Method RunTest

internal/scorecard/scorecard.go:222–273

RunTest executes a single test

(ctx context.Context, test v1alpha3.TestConfiguration, podSec bool)

// RunTest executes a single test
func (r PodTestRunner) RunTest(ctx context.Context, test v1alpha3.TestConfiguration, podSec bool) (*v1alpha3.TestStatus, error) {

	// Create a Pod to run the test
	podDef := getPodDefinition(r.configMapName, test, r)
	if podSec {
		// creating a pod security context to support running in default namespace
		podSecCtx := v1.PodSecurityContext{}
		podSecCtx.RunAsNonRoot = &podSec
		podSecCtx.SeccompProfile = &v1.SeccompProfile{
			Type: v1.SeccompProfileTypeRuntimeDefault,
		}

		// creating a security context to be used by all containers in the pod
		secCtx := v1.SecurityContext{}
		secCtx.RunAsNonRoot = &podSec
		secCtx.AllowPrivilegeEscalation = &[]bool{false}[0]
		secCtx.Capabilities = &v1.Capabilities{
			Drop: []v1.Capability{
				"ALL",
			},
		}

		podDef.Spec.SecurityContext = &podSecCtx

		podDef.Spec.Containers[0].SecurityContext = &secCtx
		podDef.Spec.InitContainers[0].SecurityContext = &secCtx
	}

	if test.Storage.Spec.MountPath.Path != "" {
		addStorageToPod(podDef, test.Storage.Spec.MountPath.Path, r.StorageImage)
	}

	pod, err := r.Client.CoreV1().Pods(r.Namespace).Create(ctx, podDef, metav1.CreateOptions{})
	if err != nil {
		return nil, err
	}

	err = r.waitForTestToComplete(ctx, pod)
	if err != nil {
		return nil, err
	}

	// gather test output if necessary
	if test.Storage.Spec.MountPath.Path != "" {
		err := gatherTestOutput(r, test.Labels["suite"], test.Labels["test"], pod.Name, test.Storage.Spec.MountPath.Path)
		if err != nil {
			return nil, err
		}
	}

	return r.getTestStatus(ctx, pod), nil
}

// RunTest executes a single test
func (r FakeTestRunner) RunTest(ctx context.Context, _ v1alpha3.TestConfiguration, _ bool) (result *v1alpha3.TestStatus, err error) {