mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-22 19:31:44 +00:00
Merge pull request #131240 from jsafrane/selinux-tests-tag
Tag SELinux tests that require SELinux warning controller
This commit is contained in:
commit
b15dfce6cb
@ -460,7 +460,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
secondPodFailureEvent string
|
secondPodFailureEvent string
|
||||||
expectNodeIncreases sets.Set[string] // For testing kubelet metrics
|
expectNodeIncreases sets.Set[string] // For testing kubelet metrics
|
||||||
expectControllerConflictProperty string // For testing SELinuxWarningController metrics + events
|
expectControllerConflictProperty string // For testing SELinuxWarningController metrics + events
|
||||||
testTags []interface{}
|
testTags []interface{} // SELinuxMountReadWriteOncePod and SELinuxChangePolicy are always added automatically
|
||||||
}{
|
}{
|
||||||
{
|
{
|
||||||
name: "warning is not bumped on two Pods with the same context on RWO volume",
|
name: "warning is not bumped on two Pods with the same context on RWO volume",
|
||||||
@ -470,7 +470,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
volumeMode: v1.ReadWriteOnce,
|
volumeMode: v1.ReadWriteOnce,
|
||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), feature.SELinuxMountReadWriteOncePodOnly},
|
testTags: []interface{}{feature.SELinuxMountReadWriteOncePodOnly},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "warning is bumped on two Pods with a different context on RWO volume",
|
name: "warning is bumped on two Pods with a different context on RWO volume",
|
||||||
@ -481,7 +481,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_warnings_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_warnings_total"),
|
||||||
expectControllerConflictProperty: "SELinuxLabel",
|
expectControllerConflictProperty: "SELinuxLabel",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), feature.SELinuxMountReadWriteOncePodOnly},
|
testTags: []interface{}{feature.SELinuxMountReadWriteOncePodOnly},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "warning is bumped on two Pods with different policies on RWO volume",
|
name: "warning is bumped on two Pods with different policies on RWO volume",
|
||||||
@ -494,7 +494,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_warnings_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_warnings_total"),
|
||||||
expectControllerConflictProperty: "SELinuxChangePolicy",
|
expectControllerConflictProperty: "SELinuxChangePolicy",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), feature.SELinuxMountReadWriteOncePodOnly},
|
testTags: []interface{}{feature.SELinuxMountReadWriteOncePodOnly},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "warning is not bumped on two Pods with Recursive policy and a different context on RWO volume",
|
name: "warning is not bumped on two Pods with Recursive policy and a different context on RWO volume",
|
||||||
@ -507,7 +507,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
||||||
expectControllerConflictProperty: "", /* SELinuxController does not emit any warning either */
|
expectControllerConflictProperty: "", /* SELinuxController does not emit any warning either */
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxChangePolicy), feature.SELinuxMountReadWriteOncePodOnly},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxChangePolicy), feature.SELinuxMountReadWriteOncePodOnly},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is not bumped on two Pods with the same context on RWO volume and SELinuxMount enabled",
|
name: "error is not bumped on two Pods with the same context on RWO volume and SELinuxMount enabled",
|
||||||
@ -517,7 +517,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
volumeMode: v1.ReadWriteOnce,
|
volumeMode: v1.ReadWriteOnce,
|
||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is bumped on two Pods with a different context on RWO volume and SELinuxMount enabled",
|
name: "error is bumped on two Pods with a different context on RWO volume and SELinuxMount enabled",
|
||||||
@ -529,7 +529,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: false,
|
waitForSecondPodStart: false,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
||||||
expectControllerConflictProperty: "SELinuxLabel",
|
expectControllerConflictProperty: "SELinuxLabel",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is bumped on two Pods with a different policy on RWO volume and SELinuxMount enabled (nil + Recursive)",
|
name: "error is bumped on two Pods with a different policy on RWO volume and SELinuxMount enabled (nil + Recursive)",
|
||||||
@ -543,7 +543,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: false,
|
waitForSecondPodStart: false,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
||||||
expectControllerConflictProperty: "SELinuxChangePolicy",
|
expectControllerConflictProperty: "SELinuxChangePolicy",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is bumped on two Pods with a different policy on RWO volume and SELinuxMount enabled (Recursive + nil)",
|
name: "error is bumped on two Pods with a different policy on RWO volume and SELinuxMount enabled (Recursive + nil)",
|
||||||
@ -557,7 +557,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: false,
|
waitForSecondPodStart: false,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
||||||
expectControllerConflictProperty: "SELinuxChangePolicy",
|
expectControllerConflictProperty: "SELinuxChangePolicy",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is bumped on two Pods with a different policy on RWO volume and SELinuxMount enabled (Recursive + MountOption)",
|
name: "error is bumped on two Pods with a different policy on RWO volume and SELinuxMount enabled (Recursive + MountOption)",
|
||||||
@ -571,7 +571,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: false,
|
waitForSecondPodStart: false,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
||||||
expectControllerConflictProperty: "SELinuxChangePolicy",
|
expectControllerConflictProperty: "SELinuxChangePolicy",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is bumped on two Pods with a different context on RWX volume and SELinuxMount enabled",
|
name: "error is bumped on two Pods with a different context on RWX volume and SELinuxMount enabled",
|
||||||
@ -583,7 +583,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: false,
|
waitForSecondPodStart: false,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
||||||
expectControllerConflictProperty: "SELinuxLabel",
|
expectControllerConflictProperty: "SELinuxLabel",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is not bumped on two Pods with Recursive policy and a different context on RWX volume",
|
name: "error is not bumped on two Pods with Recursive policy and a different context on RWX volume",
|
||||||
@ -596,7 +596,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
||||||
expectControllerConflictProperty: "", /* SELinuxController does not emit any warning either */
|
expectControllerConflictProperty: "", /* SELinuxController does not emit any warning either */
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxChangePolicy), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is not bumped on two Pods with a different policy RWX volume (nil + MountOption)",
|
name: "error is not bumped on two Pods with a different policy RWX volume (nil + MountOption)",
|
||||||
@ -608,7 +608,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
volumeMode: v1.ReadWriteMany,
|
volumeMode: v1.ReadWriteMany,
|
||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxChangePolicy), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is not bumped on two Pods with a different policy RWX volume (MountOption + MountOption)",
|
name: "error is not bumped on two Pods with a different policy RWX volume (MountOption + MountOption)",
|
||||||
@ -620,7 +620,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
volumeMode: v1.ReadWriteMany,
|
volumeMode: v1.ReadWriteMany,
|
||||||
waitForSecondPodStart: true,
|
waitForSecondPodStart: true,
|
||||||
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
expectNodeIncreases: sets.New[string]( /* no metric is increased, admitted_total was already increased when the first pod started */ ),
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxChangePolicy), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "error is bumped on two Pods with a different context on RWOP volume",
|
name: "error is bumped on two Pods with a different context on RWOP volume",
|
||||||
@ -646,7 +646,7 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
waitForSecondPodStart: false,
|
waitForSecondPodStart: false,
|
||||||
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
expectNodeIncreases: sets.New[string]("volume_manager_selinux_volume_context_mismatch_errors_total"),
|
||||||
expectControllerConflictProperty: "SELinuxLabel",
|
expectControllerConflictProperty: "SELinuxLabel",
|
||||||
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod), framework.WithFeatureGate(features.SELinuxMount)},
|
testTags: []interface{}{framework.WithFeatureGate(features.SELinuxMount)},
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
for _, t := range tests {
|
for _, t := range tests {
|
||||||
@ -731,6 +731,8 @@ var _ = utils.SIGDescribe("CSI Mock selinux on mount metrics and SELinuxWarningC
|
|||||||
args := []interface{}{
|
args := []interface{}{
|
||||||
t.name,
|
t.name,
|
||||||
testFunc,
|
testFunc,
|
||||||
|
framework.WithFeatureGate(features.SELinuxMountReadWriteOncePod),
|
||||||
|
framework.WithFeatureGate(features.SELinuxChangePolicy),
|
||||||
}
|
}
|
||||||
args = append(args, t.testTags...)
|
args = append(args, t.testTags...)
|
||||||
framework.It(args...)
|
framework.It(args...)
|
||||||
|
Loading…
Reference in New Issue
Block a user