test: add e2e test "dynamically_provisioned_read_only_volume"

Signed-off-by: ZeroMagic <[email protected]>

Author: ZeroMagic

test/e2e/dynamic_provisioning.go

@@ -73,4 +73,29 @@ var _ = Describe("Dynamic Provisioning", func() {
 		}
 		test.Run(cs, ns)
 	})
+
+	// Track issue https://github.com/kubernetes/kubernetes/issues/70505
+	It("should create a volume on demand and mount it as readOnly in a pod", func() {
+		pods := []testsuites.PodDetails{
+			{
+				Cmd: "touch /mnt/test-1/data",
+				Volumes: []testsuites.VolumeDetails{
+					{
+						FSType:    "ext4",
+						ClaimSize: "10Gi",
+						VolumeMount: testsuites.VolumeMountDetails{
+							NameGenerate:      "test-volume-",
+							MountPathGenerate: "/mnt/test-",
+							ReadOnly:          true,
+						},
+					},
+				},
+			},
+		}
+		test := testsuites.DynamicallyProvisionedReadOnlyVolumeTest{
+			CSIDriver: testDriver,
+			Pods:      pods,
+		}
+		test.Run(cs, ns)
+	})
 })

test/e2e/testsuites/dynamically_provisioned_read_only_volume_tester.go

@@ -0,0 +1,59 @@
+/*
+Copyright 2019 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package testsuites
+
+import (
+	"fmt"
+	"github.com/csi-driver/blobfuse-csi-driver/test/e2e/driver"
+	"k8s.io/kubernetes/test/e2e/framework"
+
+	"k8s.io/api/core/v1"
+	clientset "k8s.io/client-go/kubernetes"
+
+	. "github.com/onsi/ginkgo"
+	. "github.com/onsi/gomega"
+)
+
+const expectedReadOnlyLog = "Read-only file system"
+
+// DynamicallyProvisionedReadOnlyVolumeTest will provision required StorageClass(es), PVC(s) and Pod(s)
+// Waiting for the PV provisioner to create a new PV
+// Testing that the Pod(s) cannot write to the volume when mounted
+type DynamicallyProvisionedReadOnlyVolumeTest struct {
+	CSIDriver driver.DynamicPVTestDriver
+	Pods      []PodDetails
+}
+
+func (t *DynamicallyProvisionedReadOnlyVolumeTest) Run(client clientset.Interface, namespace *v1.Namespace) {
+	for _, pod := range t.Pods {
+		tpod, cleanup := pod.SetupWithDynamicVolumes(client, namespace, t.CSIDriver)
+		// defer must be called here for resources not get removed before using them
+		for i := range cleanup {
+			defer cleanup[i]()
+		}
+
+		By("deploying the pod")
+		tpod.Create()
+		defer tpod.Cleanup()
+		By("checking that the pods command exits with an error")
+		tpod.WaitForFailure()
+		By("checking that pod logs contain expected message")
+		body, err := tpod.Logs()
+		framework.ExpectNoError(err, fmt.Sprintf("Error getting logs for pod %s: %v", tpod.pod.Name, err))
+		Expect(string(body)).To(ContainSubstring(expectedReadOnlyLog))
+	}
+}