@@ -21,18 +21,18 @@ tests:
2121 - it : Deployment and Job Pods+Containers have no SecurityContext by default
2222 templates :
2323 - deployments.yaml
24- # st2auth, st2api,
25- # st2stream, st2web,
26- # st2rulesengine, st2timersengine,
27- # st2workflowengine, st2scheduler,
28- # st2notifier, (1) st2sensorcontainer,
29- # st2actionrunner, st2garbagecollector,
30- # st2client, st2chatops
24+ # st2auth, st2api,
25+ # st2stream, st2web,
26+ # st2rulesengine, st2timersengine,
27+ # st2workflowengine, st2scheduler,
28+ # st2notifier, (1) st2sensorcontainer,
29+ # st2actionrunner, st2garbagecollector,
30+ # st2client, st2chatops
3131 - jobs.yaml
32- # job-st2-apply-rbac-defintions
33- # job-st2-apikey-load
34- # job-st2-key-load
35- # job-st2-register-content
32+ # job-st2-apply-rbac-defintions
33+ # job-st2-apikey-load
34+ # job-st2-key-load
35+ # job-st2-register-content
3636 set :
3737 st2chatops :
3838 enabled : true
@@ -49,26 +49,26 @@ tests:
4949 path : spec.template.spec.securityContext
5050 # container
5151 - isNull :
52- path : ' spec.template.spec.containers[0].securityContext'
52+ path : " spec.template.spec.containers[0].securityContext"
5353 # path can only select one element, not all initContainers (if present).
5454 # - isNull:
5555 # path: 'spec.template.spec.initContainers[].securityContext'
5656
5757 - it : Deployment and Job Pods+Containers use same SecurityContext when defined
5858 templates :
5959 - deployments.yaml
60- # st2auth, st2api,
61- # st2stream, st2web,
62- # st2rulesengine, st2timersengine,
63- # st2workflowengine, st2scheduler,
64- # st2notifier, (1) st2sensorcontainer,
65- # st2actionrunner, st2garbagecollector,
66- # st2client, st2chatops
60+ # st2auth, st2api,
61+ # st2stream, st2web,
62+ # st2rulesengine, st2timersengine,
63+ # st2workflowengine, st2scheduler,
64+ # st2notifier, (1) st2sensorcontainer,
65+ # st2actionrunner, st2garbagecollector,
66+ # st2client, st2chatops
6767 - jobs.yaml
68- # job-st2-apply-rbac-defintions
69- # job-st2-apikey-load
70- # job-st2-key-load
71- # job-st2-register-content
68+ # job-st2-apply-rbac-defintions
69+ # job-st2-apikey-load
70+ # job-st2-key-load
71+ # job-st2-register-content
7272 set :
7373 st2chatops :
7474 enabled : true
8484 drop : [ALL]
8585
8686 asserts :
87-
8887 # pod
8988 - equal :
9089 path : spec.template.spec.securityContext
@@ -118,7 +117,7 @@ tests:
118117 securityContext : &security_context_override
119118 capabilities :
120119 drop : [ALL]
121- add : [kill,net_raw]
120+ add : [kill, net_raw]
122121
123122 st2actionrunner :
124123 podSecurityContext : *pod_security_context_override
0 commit comments