Skip to content
Snippets Groups Projects
user avatar
Kenichi Omichi authored
busybox container requires a root permission for ping.
For testing hardening method at CI, we need to switch to another image
which doesn't require the root permission for network testing.
On kubernetes/kubernetes repo, we are using agnhost which doesn't
require it. So this makes the test use aghhost image.

In addition, this updates the test manifest to specify securityContext
without any privilege.
72b45eec
History

Kubespray cloud deployment tests

Amazon Web Service

Calico Flannel Weave
Debian Jessie Build Status Build Status Build Status
Ubuntu Trusty Build Status Build Status Build Status
RHEL 7.2 Build Status Build Status Build Status
CentOS 7 Build Status Build Status Build Status

Test environment variables

Common

Variable Description Required Default
TEST_ID A unique execution ID for this test Yes
KUBE_NETWORK_PLUGIN The network plugin (calico or flannel) Yes
PRIVATE_KEY_FILE The path to the SSH private key file No

AWS Tests

Variable Description Required Default
AWS_ACCESS_KEY The Amazon Access Key ID Yes
AWS_SECRET_KEY The Amazon Secret Access Key Yes
AWS_AMI_ID The AMI ID to deploy Yes
AWS_KEY_PAIR_NAME The name of the EC2 key pair to use Yes
AWS_SECURITY_GROUP The EC2 Security Group to use No default
AWS_REGION The EC2 region No eu-central-1

Use private ssh key

Key
openssl pkcs12 -in gce-secure.p12 -passin pass:notasecret -nodes -nocerts | openssl rsa -out gce-secure.pem
cat gce-secure.pem |base64 -w0 > GCE_PEM_FILE`