mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-27 00:30:18 +00:00
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
|
apiVersion: apiextensions.k8s.io/v1 # Hack because controller-gen complains if we don't have this
|
||
|
name: "[Stable] SecurityContextConstraints"
|
||
|
crd: 0000_03_security-openshift_01_scc.crd.yaml
|
||
|
tests:
|
||
|
onCreate:
|
||
|
- name: Should be able to create a minimal SecurityContextConstraints
|
||
|
initial: |
|
||
|
apiVersion: security.openshift.io/v1
|
||
|
kind: SecurityContextConstraints
|
||
|
allowHostDirVolumePlugin: false
|
||
|
allowHostIPC: false
|
||
|
allowHostNetwork: false
|
||
|
allowHostPID: false
|
||
|
allowHostPorts: false
|
||
|
allowPrivilegedContainer: false
|
||
|
allowedCapabilities: []
|
||
|
defaultAddCapabilities: []
|
||
|
priority: 0
|
||
|
readOnlyRootFilesystem: false
|
||
|
requiredDropCapabilities: []
|
||
|
volumes: []
|
||
|
expected: |
|
||
|
apiVersion: security.openshift.io/v1
|
||
|
kind: SecurityContextConstraints
|
||
|
allowHostDirVolumePlugin: false
|
||
|
allowHostIPC: false
|
||
|
allowHostNetwork: false
|
||
|
allowHostPID: false
|
||
|
allowHostPorts: false
|
||
|
allowPrivilegedContainer: false
|
||
|
allowedCapabilities: []
|
||
|
defaultAddCapabilities: []
|
||
|
priority: 0
|
||
|
readOnlyRootFilesystem: false
|
||
|
requiredDropCapabilities: []
|
||
|
volumes: []
|