Merge pull request #452 from andyzhangx/remove-0777

test: add nonroot application tests

Author: andyzhangx

deploy/example/deployment-nfs.yaml

@@ -0,0 +1,52 @@
+---
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: pvc-blob-nfs
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: blob-nfs
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: nginx
+  name: deployment-blob-nfs
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+      name: deployment-blob-nfs
+    spec:
+      nodeSelector:
+        "kubernetes.io/os": linux
+      containers:
+        - name: deployment-blob-nfs
+          image: mcr.microsoft.com/oss/nginx/nginx:1.17.3-alpine
+          command:
+            - "/bin/sh"
+            - "-c"
+            - while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+          volumeMounts:
+            - name: blob
+              mountPath: "/mnt/blob"
+              readOnly: false
+      volumes:
+        - name: blob
+          persistentVolumeClaim:
+            claimName: pvc-blob-nfs
+  strategy:
+    rollingUpdate:
+      maxSurge: 0
+      maxUnavailable: 1
+    type: RollingUpdate

deploy/example/statefulset-nfs.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: statefulset-blob-nfs
+  labels:
+    app: nginx
+spec:
+  serviceName: statefulset-blob-nfs
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      nodeSelector:
+        "kubernetes.io/os": linux
+      containers:
+        - name: statefulset-blob-nfs
+          image: mcr.microsoft.com/oss/nginx/nginx:1.19.5
+          command:
+            - "/bin/bash"
+            - "-c"
+            - set -euo pipefail; while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+          volumeMounts:
+            - name: persistent-storage
+              mountPath: /mnt/blob
+  updateStrategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: nginx
+  volumeClaimTemplates:
+    - metadata:
+        name: persistent-storage
+        annotations:
+          volume.beta.kubernetes.io/storage-class: blob-nfs
+      spec:
+        accessModes: ["ReadWriteMany"]
+        resources:
+          requests:
+            storage: 100Gi

deploy/example/statefulset-nonroot-nfs.yaml

@@ -0,0 +1,46 @@
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: statefulset-blob-nonroot-nfs
+  labels:
+    app: nginx
+spec:
+  serviceName: statefulset-blob-nonroot-nfs
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      securityContext:  # optional just to make sure user is non-root
+        runAsUser: 10001
+        runAsGroup: 10001
+        fsGroup: 10001
+      nodeSelector:
+        "kubernetes.io/os": linux
+      containers:
+        - name: statefulset-blob
+          image: andyzhangx/ubuntu1604:nonroot
+          command:
+            - "/bin/bash"
+            - "-c"
+            - set -euo pipefail; while true; do echo $(date) >> /mnt/blob/outfile; sleep 1; done
+          volumeMounts:
+            - name: persistent-storage
+              mountPath: /mnt/blob
+  updateStrategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: nginx
+  volumeClaimTemplates:
+    - metadata:
+        name: persistent-storage
+        annotations:
+          volume.beta.kubernetes.io/storage-class: blob-nfs
+      spec:
+        accessModes: ["ReadWriteMany"]
+        resources:
+          requests:
+            storage: 100Gi

hack/verify-examples.sh

@@ -17,15 +17,22 @@ set -euo pipefail
 
 echo "begin to create deployment examples ..."
 kubectl apply -f deploy/example/storageclass-blobfuse.yaml
+kubectl apply -f deploy/example/storageclass-blob-nfs.yaml
 kubectl apply -f deploy/example/deployment.yaml
 kubectl apply -f deploy/example/statefulset.yaml
 kubectl apply -f deploy/example/statefulset-nonroot.yaml
+kubectl apply -f deploy/example/deployment-nfs.yaml
+kubectl apply -f deploy/example/statefulset-nfs.yaml
+kubectl apply -f deploy/example/statefulset-nonroot-nfs.yaml
 
-echo "sleep 60s ..."
-sleep 60
+echo "sleep 90s ..."
+sleep 90
 
 kubectl get pods --field-selector status.phase=Running | grep deployment-blob
 kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-0
 kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-nonroot-0
+kubectl get pods --field-selector status.phase=Running | grep deployment-blob-nfs
+kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-nfs-0
+kubectl get pods --field-selector status.phase=Running | grep statefulset-blob-nonroot-nfs-0
 
 echo "deployment examples running completed."

test/external-e2e/run.sh

@@ -39,6 +39,7 @@ setup_e2e_binaries() {
 }
 
 print_logs() {
+    bash ./hack/verify-examples.sh
     echo "print out driver logs ..."
     bash ./test/utils/blob_log.sh
 }