Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tests: add tests for systemd reading files labeled kubernetes_file_t #1116

Merged
merged 1 commit into from
Jan 10, 2022

Conversation

miabbott
Copy link
Member

Adds a test for the ability of systemd to read files
labeled with kubernetes_file_t.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418

@miabbott miabbott marked this pull request as draft July 15, 2021 20:58
@miabbott
Copy link
Member Author

This builds on #1064 and will require a new container-selinux that has a fix for BZ#1973418

@miabbott miabbott force-pushed the kube_envfile_test branch 2 times, most recently from 0586220 to 44fc622 Compare December 11, 2021 19:56
@miabbott miabbott marked this pull request as ready for review December 11, 2021 19:56
@miabbott
Copy link
Member Author

@dustymabe @mike-nguyen tagging you to pop this closer to the top of your queues

echo "$@" >&2
exit 1
}

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would add an additional check here to make sure the file at /etc/kubernetes/envfile has the selinux label we expect. Otherwise this test isn't really testing what we expect it to.

dustymabe
dustymabe previously approved these changes Jan 7, 2022
Copy link
Member

@dustymabe dustymabe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

one recommendation, otherwise LGTM

Adds a test for the ability of `systemd` to read files
labeled with `kubernetes_file_t`.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1973418
Copy link
Member

@dustymabe dustymabe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@miabbott miabbott enabled auto-merge (rebase) January 10, 2022 14:29
@miabbott miabbott merged commit 52d4ce5 into coreos:testing-devel Jan 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants