mirror of
https://github.com/bjw-s-labs/helm-charts.git
synced 2025-07-04 00:47:04 +02:00
59 lines
1.6 KiB
YAML
59 lines
1.6 KiB
YAML
---
|
|
# yaml-language-server: $schema=https://raw.githubusercontent.com/helm-unittest/helm-unittest/main/schema/helm-testsuite.json
|
|
suite: pod security
|
|
templates:
|
|
- common.yaml
|
|
values:
|
|
- ../_values/controllers_main_default_container.yaml
|
|
capabilities:
|
|
majorVersion: 1
|
|
minorVersion: 29
|
|
tests:
|
|
- it: should not be present by default for kubernetes < 1.28
|
|
capabilities:
|
|
majorVersion: 1
|
|
minorVersion: 28
|
|
documentSelector: &DeploymentSelector
|
|
path: $[?(@.kind == "Deployment")].metadata.name
|
|
value: RELEASE-NAME
|
|
asserts:
|
|
- notExists:
|
|
path: spec.template.spec.hostUsers
|
|
|
|
- it: should not be present even if specified for kubernetes < 1.28
|
|
capabilities:
|
|
majorVersion: 1
|
|
minorVersion: 28
|
|
set:
|
|
defaultPodOptions:
|
|
hostUsers: false
|
|
documentSelector: *DeploymentSelector
|
|
asserts:
|
|
- notExists:
|
|
path: spec.template.spec.hostUsers
|
|
|
|
- it: should not be present by default for kubernetes >= 1.29
|
|
documentSelector: *DeploymentSelector
|
|
asserts:
|
|
- notExists:
|
|
path: spec.template.spec.hostUsers
|
|
|
|
- it: hostUsers disabled should set for kubernetes >= 1.29
|
|
set:
|
|
defaultPodOptions:
|
|
hostUsers: false
|
|
documentSelector: *DeploymentSelector
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.hostUsers
|
|
value: false
|
|
|
|
- it: hostUsers enabled should be set for kubernetes >= 1.29
|
|
set:
|
|
defaultPodOptions:
|
|
hostUsers: true
|
|
documentSelector: *DeploymentSelector
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.hostUsers
|
|
value: true
|