File tree 8 files changed +59
-5
lines changed
ignore-tests/parallel/1-064_validate_security_contexts
parallel/1-064_validate_security_contexts
sequential/1-107_validate_redis_ssc
8 files changed +59
-5
lines changed Original file line number Diff line number Diff line change @@ -6,7 +6,7 @@ toolchain go1.22.5
6
6
7
7
require (
8
8
github.com/argoproj-labs/argo-rollouts-manager v0.0.6-0.20250212035559-38faac6d4127
9
- github.com/argoproj-labs/argocd-operator v0.13.0-rc1.0.20250219054436-548f278bff7e
9
+ github.com/argoproj-labs/argocd-operator v0.13.0-rc1.0.20250220070432-0ffa69ea6872
10
10
github.com/coreos/prometheus-operator v0.40.0
11
11
github.com/go-logr/logr v1.4.2
12
12
github.com/google/go-cmp v0.6.0
Original file line number Diff line number Diff line change @@ -622,8 +622,8 @@ github.com/apache/thrift v0.13.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb
622
622
github.com/apache/thrift v0.16.0 /go.mod h1:PHK3hniurgQaNMZYaCLEqXKsYK8upmhPbmdP2FXSqgU =
623
623
github.com/argoproj-labs/argo-rollouts-manager v0.0.6-0.20250212035559-38faac6d4127 h1:chOb5NQfFybnoDHwdkjhC2Y9YgsSjNxgXIKLEGBgWho =
624
624
github.com/argoproj-labs/argo-rollouts-manager v0.0.6-0.20250212035559-38faac6d4127 /go.mod h1:hX18xfJcnomx/k6urvDp/7+Zwa/y5aF1Mlhz5a2en4k =
625
- github.com/argoproj-labs/argocd-operator v0.13.0-rc1.0.20250219054436-548f278bff7e h1:55snlduYkXFPAeYpXjJS52kvXLnEsfSOB+XaUe0Ga+Y =
626
- github.com/argoproj-labs/argocd-operator v0.13.0-rc1.0.20250219054436-548f278bff7e /go.mod h1:FoPi0HK2noC0QQn/T5UTtD3/845yHhpdd0I6rrsW+2U =
625
+ github.com/argoproj-labs/argocd-operator v0.13.0-rc1.0.20250220070432-0ffa69ea6872 h1:SpoL21jH0/6mMWgz1pA4pZ+J4Og0PjYXEJIZP1jFyr8 =
626
+ github.com/argoproj-labs/argocd-operator v0.13.0-rc1.0.20250220070432-0ffa69ea6872 /go.mod h1:FoPi0HK2noC0QQn/T5UTtD3/845yHhpdd0I6rrsW+2U =
627
627
github.com/argoproj/argo-cd/v2 v2.12.3 h1:Bi4QahHTnKl3esU5MplQP1wraGhaTpvgAV4GsMqc3Zc =
628
628
github.com/argoproj/argo-cd/v2 v2.12.3 /go.mod h1:2fh6q4NX/cylbH6Ktx/KjJsX7sOBwF3jbGnO0IZyNOc =
629
629
github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e /go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o =
Original file line number Diff line number Diff line change 62
62
allowPrivilegeEscalation : false
63
63
# readOnlyRootFilesystem: true
64
64
runAsNonRoot : true
65
- runAsUser : 999
65
+ # random runAsUser in openshift
66
+ # runAsUser: 999
66
67
---
67
68
apiVersion : apps/v1
68
69
kind : Deployment
Original file line number Diff line number Diff line change 62
62
allowPrivilegeEscalation : false
63
63
# readOnlyRootFilesystem: true
64
64
runAsNonRoot : true
65
- runAsUser : 999
65
+ # random runAsUser in openshift
66
+ # runAsUser: 999
66
67
---
67
68
apiVersion : apps/v1
68
69
kind : Deployment
Original file line number Diff line number Diff line change
1
+ apiVersion : kuttl.dev/v1beta1
2
+ kind : TestAssert
3
+ timeout : 300
4
+ ---
5
+ apiVersion : argoproj.io/v1alpha1
6
+ kind : ArgoCD
7
+ metadata :
8
+ name : argocd
9
+ labels :
10
+ example : basic
11
+ spec :
12
+ ha :
13
+ enabled : true
14
+ status :
15
+ redis : Running
Original file line number Diff line number Diff line change
1
+ apiVersion : argoproj.io/v1alpha1
2
+ kind : ArgoCD
3
+ metadata :
4
+ name : argocd
5
+ labels :
6
+ example : basic
7
+ spec :
8
+ ha :
9
+ enabled : true
Original file line number Diff line number Diff line change
1
+ apiVersion : kuttl.dev/v1beta1
2
+ kind : TestStep
3
+ commands :
4
+ - script : |
5
+ pod_name=$(oc get pod -l app.kubernetes.io/name=argocd-redis-ha -n $NAMESPACE -o jsonpath="{.items[0].metadata.name}")
6
+ actual_scc=$(oc get pod $pod_name -n $NAMESPACE -o jsonpath="{.metadata.annotations.openshift\.io/scc}")
7
+ expected_scc="restricted-v2"
8
+
9
+ if [[ "$actual_scc" != "$expected_scc" ]]; then
10
+ echo "SCC check failed: Expected '$expected_scc' but got '$actual_scc'"
11
+ exit 1
12
+ else
13
+ echo "SCC check passed: '$actual_scc'"
14
+ fi
Original file line number Diff line number Diff line change
1
+ apiVersion : kuttl.dev/v1beta1
2
+ kind : TestStep
3
+ commands :
4
+ - script : |
5
+ pod_name=$(oc get pod -l app.kubernetes.io/name=argocd-redis-ha-haproxy -n $NAMESPACE -o jsonpath="{.items[0].metadata.name}")
6
+ actual_scc=$(oc get pod $pod_name -n $NAMESPACE -o jsonpath="{.metadata.annotations.openshift\.io/scc}")
7
+ expected_scc="restricted-v2"
8
+
9
+ if [[ "$actual_scc" != "$expected_scc" ]]; then
10
+ echo "SCC check failed: Expected '$expected_scc' but got '$actual_scc'"
11
+ exit 1
12
+ else
13
+ echo "SCC check passed: '$actual_scc'"
14
+ fi
You can’t perform that action at this time.
0 commit comments