test(e2e): cut down resource limit

Makefile

@@ -346,8 +346,7 @@ chainsaw-setup: ## Run the chainsaw setup
 
 .PHONY: chainsaw-test
 chainsaw-test: chainsaw ## Run the chainsaw test
-	- KUBECONFIG=$(KIND_KUBECONFIG) $(CHAINSAW) test --cluster cluster-1=$(KIND_KUBECONFIG) --test-dir ./test/e2e/tls
-	KUBECONFIG=$(KIND_KUBECONFIG) kubectl logs --tail=-1 -n secret-operator-system -l "app.kubernetes.io/name=secret-operator"
+	KUBECONFIG=$(KIND_KUBECONFIG) $(CHAINSAW) test --cluster cluster-1=$(KIND_KUBECONFIG) --test-dir ./test/e2e/tls
 
 .PHONY: chainsaw-cleanup
 chainsaw-cleanup: ## Run the chainsaw cleanup

test/e2e/krb5/krb5.yaml

@@ -50,8 +50,8 @@ spec:
             mountPath: /data
         resources:
           limits:
-            memory: "526Mi"
-            cpu: "300m"
+            memory: "128Mi"
+            cpu: "100m"
         readinessProbe:
           exec:
             command:

test/e2e/krb5/node-scope.yaml

@@ -35,8 +35,8 @@ spec:
       value: /kubedoop/secret/krb5.conf
     resources:
       limits:
-        memory: "526Mi"
-        cpu: "500m"
+        memory: "50Mi"
+        cpu: "50m"
     ports:
     - containerPort: 80
       protocol: TCP

test/e2e/krb5/pod-scope.yaml

@@ -41,13 +41,12 @@ spec:
       value: /kubedoop/secret/krb5.conf
     resources:
       limits:
-        memory: "526Mi"
-        cpu: "500m"
+        memory: "50Mi"
+        cpu: "50m"
     ports:
     - containerPort: 80
       protocol: TCP
       name: http
-
     volumeMounts:
     - name: secret
       mountPath: /kubedoop/secret

test/e2e/krb5/service-scope.yaml

@@ -52,8 +52,8 @@ spec:
       value: /kubedoop/secret/krb5.conf
     resources:
       limits:
-        memory: "200Mi"
-        cpu: "256m"
+        memory: "50Mi"
+        cpu: "50m"
     volumeMounts:
     - name: secret
       mountPath: /kubedoop/secret

test/e2e/search-in-default-ns/01-assert.yaml

@@ -4,9 +4,7 @@ kind: Pod
 metadata:
   name: search-ns
 status:
-  phase: Running
+  phase: Succeeded
   containerStatuses:
   - name: pod
-    ready: true
     restartCount: 0
-    started: true

test/e2e/search-in-default-ns/01-pod-for-ns.yaml

@@ -5,6 +5,7 @@ metadata:
   labels:
     name: search-ns
 spec:
+  restartPolicy: Never
   containers:
   - name: pod
     image: busybox:stable
@@ -15,24 +16,18 @@ spec:
     - "sh"
     - "-c"
     - |
-      trap 'echo "Exiting..."; exit 1' SIGINT SIGTERM
-      echo "Loop is running... (Press Ctrl+C or send SIGTERM to exit)"
-      while true; do
+      # Continuous check /kubedoop/secret/mode exist
+      while ! test -f /kubedoop/secret/mode; do
         sleep 1
-        tail -f /opt/secret/mode || (sleep 1 && echo 'Waiting for content...')
+        echo "Waiting for content..."
       done
     resources:
       limits:
-        memory: "512Mi"
-        cpu: "500m"
+        memory: "50Mi"
+        cpu: "50m"
     volumeMounts:
     - name: secret
-      mountPath: /opt/secret
-    readinessProbe:
-      exec:
-        command: ["sh", "-c", "cat /opt/secret/mode | grep -q search-default-ns"]
-      initialDelaySeconds: 1
-      periodSeconds: 5
+      mountPath: /kubedoop/secret
   volumes:
   - name: secret
     ephemeral:

test/e2e/search-in-default-ns/11-assert.yaml

@@ -4,9 +4,7 @@ kind: Pod
 metadata:
   name: search-with-pod
 status:
-  phase: Running
+  phase: Succeeded
   containerStatuses:
   - name: pod
-    ready: true
     restartCount: 0
-    started: true

test/e2e/search-in-default-ns/11-pod-for-pod.yaml

@@ -15,24 +15,18 @@ spec:
     - "sh"
     - "-c"
     - |
-      trap 'echo "Exiting..."; exit 1' SIGINT SIGTERM
-      echo "Loop is running... (Press Ctrl+C or send SIGTERM to exit)"
-      while true; do
+      # Continuous check /kubedoop/secret/mode exist
+      while ! test -f /kubedoop/secret/mode; do
         sleep 1
-        tail -f /opt/secret/mode || (sleep 1 && echo 'Waiting for content...')
+        echo "Waiting for content..."
       done
     resources:
       limits:
         memory: "512Mi"
         cpu: "500m"
     volumeMounts:
     - name: secret
-      mountPath: /opt/secret
-    readinessProbe:
-      exec:
-        command: ["sh", "-c", "cat /opt/secret/mode | grep -q search-with-pod"]
-      initialDelaySeconds: 1
-      periodSeconds: 5
+      mountPath: /kubedoop/secret
   volumes:
   - name: secret
     ephemeral:

test/e2e/search-in-default-ns/21-assert.yaml

@@ -4,9 +4,7 @@ kind: Pod
 metadata:
   name: search-with-pod-scope
 status:
-  phase: Running
+  phase: Succeeded
   containerStatuses:
   - name: pod
-    ready: true
     restartCount: 0
-    started: true

test/e2e/search-in-default-ns/21-pod-with-scope.yaml

@@ -15,24 +15,18 @@ spec:
     - "sh"
     - "-c"
     - |
-      trap 'echo "Exiting..."; exit 1' SIGINT SIGTERM
-      echo "Loop is running... (Press Ctrl+C or send SIGTERM to exit)"
-      while true; do
+      # Continuous check /kubedoop/secret/mode exist
+      while ! test -f /kubedoop/secret/mode; do
         sleep 1
-        tail -f /opt/secret/mode || (sleep 1 && echo 'Waiting for content...')
+        echo "Waiting for content..."
       done
     resources:
       limits:
-        memory: "512Mi"
-        cpu: "500m"
+        memory: "50Mi"
+        cpu: "50m"
     volumeMounts:
     - name: secret
-      mountPath: /opt/secret
-    readinessProbe:
-      exec:
-        command: ["sh", "-c", "cat /opt/secret/mode | grep -q nginx-secret-pod-scope"]
-      initialDelaySeconds: 1
-      periodSeconds: 5
+      mountPath: /kubedoop/secret
   volumes:
   - name: secret
     ephemeral:

test/e2e/tls/tls-pkcs12.yaml

@@ -73,8 +73,8 @@ spec:
 
         resources:
           limits:
-            memory: "512Mi"
-            cpu: "300m"
+            memory: "128Mi"
+            cpu: "100m"
         securityContext:
           runAsUser: 0
           runAsGroup: 0

test/e2e/tls/tls-scope.yaml

@@ -25,8 +25,8 @@ spec:
                 fieldPath: metadata.namespace
         resources:
           limits:
-            memory: "512Mi"
-            cpu: "500m"
+            memory: "128Mi"
+            cpu: "100m"
         command:
           - /bin/bash
           - -c

test/e2e/tls/tls-will-expires.yaml

@@ -21,8 +21,8 @@ spec:
         image: caddy:2
         resources:
           limits:
-            memory: "512Mi"
-            cpu: "500m"
+            memory: "128Mi"
+            cpu: "100m"
         ports:
         - containerPort: 80
           name: http