Test pod for Rook NFS-SSSD prototype

nfs-test-pod.yaml

# This pod is configured to get user information from SSSD
# Mount an NFS export to the pod as the root user, and set permissions as desired
# Use `su $user` to switch to other users (like 'maintainer') for testing export controls
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nfs-test-pod
  namespace: rook-ceph # namespace:cluster
  labels:
    app: nfs-test-pod
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nfs-test-pod
  template:
    metadata:
      labels:
        app: nfs-test-pod
    spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
        - name: nfs-test-pod
          image: quay.io/brgardne/sssd:latest
          command:
            - bash
            - -c
            - |
              set -ex

              # install nfs client
              yum install -y nfs-utils

              # start sssd process in background
              sssd --daemon --logger=files

              # keep the pod running so we can exec into it for testing
              sleep infinity
          imagePullPolicy: IfNotPresent
          tty: true
          securityContext:
            privileged: true
          resources: {}
          volumeMounts:
            - mountPath: /etc/sssd/conf.d
              name: sssd-config
      volumes:
        - name: sssd-config
          configMap:
            name: sssd-config
            defaultMode: 0600 # required