mirror of
https://github.com/truenas/charts.git
synced 2026-04-23 18:10:06 +08:00
929e60d801
* Adapt charts CI and improve/fix common * add check on permissions contaienr * add postgres template * update comments * Update create_app.sh * add check * update script * auto gen item.yaml from Chart,yaml * rename readme on dest * duplicate readme from the same source * correct comment * reoder * remove extra space * keep both README and app-readme * update regex, to also allow 2 letter names, which is also valid * No need to check host network if there aren't any pod values * use same pattern as the pod.name label (not prepending release-name * update deps * add chart dirs to ci * Add a validation to check if there is any yaml errors after merging files * update charts path on ci * common/1.0.0/ -> common/ * update common-test dep path * temp update create_app script * make permissions container name configurable, incase we want to change order of execution * update naming convention * fix typo and a missed name change * do not allow `--` in names
415 lines
11 KiB
YAML
415 lines
11 KiB
YAML
suite: container envFixed test
|
|
templates:
|
|
- common.yaml
|
|
tests:
|
|
- it: should create the correct fixed envs
|
|
set:
|
|
image: &image
|
|
repository: nginx
|
|
tag: 1.19.0
|
|
pullPolicy: IfNotPresent
|
|
TZ: Europe/London
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: &probes
|
|
liveness:
|
|
enabled: false
|
|
readiness:
|
|
enabled: false
|
|
startup:
|
|
enabled: false
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: Europe/London
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: S6_READ_ONLY_ROOT
|
|
value: "1"
|
|
|
|
- it: should create the correct fixed envs when running as root
|
|
set:
|
|
image: *image
|
|
TZ: Europe/London
|
|
securityContext:
|
|
container:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
runAsNonRoot: false
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: Europe/London
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: PUID
|
|
value: "568"
|
|
- name: USER_ID
|
|
value: "568"
|
|
- name: UID
|
|
value: "568"
|
|
- name: PGID
|
|
value: "568"
|
|
- name: GROUP_ID
|
|
value: "568"
|
|
- name: GID
|
|
value: "568"
|
|
- name: S6_READ_ONLY_ROOT
|
|
value: "1"
|
|
|
|
- it: should create the correct fixed envs when running as root and changed fsGroup
|
|
set:
|
|
image: *image
|
|
TZ: Europe/London
|
|
securityContext:
|
|
container:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
runAsNonRoot: false
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
securityContext:
|
|
fsGroup: 1000
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: Europe/London
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: PUID
|
|
value: "568"
|
|
- name: USER_ID
|
|
value: "568"
|
|
- name: UID
|
|
value: "568"
|
|
- name: PGID
|
|
value: "1000"
|
|
- name: GROUP_ID
|
|
value: "1000"
|
|
- name: GID
|
|
value: "1000"
|
|
- name: S6_READ_ONLY_ROOT
|
|
value: "1"
|
|
|
|
- it: should create the correct fixed envs when running as root and not readonly
|
|
set:
|
|
image: *image
|
|
TZ: Europe/London
|
|
securityContext:
|
|
container:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
runAsNonRoot: false
|
|
readOnlyRootFilesystem: false
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: Europe/London
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: PUID
|
|
value: "568"
|
|
- name: USER_ID
|
|
value: "568"
|
|
- name: UID
|
|
value: "568"
|
|
- name: PGID
|
|
value: "568"
|
|
- name: GROUP_ID
|
|
value: "568"
|
|
- name: GID
|
|
value: "568"
|
|
|
|
- it: should create the correct fixed envs with GPU
|
|
set:
|
|
scaleGPU:
|
|
- gpu:
|
|
nvidia.com/gpu: 1
|
|
targetSelector:
|
|
workload-name:
|
|
- container-name1
|
|
image: *image
|
|
TZ: Europe/London
|
|
resources:
|
|
NVIDIA_CAPS:
|
|
- compute
|
|
- video
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: Europe/London
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: NVIDIA_DRIVER_CAPABILITIES
|
|
value: "compute,video"
|
|
- name: S6_READ_ONLY_ROOT
|
|
value: "1"
|
|
|
|
- it: should create the correct fixed envs with GPU and overridden on container level
|
|
set:
|
|
scaleGPU:
|
|
- gpu:
|
|
nvidia.com/gpu: 1
|
|
targetSelector:
|
|
workload-name:
|
|
- container-name1
|
|
image: *image
|
|
TZ: Europe/London
|
|
resources:
|
|
NVIDIA_CAPS:
|
|
- compute
|
|
- video
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
fixedEnv:
|
|
NVIDIA_CAPS:
|
|
- all
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: Europe/London
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: NVIDIA_DRIVER_CAPABILITIES
|
|
value: "all"
|
|
- name: S6_READ_ONLY_ROOT
|
|
value: "1"
|
|
|
|
- it: should create the correct fixed envs with PUID set to 0 on container level
|
|
set:
|
|
image: *image
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
fixedEnv:
|
|
PUID: 0
|
|
securityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
runAsNonRoot: false
|
|
asserts:
|
|
- documentIndex: &deploymentDoc 0
|
|
isKind:
|
|
of: Deployment
|
|
- documentIndex: *deploymentDoc
|
|
isAPIVersion:
|
|
of: apps/v1
|
|
- documentIndex: *deploymentDoc
|
|
isSubset:
|
|
path: spec.template.spec.containers[0]
|
|
content:
|
|
env:
|
|
- name: TZ
|
|
value: UTC
|
|
- name: UMASK
|
|
value: "002"
|
|
- name: UMASK_SET
|
|
value: "002"
|
|
- name: PUID
|
|
value: "0"
|
|
- name: USER_ID
|
|
value: "0"
|
|
- name: UID
|
|
value: "0"
|
|
- name: PGID
|
|
value: "568"
|
|
- name: GROUP_ID
|
|
value: "568"
|
|
- name: GID
|
|
value: "568"
|
|
- name: S6_READ_ONLY_ROOT
|
|
value: "1"
|
|
|
|
# Failures
|
|
- it: it should fail with NVIDIA_CAPS having invalid values
|
|
set:
|
|
image: *image
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
fixedEnv:
|
|
NVIDIA_CAPS:
|
|
- invalid
|
|
- compute
|
|
asserts:
|
|
- failedTemplate:
|
|
errorMessage: Container - Expected <fixedEnv.NVIDIA_CAPS> entry to be one of [all, compute, utility, graphics, video], but got [invalid]
|
|
|
|
- it: it should fail with NVIDIA_CAPS not having unique values
|
|
set:
|
|
image: *image
|
|
workload:
|
|
workload-name:
|
|
enabled: true
|
|
primary: true
|
|
type: Deployment
|
|
podSpec:
|
|
containers:
|
|
container-name1:
|
|
enabled: true
|
|
primary: true
|
|
imageSelector: image
|
|
probes: *probes
|
|
fixedEnv:
|
|
NVIDIA_CAPS:
|
|
- compute
|
|
- compute
|
|
asserts:
|
|
- failedTemplate:
|
|
errorMessage: Container - Expected <fixedEnv.NVIDIA_CAPS> to have only unique values, but got [compute, compute]
|