Merge pull request #6291 from blackpiglet/make_e2e_workload_obey_rest…

…ricted_psa_1 Add file system group setting for deployment and pod used in E2E test.
vmware-tanzu · May 20, 2023 · c34880e · c34880e
2 parents 40d6130 + 98baaa9
commit c34880e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/test/e2e/util/k8s/deployment.go b/test/e2e/util/k8s/deployment.go
@@ -93,6 +93,10 @@ func NewDeployment(name, ns string, replicas int32, labels map[string]string, co
 						Labels: labels,
 					},
 					Spec: v1.PodSpec{
+						SecurityContext: &v1.PodSecurityContext{
+							FSGroup:             func(i int64) *int64 { return &i }(65534),
+							FSGroupChangePolicy: func(policy v1.PodFSGroupChangePolicy) *v1.PodFSGroupChangePolicy { return &policy }(v1.FSGroupChangeAlways),
+						},
 						Containers: containers,
 					},
 				},

diff --git a/test/e2e/util/k8s/pod.go b/test/e2e/util/k8s/pod.go
@@ -70,6 +70,10 @@ func CreatePod(client TestClient, ns, name, sc, pvcName string, volumeNameList [
 			Annotations: ann,
 		},
 		Spec: corev1.PodSpec{
+			SecurityContext: &v1.PodSecurityContext{
+				FSGroup:             func(i int64) *int64 { return &i }(65534),
+				FSGroupChangePolicy: func(policy v1.PodFSGroupChangePolicy) *v1.PodFSGroupChangePolicy { return &policy }(v1.FSGroupChangeAlways),
+			},
 			Containers: []corev1.Container{
 				{
 					Name:         name,