cri-o/test/testdata/sandbox_config.json

{
	"metadata": {
		"name": "podsandbox1",
		"uid": "redhat-test-crio",
		"namespace": "redhat.test.crio",
		"attempt": 1
	},
	"hostname": "crioctl_host",
	"log_directory": "",
	"dns_config": {
		"searches": [
			"8.8.8.8"
		]
	},
	"port_mappings": [],
	"resources": {
		"cpu": {
			"limits": 3,
			"requests": 2
		},
		"memory": {
			"limits": 50000000,
			"requests": 2000000
		}
	},
	"labels": {
		"group": "test"
	},
	"annotations": {
		"owner": "hmeng",
		"security.alpha.kubernetes.io/sysctls": "kernel.shm_rmid_forced=1,net.ipv4.ip_local_port_range=1024 65000",
		"security.alpha.kubernetes.io/unsafe-sysctls": "kernel.msgmax=8192" ,
		"security.alpha.kubernetes.io/seccomp/pod": "unconfined"
	},
	"linux": {
		"cgroup_parent": "/Burstable/pod_123-456",
		"security_context": {
			"namespace_options": {
				"host_network": false,
				"host_pid": false,
				"host_ipc": false
			},
			"selinux_options": {
				"user": "system_u",
				"role": "system_r",
				"type": "svirt_lxc_net_t",
				"level": "s0:c4,c5"
			}
		}
	}
}
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`{`
Update the kubernetes api to latest Signed-off-by: Mrunal Patel <mrunalp@gmail.com> 2016-08-30 22:27:31 +00:00			`"metadata": {`
add test for container/pod metadata in status/list APIs Signed-off-by: HaoZhang <crazykev@zju.edu.cn> 2016-10-27 06:24:27 +00:00			`"name": "podsandbox1",`
Rename ocid to crio. The ocid project was renamed to CRI-O, months ago, it is time that we moved all of the code to the new name. We want to elminate the name ocid from use. Move fully to crio. Also cric is being renamed to crioctl for the time being. Signed-off-by: Dan Walsh <dwalsh@redhat.com> 2017-05-12 13:36:15 +00:00			`"uid": "redhat-test-crio",`
			`"namespace": "redhat.test.crio",`
add test for container/pod metadata in status/list APIs Signed-off-by: HaoZhang <crazykev@zju.edu.cn> 2016-10-27 06:24:27 +00:00			`"attempt": 1`
Update the kubernetes api to latest Signed-off-by: Mrunal Patel <mrunalp@gmail.com> 2016-08-30 22:27:31 +00:00			`},`
Rename ocid to crio. The ocid project was renamed to CRI-O, months ago, it is time that we moved all of the code to the new name. We want to elminate the name ocid from use. Move fully to crio. Also cric is being renamed to crioctl for the time being. Signed-off-by: Dan Walsh <dwalsh@redhat.com> 2017-05-12 13:36:15 +00:00			`"hostname": "crioctl_host",`
test: unset log_* in configurations This is necessary, as otherwise ocid will use its own current directory as a log_directory, which is not the best idea in the world. The same applies for log_path. Signed-off-by: Aleksa Sarai <asarai@suse.de> 2016-10-18 15:50:27 +00:00			`"log_directory": "",`
test: add a test for /etc/resolv.conf in rw/ro mode This patch isn't adding a test for /etc/hosts as that requires host network and we don't want to play with host's /etc/hosts when running make localintegration on our laptops. That may change in the future moving to some sort of in-container testing. Signed-off-by: Antonio Murdaca <runcom@redhat.com> 2017-06-15 11:26:30 +00:00			`"dns_config": {`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`"searches": [`
			`"8.8.8.8"`
			`]`
			`},`
testdata: Remove hostport from sandbox_config Signed-off-by: Andrew Pilloud <andrewpilloud@igneoussystems.com> 2017-06-16 21:39:43 +00:00			`"port_mappings": [],`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`"resources": {`
			`"cpu": {`
set up CPU and Memory resources Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-25 18:02:30 +00:00			`"limits": 3,`
			`"requests": 2`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`},`
			`"memory": {`
set up CPU and Memory resources Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-25 18:02:30 +00:00			`"limits": 50000000,`
			`"requests": 2000000`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`}`
			`},`
Fixes Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-22 22:15:41 +00:00			`"labels": {`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`"group": "test"`
			`},`
			`"annotations": {`
add test for sysctls Signed-off-by: HaoZhang <crazykev@zju.edu.cn> 2016-11-19 02:17:14 +00:00			`"owner": "hmeng",`
			`"security.alpha.kubernetes.io/sysctls": "kernel.shm_rmid_forced=1,net.ipv4.ip_local_port_range=1024 65000",`
add seccomp support Signed-off-by: Antonio Murdaca <runcom@redhat.com> 2016-11-23 09:41:48 +00:00			`"security.alpha.kubernetes.io/unsafe-sysctls": "kernel.msgmax=8192" ,`
			`"security.alpha.kubernetes.io/seccomp/pod": "unconfined"`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`},`
			`"linux": {`
test: add CGROUP_MANAGER env to switch to systemd default is still cgroupfs Signed-off-by: Antonio Murdaca <runcom@redhat.com> 2017-05-18 15:39:44 +00:00			`"cgroup_parent": "/Burstable/pod_123-456",`
testdata: sandbox ns options should be under security_context And not directly under linux. Fixes #243 Signed-off-by: Samuel Ortiz <sameo@linux.intel.com> 2016-12-08 17:05:24 +00:00			`"security_context": {`
			`"namespace_options": {`
			`"host_network": false,`
			`"host_pid": false,`
			`"host_ipc": false`
sandbox, ctr: SELinux fixes server: fix selinux labels for pod and containers Signed-off-by: Antonio Murdaca <runcom@redhat.com> sandbox: set selinux labels from request, not defaults Signed-off-by: Antonio Murdaca <runcom@redhat.com> container_create: use sandbox's selinux if container's nil Signed-off-by: Antonio Murdaca <runcom@redhat.com> sandbox: correctly init selinux labels First, we weren't correctly initializing selinux labels. If any of (level, user, role, type) was missing from kube selinux options, we were erroring out. This is wrong as kube sends just `level=s0` sometimes and docker itself allows `--security-opt label=level:s0`. This patch directly initializes selinux labels, correctly, and adds a test to verify it. Signed-off-by: Antonio Murdaca <runcom@redhat.com> test: testdata: use container_runtime_t selinux type RHEL SELinux policy doesn't have `container_t` type but we're using it in our fixtures. That means Fedora integration tests pass because `container_t` is in Fedora's container policy but RHEL is broken. Fix it by using `container_runtime_t` which is aliased in Fedora policy to `container_t`. Signed-off-by: Antonio Murdaca <runcom@redhat.com> 2017-09-13 19:06:54 +00:00			`},`
			`"selinux_options": {`
			`"user": "system_u",`
			`"role": "system_r",`
			`"type": "svirt_lxc_net_t",`
			`"level": "s0:c4,c5"`
testdata: sandbox ns options should be under security_context And not directly under linux. Fixes #243 Signed-off-by: Samuel Ortiz <sameo@linux.intel.com> 2016-12-08 17:05:24 +00:00			`}`
testdata: fix invalid json doc Signed-off-by: Vincent Batts <vbatts@hashbangbash.com> 2016-12-08 20:23:24 +00:00			`}`
Add first version of createPodSandbox Signed-off-by: Haiyan Meng <hmeng@redhat.com> 2016-07-20 01:30:05 +00:00			`}`
			`}`