Skip to content

Commit 521af1b

Browse files
committed
Fix outdated conformance test requirement
It's not true that running conformance test is non-privileged and does not require cluster admin permissions. Signed-off-by: Quan Tian <[email protected]>
1 parent 7bb8182 commit 521af1b

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

contributors/devel/sig-architecture/conformance-tests.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,8 +38,9 @@ specifically, a test is eligible for promotion to conformance if:
3838
use the kubelet API for debugging purposes upon failure
3939
- it works for all providers (e.g., no `SkipIfProviderIs`/`SkipUnlessProviderIs`
4040
calls)
41-
- it is non-privileged (e.g., does not require root on nodes, access to raw
42-
network interfaces, or cluster admin permissions)
41+
- it limits itself to capabilities exposed via APIs (e.g., does not require
42+
root on nodes, access to raw network interfaces) and does not require write
43+
access to system namespaces (like kube-system)
4344
- it works without access to the public internet (short of whatever is required
4445
to pre-pull images for conformance tests)
4546
- it works without non-standard filesystem permissions granted to pods

0 commit comments

Comments
 (0)