Update submodules/gatekeeper-library digest to da229ba
GitHub Actions / Test results (gatekeeper) end-to-end
failed
Oct 30, 2024 in 0s
23 passed, 1 failed and 0 skipped
❌ report.xml
24 tests were completed in 66s with 23 passed, 1 failed and 0 skipped.
| Test suite | Passed | Failed | Skipped | Time |
|---|---|---|---|---|
| tests.bats | 23✅ | 1❌ | 66s |
❌ tests.bats
✅ privileged
✅ hostPID
✅ hostIPC
✅ hostNetwork
✅ hostPorts
✅ volumes
✅ allowedHostPaths
✅ allowedFlexVolumes
✅ readOnlyRootFilesystem
✅ runAsUser
✅ runAsGroup
✅ supplementalGroups
✅ fsgroup
✅ allowPrivilegeEscalation
✅ defaultAllowPrivilegeEscalation
✅ allowedCapabilities
✅ defaultAddCapabilities
✅ requiredDropCapabilities
✅ seLinux
✅ allowedProcMountTypes
❌ apparmor
(from function `setup' in test file tests/tests.bats, line 31)
✅ seccomp
✅ forbiddenSysctls
✅ allowedUnsafeSysctls
Annotations
Check failure on line 0 in report.xml
github-actions / Test results (gatekeeper) end-to-end
tests.bats ► apparmor
Failed test found in:
report.xml
Error:
(from function `setup' in test file tests/tests.bats, line 31)
Raw output
(from function `setup' in test file tests/tests.bats, line 31)
`kubectl apply -f tests/${testcase}/allowed.yaml' failed
k8spspapparmor.constraints.gatekeeper.sh/psp-k8spspapparmor-49468 created
Error from server (Forbidden): error when creating "tests/apparmor/allowed.yaml": admission webhook "validation.gatekeeper.sh" denied the request: [psp-k8spspapparmor-49468] AppArmor profile is not allowed, pod: nginx-apparmor-allowed, container: nginx. Allowed profiles: ["runtime/default"]
/home/runner/work/psp-migration/psp-migration/tests/tests.bats: line 36: local: testcase: readonly variable
Error from server (NotFound): error when deleting "tests/apparmor/allowed.yaml": pods "nginx-apparmor-allowed" not found
Error from server (NotFound): error when deleting "tests/apparmor/disallowed.yaml": pods "nginx-apparmor-disallowed" not found
k8spspapparmor.constraints.gatekeeper.sh "psp-k8spspapparmor-49468" deleted
Loading