Merge pull request #58 from AlonaKaplan/psa_seccomp

Run kubevirt lane with KUBEVIRT_PSA=true
kubevirt · Mar 13, 2023 · 08810ac · 08810ac
2 parents 0c80f72 + 2bc3acc
commit 08810ac
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 1 deletion.
diff --git a/cluster/sync.sh b/cluster/sync.sh
@@ -50,5 +50,10 @@ pods_ready_wait() {
   fi
 }
 
+enable_psa_feature_gate() {
+  ./cluster/kubectl.sh apply -f ./hack/psa/kubevirt.yaml
+}
+
 pods_ready_wait
 make create-nodeport
+enable_psa_feature_gate
diff --git a/cluster/up.sh b/cluster/up.sh
@@ -18,7 +18,7 @@ set -ex pipefail
 
 export DEPLOY_CNAO=${DEPLOY_CNAO:-true}
 export DEPLOY_KUBEVIRT=${DEPLOY_KUBEVIRT:-true}
-export KUBEVIRT_PSA=${KUBEVIRT_PSA:-false}
+export KUBEVIRT_PSA=${KUBEVIRT_PSA:-true}
 
 source ./cluster/cluster.sh
 

diff --git a/hack/psa/kubevirt.yaml b/hack/psa/kubevirt.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: kubevirt.io/v1
+kind: KubeVirt
+metadata:
+  name: kubevirt
+  namespace: kubevirt
+spec:
+  configuration:
+    developerConfiguration:
+      featureGates:
+        - KubevirtSeccompProfile
+    seccompConfiguration:
+      virtualMachineInstanceProfile:
+        customProfile:
+          localhostProfile: kubevirt/kubevirt.json