UNCLASSIFIED - NO CUI

Skip to content

add thanos exceptions for allowedHostFilesystem/volumeTypes

Michael Martin requested to merge thanos-gatekeeper-exception into master

Adds required gatekeeper exceptions for Thanos cypress

Thanos helm tests should be passing now when gatekeeper is enabled.

Prior to fix (as seen in the upgrade 1st test runs):

Running helm tests for thanos...
Error: warning: Hook test thanos/templates/tests/test-ui.yaml failed: 1 error occurred:
	* admission webhook "validation.gatekeeper.sh" denied the request: [allowed-host-filesystem] HostPath volume {"hostPath": {"path": "/cypress", "type": ""}, "name": "cypress-artifacts"} is not allowed, pod: thanos-cypress-test. Allowed path: []
[volume-types] The volume type hostPath is not allowed, pod: thanos-cypress-test. Allowed volume types: ["configMap", "emptyDir", "projected", "secret", "downwardAPI", "persistentVolumeClaim"]
❌ One or more tests FAILED for thanos, enable DEBUG for more verbose output

with fix -- clean install and upgrade 2nd test runs:

Running helm tests for thanos...
✅ All tests sucessful for thanos
Edited by Michael Martin

Merge request reports