diff --git a/config/jobs/kubernetes/sig-security/govulncheck-presubmit.yaml b/config/jobs/kubernetes/sig-security/govulncheck-presubmit.yaml new file mode 100644 index 000000000000..d2927960f470 --- /dev/null +++ b/config/jobs/kubernetes/sig-security/govulncheck-presubmit.yaml @@ -0,0 +1,32 @@ +presubmits: + ArkaSaha30/kubernetes: + - name: check-govulncheck-results + decorate: true + decoration_config: + timeout: 15m + branches: + - govulncheck-script + path_alias: k8s.io/kubernetes + always_run: false + optional: true + run_if_changed: '^(go.mod|go.sum|vendor)' + spec: + containers: + - image: golang + command: + - /bin/bash + args: + - -c + - | + ./hack/verify-govulncheck.sh + resources: + limits: + cpu: 2 + memory: 4Gi + requests: + cpu: 2 + memory: 4Gi + annotations: + testgrid-create-test-group: "true" + testgrid-dashboards: sig-security-govulncheck-presubmit + description: Runs `govulncheck` for PRs related to go module changes diff --git a/config/testgrids/kubernetes/sig-security/config.yaml b/config/testgrids/kubernetes/sig-security/config.yaml index 21a3c8eeaabe..e734537668aa 100644 --- a/config/testgrids/kubernetes/sig-security/config.yaml +++ b/config/testgrids/kubernetes/sig-security/config.yaml @@ -6,6 +6,7 @@ dashboard_groups: - sig-security-cvelist-public - sig-security-snyk-scan - sig-security-cve-feed + - sig-security-govulncheck-presubmit # Dashboards # @@ -13,3 +14,4 @@ dashboards: - name: sig-security-cvelist-public - name: sig-security-snyk-scan - name: sig-security-cve-feed +- name: sig-security-govulncheck-presubmit diff --git a/prow/pj-on-kind.sh b/prow/pj-on-kind.sh index a145ab8d06df..f77cc60f43e9 100755 --- a/prow/pj-on-kind.sh +++ b/prow/pj-on-kind.sh @@ -46,9 +46,9 @@ function parseArgs() { job="${1:-}" config="${CONFIG_PATH:-}" job_config_path="${JOB_CONFIG_PATH:-}" - out_dir="${OUT_DIR:-/mnt/disks/prowjob-out}" + out_dir="${OUT_DIR:-/Users/arkas1/Documents/mnt/disks/prowjob-out}" kind_config="${KIND_CONFIG:-}" - node_dir="${NODE_DIR:-/mnt/disks/kind-node}" # Any pod hostPath mounts should be under this dir to reach the true host via the kind node. + node_dir="${NODE_DIR:-/Users/arkas1/Documents/mnt/disks/kind-node}" # Any pod hostPath mounts should be under this dir to reach the true host via the kind node. local new_only=" (Only used when creating a new kind cluster.)" echo "job=${job}" diff --git a/temp-mkpod-kind-config.yaml b/temp-mkpod-kind-config.yaml new file mode 100644 index 000000000000..dd2d5c1a7ae0 --- /dev/null +++ b/temp-mkpod-kind-config.yaml @@ -0,0 +1,9 @@ +kind: Cluster +apiVersion: kind.x-k8s.io/v1alpha4 +nodes: + - extraMounts: + - containerPath: /Users/arkas1/Documents/mnt/disks/prowjob-out + hostPath: /Users/arkas1/Documents/mnt/disks/prowjob-out + # host <-> node mount for hostPath volumes in Pods. (All hostPaths should be under /Users/arkas1/Documents/mnt/disks/kind-node to reach the host.) + - containerPath: /Users/arkas1/Documents/mnt/disks/kind-node + hostPath: /Users/arkas1/Documents/mnt/disks/kind-node