Drop privilages before running tests in CI

This commit is contained in:
Gareth Smith 2017-11-28 16:36:13 +00:00
parent f5b7280242
commit ff9f027096
1 changed files with 10 additions and 5 deletions

View File

@ -24,11 +24,16 @@ jobs:
- |
#!/usr/bin/env bash
set -eux
export GOPATH="${PWD}/go"
export PATH="${PATH}:${GOPATH}/bin"
go get github.com/onsi/ginkgo/ginkgo
"${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/download-binaries.sh"
GINKGO_PERFORMANCE=1 "${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/run-tests.sh"
chown -R nobody:nogroup "${PWD}/go"
cat <<'EOS' | su -c bash -s /bin/bash nobody
set -eux
export GOPATH="${PWD}/go"
export PATH="${PATH}:/usr/local/go/bin:${GOPATH}/bin"
go get github.com/onsi/ginkgo/ginkgo
"${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/download-binaries.sh"
GINKGO_PERFORMANCE=1 "${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/run-tests.sh"
EOS
- name: push-to-prod-branch
serial: true
plan: