Skip to content

Commit

Permalink
Incorporate KubeLinter recommended best practices for chart tester pod
Browse files Browse the repository at this point in the history
Signed-off-by: Eddie Torres <torredil@amazon.com>
  • Loading branch information
torredil committed Feb 10, 2024
1 parent 56a4ff6 commit 8ac6ddc
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -193,10 +193,19 @@ metadata:
annotations:
"helm.sh/hook": test
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
"ignore-check.kube-linter.io/run-as-non-root": "kubetest2 image runs as root"
"ignore-check.kube-linter.io/no-read-only-root-fs": "test pod requires privileged access"
"ignore-check.kube-linter.io/unset-cpu-requirements": "CPU limits on Kubernetes are an antipattern"
spec:
containers:
- name: kubetest2
image: {{ default "gcr.io/k8s-staging-test-infra/kubekins-e2e:v20231206-f7b83ffbe6-master" (.Values.helmTester).image }}
resources:
requests:
cpu: 1600m
memory: 3Gi
limits:
memory: 4Gi
command: [ "/bin/sh", "-c" ]
args:
- |
Expand Down

0 comments on commit 8ac6ddc

Please sign in to comment.