Merge pull request #318 from andyzhangx/nonroot-container-test

test: run non-root container test
kubernetes-sigs · Jan 16, 2021 · 4e5f9a1 · 4e5f9a1
2 parents 10aa6c2 + 62d5932
commit 4e5f9a1
Show file tree

Hide file tree

Showing 6 changed files with 39 additions and 10 deletions.
diff --git a/Makefile b/Makefile
@@ -143,9 +143,7 @@ create-metrics-svc:
 
 .PHONY: create-example-deployment
 create-example-deployment:
-	kubectl apply -f deploy/example/storageclass-blobfuse.yaml
-	kubectl apply -f deploy/example/deployment.yaml
-	kubectl apply -f deploy/example/statefulset.yaml
+	./hack/verify-examples.sh
 
 .PHONY: delete-metrics-svc
 delete-metrics-svc:

diff --git a/deploy/example/statefulset-nonroot.yaml b/deploy/example/statefulset-nonroot.yaml
@@ -2,11 +2,11 @@
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
-  name: statefulset-blob
+  name: statefulset-blob-nonroot
   labels:
     app: nginx
 spec:
-  serviceName: statefulset-blob
+  serviceName: statefulset-blob-nonroot
   replicas: 1
   template:
     metadata:
@@ -23,9 +23,9 @@ spec:
         - name: statefulset-blob
           image: andyzhangx/ubuntu1604:nonroot
           command:
-            - "/bin/sh"
+            - "/bin/bash"
             - "-c"
-            - while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+            - set -euo pipefail; while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
           volumeMounts:
             - name: persistent-storage
               mountPath: /mnt/blob

diff --git a/deploy/example/statefulset.yaml b/deploy/example/statefulset.yaml
@@ -17,11 +17,11 @@ spec:
         "kubernetes.io/os": linux
       containers:
         - name: statefulset-blob
-          image: mcr.microsoft.com/oss/nginx/nginx:1.17.3-alpine
+          image: mcr.microsoft.com/oss/nginx/nginx:1.19.5
           command:
-            - "/bin/sh"
+            - "/bin/bash"
             - "-c"
-            - while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+            - set -euo pipefail; while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
           volumeMounts:
             - name: persistent-storage
               mountPath: /mnt/blob

diff --git a/hack/verify-examples.sh b/hack/verify-examples.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+# Copyright 2020 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -euo pipefail
+
+echo "begin to create deployment examples ..."
+kubectl apply -f deploy/example/storageclass-blobfuse.yaml
+kubectl apply -f deploy/example/deployment.yaml
+kubectl apply -f deploy/example/statefulset.yaml
+kubectl apply -f deploy/example/statefulset-nonroot.yaml
+
+echo "sleep 90s ..."
+sleep 90
+
+kubectl get pods --field-selector status.phase=Running | grep deployment-blob
+kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-0
+kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-nonroot-0
+
+echo "deployment examples running completed."
diff --git a/test/utils/check_driver_pods_restart.sh b/test/utils/check_driver_pods_restart.sh
diff --git a/test/utils/get_storage_account_secret_name.sh b/test/utils/get_storage_account_secret_name.sh