Skip to content
This repository has been archived by the owner on Jun 28, 2024. It is now read-only.

Commit

Permalink
Test commit
Browse files Browse the repository at this point in the history
This is a debug commit.

Signed-off-by: Unmesh Deodhar <[email protected]>
  • Loading branch information
UnmeshDeodhar committed Jul 7, 2023
1 parent 5edebcc commit 1bab0a2
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion integration/kubernetes/confidential/sev.bats
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,9 @@ setup_file() {

# SEV unencrypted service yaml generation
k8s_generate_service_yaml "${TEST_DIR}/sev-unencrypted.yaml" "${IMAGE_REPO}:unencrypted"
k8s_yaml_set_annotation "${TEST_DIR}/sev-unencrypted.yaml" "io.katacontainers.config.pre_attestation.enabled" "false"
cp "${TEST_DIR}/sev-unencrypted.yaml" ./sev-unencrypted-org.yaml
k8s_yaml_set_annotation "${TEST_DIR}/sev-unencrypted.yaml" "io.katacontainers.config.guest_pre_attestation.enabled" "false"
cp "${TEST_DIR}/sev-unencrypted.yaml" ./

# SEV encrypted service yaml generation
# SEV policy is 3 (default):
Expand All @@ -81,6 +83,7 @@ setup_file() {
k8s_generate_service_yaml "${TEST_DIR}/sev-encrypted.yaml" "${IMAGE_REPO}:multi-arch-encrypted"
k8s_yaml_set_annotation "${TEST_DIR}/sev-encrypted.yaml" "io.katacontainers.config.pre_attestation.uri" "${kbs_uri}"
k8s_yaml_set_annotation "${TEST_DIR}/sev-encrypted.yaml" "io.katacontainers.config.sev.policy" "3"
cp "${TEST_DIR}/sev-encrypted.yaml" ./

# SEV-ES policy is 7:
# - NODBG (1): Debugging of the guest is disallowed when set
Expand All @@ -89,6 +92,7 @@ setup_file() {
k8s_generate_service_yaml "${TEST_DIR}/sev-es-encrypted.yaml" "${IMAGE_REPO}:multi-arch-encrypted"
k8s_yaml_set_annotation "${TEST_DIR}/sev-es-encrypted.yaml" "io.katacontainers.config.pre_attestation.uri" "${kbs_uri}"
k8s_yaml_set_annotation "${TEST_DIR}/sev-es-encrypted.yaml" "io.katacontainers.config.sev.policy" "7"
cp "${TEST_DIR}/sev-es-encrypted.yaml" ./
}

teardown_file() {
Expand Down Expand Up @@ -120,6 +124,7 @@ setup() {


@test "${TEST_TAG} Test SEV unencrypted container launch success" {

# Start the service/deployment/pod
esudo kubectl apply -f "${TEST_DIR}/sev-unencrypted.yaml"

Expand Down

0 comments on commit 1bab0a2

Please sign in to comment.