search

operator-framework / rukpak

RukPak runs in a Kubernetes cluster and defines APIs for installing cloud native content
Apache License 2.0
52 stars 50 forks source link

Pod Security #879

Closed dtfranz closed 4 months ago

dtfranz commented 5 months ago

Change bundle unpack pod security settings to allow running in restricted namespaces. Change Dockerfile to use debug-nonroot image as builder only because we only need the cp binary from it.

codecov[bot] commented 5 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 37.27%. Comparing base (72cffe6) to head (62a0be9). Report is 1 commits behind head on main.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #879 +/- ## ======================================= Coverage 37.27% 37.27% ======================================= Files 9 9 Lines 845 845 ======================================= Hits 315 315 Misses 486 486 Partials 44 44 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

varshaprasad96 commented 5 months ago

e2e is failing because of change in base image. Looks like we are trying to list something:

exec: \"ls\": executable file not found in $PATH: unknown"
dtfranz commented 5 months ago

e2e is failing because of change in base image. Looks like we are trying to list something:

exec: \"ls\": executable file not found in $PATH: unknown"

I'll just add ls from the base image for now as we do for cp if you're OK with that.