ConfigMap [Conformance] tests fail with recommended admission-control settings #25839
Closed
Description
Either the recommended / default admission-control settings are wrong, or the following ConfigMap tests need to get kicked out of [Conformance]
• Failure [8.943 seconds]
ConfigMap
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/configmap.go:202
should be consumable from pods in volume as non-root [Conformance] [It]
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/configmap.go:40
May 18 15:27:22.273: Failed to create pod: pods "pod-configmaps-b07b6fb0-1d47-11e6-9b88-a45e60eb55a3" is forbidden: pod.Spec.SecurityContext.RunAsUser is forbidden
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/util.go:1685
• Failure [8.411 seconds]
ConfigMap
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/configmap.go:202
should be consumable from pods in volume with mappings as non-root [Conformance] [It]
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/configmap.go:52
May 18 15:27:38.958: Failed to create pod: pods "pod-configmaps-ba6d6ed7-1d47-11e6-ad85-a45e60eb55a3" is forbidden: pod.Spec.SecurityContext.RunAsUser is forbidden
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/util.go:1685
What caused SecurityContextDeny to be placed in the recommended list in the first place?
/cc @kubernetes/sig-testing