Merge pull request #318 from andyzhangx/nonroot-container-test

test: run non-root container test

Author: andyzhangx

Makefile

@@ -143,9 +143,7 @@ create-metrics-svc:
 
 .PHONY: create-example-deployment
 create-example-deployment:
-	kubectl apply -f deploy/example/storageclass-blobfuse.yaml
-	kubectl apply -f deploy/example/deployment.yaml
-	kubectl apply -f deploy/example/statefulset.yaml
+	./hack/verify-examples.sh
 
 .PHONY: delete-metrics-svc
 delete-metrics-svc:

deploy/example/statefulset-nonroot.yaml

@@ -2,11 +2,11 @@
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
-  name: statefulset-blob
+  name: statefulset-blob-nonroot
   labels:
     app: nginx
 spec:
-  serviceName: statefulset-blob
+  serviceName: statefulset-blob-nonroot
   replicas: 1
   template:
     metadata:
@@ -23,9 +23,9 @@ spec:
         - name: statefulset-blob
           image: andyzhangx/ubuntu1604:nonroot
           command:
-            - "/bin/sh"
+            - "/bin/bash"
             - "-c"
-            - while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+            - set -euo pipefail; while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
           volumeMounts:
             - name: persistent-storage
               mountPath: /mnt/blob

deploy/example/statefulset.yaml

@@ -17,11 +17,11 @@ spec:
         "kubernetes.io/os": linux
       containers:
         - name: statefulset-blob
-          image: mcr.microsoft.com/oss/nginx/nginx:1.17.3-alpine
+          image: mcr.microsoft.com/oss/nginx/nginx:1.19.5
           command:
-            - "/bin/sh"
+            - "/bin/bash"
             - "-c"
-            - while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+            - set -euo pipefail; while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
           volumeMounts:
             - name: persistent-storage
               mountPath: /mnt/blob

hack/verify-examples.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+# Copyright 2020 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -euo pipefail
+
+echo "begin to create deployment examples ..."
+kubectl apply -f deploy/example/storageclass-blobfuse.yaml
+kubectl apply -f deploy/example/deployment.yaml
+kubectl apply -f deploy/example/statefulset.yaml
+kubectl apply -f deploy/example/statefulset-nonroot.yaml
+
+echo "sleep 90s ..."
+sleep 90
+
+kubectl get pods --field-selector status.phase=Running | grep deployment-blob
+kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-0
+kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-nonroot-0
+
+echo "deployment examples running completed."