File tree 1 file changed +14
-0
lines changed
1 file changed +14
-0
lines changed Original file line number Diff line number Diff line change @@ -41,6 +41,10 @@ func TestMNISTRayClusterSDK(t *testing.T) {
41
41
test := With (t )
42
42
test .T ().Parallel ()
43
43
44
+ // set security context for the pod
45
+ allowPrivilegeEscalation := false
46
+ runAsNonRoot := true
47
+
44
48
// Currently blocked by https://github.com/project-codeflare/codeflare-sdk/pull/251 , remove the skip once SDK with the PR is released
45
49
test .T ().Skip ("Requires https://github.com/project-codeflare/codeflare-sdk/pull/251" )
46
50
@@ -176,6 +180,16 @@ func TestMNISTRayClusterSDK(t *testing.T) {
176
180
},
177
181
},
178
182
WorkingDir : "/workdir" ,
183
+ SecurityContext : & corev1.SecurityContext {
184
+ AllowPrivilegeEscalation : & allowPrivilegeEscalation ,
185
+ SeccompProfile : & corev1.SeccompProfile {
186
+ Type : "RuntimeDefault" ,
187
+ },
188
+ Capabilities : & corev1.Capabilities {
189
+ Drop : []corev1.Capability {"ALL" },
190
+ },
191
+ RunAsNonRoot : & runAsNonRoot ,
192
+ },
179
193
},
180
194
},
181
195
Volumes : []corev1.Volume {
You can’t perform that action at this time.
0 commit comments