kubernetes
/
kubectl
mirror of https://github.com/kubernetes/kubectl.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Drop privilages before running tests in CI

This commit is contained in:
Gareth Smith 2017-11-28 16:36:13 +00:00
parent f5b7280242
commit ff9f027096
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pkg/framework/test/ci/pipeline.yml
View File

@ -24,11 +24,16 @@ jobs:
- | - |
#!/usr/bin/env bash #!/usr/bin/env bash
set -eux set -eux
export GOPATH="${PWD}/go" chown -R nobody:nogroup "${PWD}/go"
export PATH="${PATH}:${GOPATH}/bin"
go get github.com/onsi/ginkgo/ginkgo cat <<'EOS' | su -c bash -s /bin/bash nobody
"${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/download-binaries.sh" set -eux
GINKGO_PERFORMANCE=1 "${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/run-tests.sh" export GOPATH="${PWD}/go"
export PATH="${PATH}:/usr/local/go/bin:${GOPATH}/bin"
go get github.com/onsi/ginkgo/ginkgo
"${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/download-binaries.sh"
GINKGO_PERFORMANCE=1 "${GOPATH}/src/k8s.io/kubectl/pkg/framework/test/scripts/run-tests.sh"
EOS
- name: push-to-prod-branch - name: push-to-prod-branch
serial: true serial: true
plan: plan: