def _make_volume_mounts(self, app_spec):
volume_mounts = []
volume_mounts.append(
VolumeMount(name="{}-config".format(app_spec.name),
readOnly=True,
mountPath="/var/run/config/fiaas/"))
volume_mounts.append(
VolumeMount(name="tmp", readOnly=False, mountPath="/tmp"))
return volume_mounts
def _make_volume_mounts(self, app_spec, is_init_container=False):
volume_mounts = super(GenericInitSecrets, self)._make_volume_mounts(app_spec, is_init_container)
if is_init_container:
init_container_mounts = [
VolumeMount(name="{}-config".format(self.SECRETS_INIT_CONTAINER_NAME), readOnly=True,
mountPath="/var/run/config/{}/".format(self.SECRETS_INIT_CONTAINER_NAME)),
VolumeMount(name="{}-config".format(app_spec.name), readOnly=True, mountPath="/var/run/config/fiaas/"),
VolumeMount(name="tmp", readOnly=False, mountPath="/tmp"),
]
volume_mounts.extend(init_container_mounts)
return volume_mounts
def _create_pod():
object_meta = ObjectMeta(name=NAME,
namespace=NAMESPACE,
labels={
"test": "true",
"app": NAME
})
container_port = ContainerPort(name="http5000", containerPort=5000)
secrets_volume_mounts = [
VolumeMount(
name=NAME,
readOnly=True,
mountPath="/var/run/secrets/kubernetes.io/kubernetes-secrets")
]
secret_volumes = [
Volume(name=NAME, secret=SecretVolumeSource(secretName=NAME))
]
container = Container(name="container",
image="dummy_image",
ports=[container_port],
volumeMounts=secrets_volume_mounts)
image_pull_secret = LocalObjectReference(name="image_pull_secret")
pod_spec = PodSpec(containers=[container],
imagePullSecrets=[image_pull_secret],
volumes=secret_volumes,
serviceAccountName="default")
first = Pod(metadata=object_meta, spec=pod_spec)
return first
def test_lifecycle(self, logger):
object_meta = ObjectMeta(name=NAME, namespace=NAMESPACE, labels={"test": "true", "app": NAME})
container_port = ContainerPort(name="http5000", containerPort=5000)
secrets_volume_mounts = [VolumeMount(name=NAME, readOnly=True, mountPath="/var/run/secrets/kubernetes.io/kubernetes-secrets")]
secret_volumes = [Volume(name=NAME, secret=SecretVolumeSource(secretName=NAME))]
container = Container(name="container", image="dummy_image", ports=[container_port], volumeMounts=secrets_volume_mounts)
image_pull_secret = LocalObjectReference(name="image_pull_secret")
pod_spec = PodSpec(containers=[container], imagePullSecrets=[image_pull_secret],
volumes=secret_volumes, serviceAccountName="default")
first = Pod(metadata=object_meta, spec=pod_spec)
logger.debug(pformat(first.as_dict()))
first.save()
pods = Pod.find(NAME, NAMESPACE)
assert len(pods) == 1
second = pods[0]
assert first.metadata.name == second.metadata.name
assert first.metadata.namespace == second.metadata.namespace
def _make_volume_mounts(self, app_spec, is_init_container=False):
volume_mounts = [
VolumeMount(name="{}-secret".format(app_spec.name), readOnly=not is_init_container,
mountPath="/var/run/secrets/fiaas/"),
]
return volume_mounts