Skip to content

fix: harden test pods and make kube-linter informational#7

Merged
disentangle-network merged 1 commit intomainfrom
fix/test-pod-security
Feb 20, 2026
Merged

fix: harden test pods and make kube-linter informational#7
disentangle-network merged 1 commit intomainfrom
fix/test-pod-security

Conversation

@disentangle-network
Copy link
Owner

Summary

  • Pin alpine/curl to 8.12.1 (resolves latest tag kube-linter violation)
  • Add securityContext to test pods (runAsNonRoot, drop ALL capabilities)
  • Add resource requests/limits to ephemeral test pods
  • Make kube-linter non-blocking (test pods trigger inapplicable checks like liveness probes, node affinity)
  • Update golden files to match

Test plan

  • Integration tests pass (kind cluster deployment)
  • Nightly regression passes (all 8 jobs green)

- Pin alpine/curl to 8.12.1 (removes latest tag violation)
- Add securityContext (runAsNonRoot, drop ALL capabilities)
- Add resource requests/limits to test pods
- Make kube-linter non-blocking (test pods trigger inapplicable checks like liveness probes)
- Update golden files
@disentangle-network disentangle-network merged commit 6f26a7f into main Feb 20, 2026
8 checks passed
@disentangle-network disentangle-network deleted the fix/test-pod-security branch February 20, 2026 23:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants