Skip to content

Update submodules/gatekeeper-library digest to 2ac0a02 #2241

Update submodules/gatekeeper-library digest to 2ac0a02

Update submodules/gatekeeper-library digest to 2ac0a02 #2241

GitHub Actions / Test results (psp) static policy failed Jan 15, 2025 in 1s

23 passed, 1 failed and 0 skipped

Tests failed

❌ report.xml

24 tests were completed in 11s with 23 passed, 1 failed and 0 skipped.

Test suite Passed Failed Skipped Time
tests.bats 23✅ 1❌ 11s

❌ tests.bats

✅ privileged
✅ hostPID
✅ hostIPC
✅ hostNetwork
✅ hostPorts
✅ volumes
✅ allowedHostPaths
✅ allowedFlexVolumes
✅ readOnlyRootFilesystem
✅ runAsUser
✅ runAsGroup
✅ supplementalGroups
✅ fsgroup
✅ allowPrivilegeEscalation
✅ defaultAllowPrivilegeEscalation
✅ allowedCapabilities
✅ defaultAddCapabilities
✅ requiredDropCapabilities
✅ seLinux
✅ allowedProcMountTypes
❌ apparmor
	(from function `setup' in test file tests/tests.bats, line 31)
✅ seccomp
✅ forbiddenSysctls
✅ allowedUnsafeSysctls

Annotations

Check failure on line 0 in report.xml

See this annotation in the file changed.

@github-actions github-actions / Test results (psp) static policy

tests.bats ► apparmor

Failed test found in:
  report.xml
Error:
  (from function `setup' in test file tests/tests.bats, line 31)
Raw output
(from function `setup' in test file tests/tests.bats, line 31)
  `kubectl apply -f tests/${testcase}/allowed.yaml' failed
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
podsecuritypolicy.policy/policy created
Error from server (Forbidden): error when creating "tests/apparmor/allowed.yaml": pods "nginx-apparmor-allowed" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.apparmor.security.beta.kubernetes.io/nginx]: Forbidden: localhost/custom is not an allowed profile. Allowed values: "runtime/default"]
Error from server (NotFound): error when deleting "tests/apparmor/allowed.yaml": pods "nginx-apparmor-allowed" not found
Error from server (NotFound): error when deleting "tests/apparmor/disallowed.yaml": pods "nginx-apparmor-disallowed" not found
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
podsecuritypolicy.policy "policy" deleted