Set uid and gid to 1000 in all jobs 09/73309/1
authorCédric Ollivier <cedric.ollivier@orange.com>
Fri, 15 Apr 2022 10:14:24 +0000 (12:14 +0200)
committerCédric Ollivier <cedric.ollivier@orange.com>
Fri, 15 Apr 2022 10:14:24 +0000 (12:14 +0200)
It works globally even if most of containers aren't
leveraging 1000 as uid (root is allowed to write
everywhere).

Change-Id: I8b2892cd9abc28a87417ad90a7dca6cd16dab319
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
jjb/functest/functest-kubernetes-pi.yaml
jjb/functest/functest-kubernetes.yaml
jjb/functest/functest-pi.yaml
jjb/functest/functest.yaml
jjb/functest/xtesting-pi.yaml
jjb/functest/xtesting.yaml

index 40b37c1..340ae23 100644 (file)
@@ -87,6 +87,8 @@
     volumes: '{volumes}'
     env: '{env}'
     network: '{network}'
+    uid: '{uid}'
+    gid: '{gid}'
 
 - builder:
     name: functest-kubernetes-pi-pull-containers
             image={repo}:{port}/{container}:{tag}
           fi
           mkdir -p $WORKSPACE/results
-          chown 1000:1000 $WORKSPACE/results
+          chown {uid}:{gid} $WORKSPACE/results
           docker run --rm \
             --privileged={privileged} \
             --network={network} \
       - k8s_smoke
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-pi-ollivier-functest-kubernetes-healthcheck-{tag}-{test}-run'
 
       - sig_storage_serial
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     exclude:
       - tag: latest
         test: k8s_io
       - kube_bench_node
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-pi-ollivier-functest-kubernetes-security-{tag}-{test}-run'
 
       - netperf
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-pi-ollivier-functest-kubernetes-benchmarking-{tag}-{test}-run'
 
       - cnf_testsuite
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-pi-ollivier-functest-kubernetes-cnf-{tag}-{test}-run'
 
index dabe844..53603ca 100644 (file)
@@ -87,6 +87,8 @@
     volumes: '{volumes}'
     env: '{env}'
     network: '{network}'
+    uid: '{uid}'
+    gid: '{gid}'
 
 - builder:
     name: functest-kubernetes-pull-containers
             image={repo}:{port}/{container}:{tag}
           fi
           mkdir -p $WORKSPACE/results
-          chown 1000:1000 $WORKSPACE/results
+          chown {uid}:{gid} $WORKSPACE/results
           docker run --rm \
             --privileged={privileged} \
             --network={network} \
       - k8s_smoke
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-opnfv-functest-kubernetes-healthcheck-{tag}-{test}-run'
 
       - sig_storage_serial
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     exclude:
       - tag: latest
         test: k8s_io
       - kube_bench_node
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-opnfv-functest-kubernetes-security-{tag}-{test}-run'
 
       - netperf
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-opnfv-functest-kubernetes-benchmarking-{tag}-{test}-run'
 
       - cnf_testsuite
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-kubernetes-opnfv-functest-kubernetes-cnf-{tag}-{test}-run'
 
index 9afca8f..23dcb51 100644 (file)
     volumes: '{volumes}'
     env: '{env}'
     network: '{network}'
+    uid: '{uid}'
+    gid: '{gid}'
     DASHBOARD_URL: '{DASHBOARD_URL}'
 
 - builder:
           else
             image={repo}:{port}/{container}:{tag}
           fi
-          mkdir -p $WORKSPACE/results
-          chown 1000:1000 $WORKSPACE/results
+          sudo mkdir -p $WORKSPACE/results
+          sudo chown {uid}:{gid} $WORKSPACE/results
           sudo docker run --rm \
             --privileged={privileged} \
             --network={network} \
       - tempest_horizon
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-pi-ollivier-functest-healthcheck-{tag}-{test}-run'
 
       - tempest_cyborg
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     exclude:
       - tag: latest
         test: refstack_defcore
       - tempest_slow_cntt
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-pi-ollivier-functest-smoke-cntt-{tag}-{test}-run'
 
       - shaker
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-pi-ollivier-functest-benchmarking-{tag}-{test}-run'
 
       - rally_jobs_cntt
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-pi-ollivier-functest-benchmarking-cntt-{tag}-{test}-run'
 
       - juju_epc
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-pi-ollivier-functest-vnf-{tag}-{test}-run'
 
index bb5de27..7d11727 100644 (file)
     volumes: '{volumes}'
     env: '{env}'
     network: '{network}'
+    uid: '{uid}'
+    gid: '{gid}'
     DASHBOARD_URL: '{DASHBOARD_URL}'
 
 - builder:
           else
             image={repo}:{port}/{container}:{tag}
           fi
-          mkdir -p $WORKSPACE/results
-          chown 1000:1000 $WORKSPACE/results
+          sudo mkdir -p $WORKSPACE/results
+          sudo chown {uid}:{gid} $WORKSPACE/results
           sudo docker run --rm \
             --privileged={privileged} \
             --network={network} \
       - tempest_horizon
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-opnfv-functest-healthcheck-{tag}-{test}-run'
 
       - tempest_cyborg
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     exclude:
       - tag: latest
         test: refstack_defcore
       - tempest_slow_cntt
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-opnfv-functest-smoke-cntt-{tag}-{test}-run'
 
       - shaker
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-opnfv-functest-benchmarking-{tag}-{test}-run'
 
       - rally_jobs_cntt
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-opnfv-functest-benchmarking-cntt-{tag}-{test}-run'
 
       - juju_epc
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'functest-opnfv-functest-vnf-{tag}-{test}-run'
 
index 7b16e84..3fbfaf0 100644 (file)
@@ -73,6 +73,8 @@
     volumes: '{volumes}'
     env: '{env}'
     network: '{network}'
+    uid: '{uid}'
+    gid: '{gid}'
 
 - builder:
     name: xtesting-pi-pull-containers
           else
             image={repo}:{port}/{container}:{tag}
           fi
-          mkdir -p $WORKSPACE/results
-          chown 1000:1000 $WORKSPACE/results
+          sudo mkdir -p $WORKSPACE/results
+          sudo chown {uid}:{gid} $WORKSPACE/results
           sudo docker run --rm \
             --privileged={privileged} \
             --network={network} \
       - eighth
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     exclude:
       - tag: leguer
         test: eighth
       - seventh
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'xtesting-pi-ollivier-xtesting-mts-{tag}-{test}-run'
 
index 0c75a83..193ec2d 100644 (file)
@@ -73,6 +73,8 @@
     volumes: '{volumes}'
     env: '{env}'
     network: '{network}'
+    uid: '{uid}'
+    gid: '{gid}'
 
 - builder:
     name: xtesting-pull-containers
           else
             image={repo}:{port}/{container}:{tag}
           fi
-          mkdir -p $WORKSPACE/results
-          chown 1000:1000 $WORKSPACE/results
+          sudo mkdir -p $WORKSPACE/results
+          sudo chown {uid}:{gid} $WORKSPACE/results
           sudo docker run --rm \
             --privileged={privileged} \
             --network={network} \
       - eighth
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     exclude:
       - tag: leguer
         test: eighth
       - seventh
     privileged: 'false'
     network: bridge
+    uid: 1000
+    gid: 1000
     jobs:
       - 'xtesting-opnfv-xtesting-mts-{tag}-{test}-run'