff --git a/test/images/redis/README.md b/test/images/redis/README.md new file mode 100644 index 00000000000..9a27e5ff1bf --- /dev/null +++ b/test/images/redis/README.md @@ -0,0 +1,3 @@ +# redis + +Image to run Redis for our guestbook application. \ No newline at end of file