From 8ac6ddc4ae7de2a7057b63ac6611c20962f5dad2 Mon Sep 17 00:00:00 2001 From: Eddie Torres Date: Sat, 10 Feb 2024 03:00:46 +0000 Subject: [PATCH] Incorporate KubeLinter recommended best practices for chart tester pod Signed-off-by: Eddie Torres --- .../aws-ebs-csi-driver/templates/tests/helm-tester.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml b/charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml index d6601890ac..3531d1be0f 100644 --- a/charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml +++ b/charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml @@ -193,10 +193,19 @@ metadata: annotations: "helm.sh/hook": test "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed + "ignore-check.kube-linter.io/run-as-non-root": "kubetest2 image runs as root" + "ignore-check.kube-linter.io/no-read-only-root-fs": "test pod requires privileged access" + "ignore-check.kube-linter.io/unset-cpu-requirements": "CPU limits on Kubernetes are an antipattern" spec: containers: - name: kubetest2 image: {{ default "gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231206-f7b83ffbe6-master" (.Values.helmTester).image }} + resources: + requests: + cpu: 1600m + memory: 3Gi + limits: + memory: 4Gi command: [ "/bin/sh", "-c" ] args: - |