1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-13 19:28:55 +00:00

chore: fix chainsaw exec timeout issue (#9013)

* chore: fix chainsaw timeouts issues

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* exec timeout

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* bump chainsaw

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix cleanup

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* custom sigstore fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* mutate

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2023-11-26 16:43:29 +01:00 committed by GitHub
parent 7309c59b18
commit 1a331f1297
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
141 changed files with 273 additions and 755 deletions

View file

@ -147,7 +147,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -217,7 +217,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -287,7 +287,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -359,7 +359,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -429,7 +429,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -505,7 +505,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -580,7 +580,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -674,7 +674,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:
@ -748,7 +748,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.2
release: v0.0.7-alpha.3
- name: Test with Chainsaw
shell: bash
env:

View file

@ -7,7 +7,6 @@ spec:
assert: 90s
cleanup: 150s
error: 90s
exec: 150s
parallel: 1
fullName: true
failFast: false

View file

@ -11,3 +11,4 @@ spec:
args:
- "65"
entrypoint: sleep
timeout: 90s

View file

@ -7,7 +7,6 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "5"
entrypoint: sleep
- script:
content: sleep 5
timeout: 10s

View file

@ -11,3 +11,4 @@ spec:
args:
- "65"
entrypoint: sleep
timeout: 90s

View file

@ -1,17 +0,0 @@
---
apiVersion: chainsaw.kyverno.io/v1alpha1
kind: TestStep
metadata:
creationTimestamp: null
name: goodpod
spec:
timeouts: {}
try:
- command:
args:
- -n
- test-custom-sigstore
- run
- test-sigstore
- --image=$TEST_IMAGE_URL
entrypoint: kubectl

View file

@ -0,0 +1,20 @@
apiVersion: chainsaw.kyverno.io/v1alpha1
kind: Test
metadata:
name: basic
spec:
concurrent: false
namespace: foo
steps:
- try:
- apply:
file: policy.yaml
- assert:
file: policy-assert.yaml
- script:
content: kubectl run -n $NAMESPACE test-sigstore --image=$TEST_IMAGE_URL
- assert:
file: pod-assert.yaml
finally:
- script:
content: sleep 3

View file

@ -2,4 +2,3 @@ apiVersion: v1
kind: Pod
metadata:
name: test-sigstore
namespace: test-custom-sigstore

View file

@ -1,8 +1,3 @@
apiVersion: v1
kind: Namespace
metadata:
name: test-custom-sigstore
---
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -1,18 +0,0 @@
---
apiVersion: chainsaw.kyverno.io/v1alpha1
kind: TestStep
metadata:
creationTimestamp: null
name: cleanup
spec:
timeouts: {}
try:
- command:
args:
- delete
- -f
- 01-manifests.yaml,02-ns.yaml
- --force
- --wait=true
- --ignore-not-found=true
entrypoint: kubectl

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -1,18 +0,0 @@
---
apiVersion: chainsaw.kyverno.io/v1alpha1
kind: TestStep
metadata:
creationTimestamp: null
name: cleanup
spec:
timeouts: {}
try:
- command:
args:
- delete
- -f
- 01-manifests.yaml,02-ns.yaml
- --force
- --wait=true
- --ignore-not-found=true
entrypoint: kubectl

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -16,6 +16,7 @@ spec:
- --wait=true
- --ignore-not-found=true
entrypoint: kubectl
timeout: 30s
- command:
args:
- delete
@ -26,6 +27,7 @@ spec:
- --wait=true
- --ignore-not-found=true
entrypoint: kubectl
timeout: 30s
- command:
args:
- delete
@ -36,6 +38,7 @@ spec:
- --wait=true
- --ignore-not-found=true
entrypoint: kubectl
timeout: 30s
- command:
args:
- delete
@ -44,3 +47,4 @@ spec:
- --wait=true
- --ignore-not-found=true
entrypoint: kubectl
timeout: 30s

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,6 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "6"
entrypoint: sleep
- script:
content: sleep 6
timeout: 10s

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

View file

@ -7,7 +7,5 @@ metadata:
spec:
timeouts: {}
try:
- command:
args:
- "3"
entrypoint: sleep
- script:
content: sleep 3

Some files were not shown because too many files have changed in this diff Show more