Merge readOnlyRootFilesystem, runAsnonRoot, and allowPrivilegeEscalation in one test

Author: kabicin

bundle/tests/scorecard/kuttl/security-context/01-assert.yaml

@@ -12,7 +12,9 @@ spec:
       containers:
       - name: app
         securityContext:
+          allowPrivilegeEscalation: true
           readOnlyRootFilesystem: true
+          runAsNonRoot: false
 status:
   replicas: 1
   readyReplicas: 1

bundle/tests/scorecard/kuttl/security-context/02-run-as-non-root-override.yaml renamed to bundle/tests/scorecard/kuttl/security-context/01-override.yaml

@@ -6,4 +6,6 @@ spec:
   applicationImage: k8s.gcr.io/pause:2.0
   replicas: 1
   securityContext:
+    allowPrivilegeEscalation: true
+    readOnlyRootFilesystem: true
     runAsNonRoot: false

bundle/tests/scorecard/kuttl/security-context/01-read-only-fs-override.yaml

@@ -12,7 +12,7 @@ spec:
       containers:
       - name: app
         securityContext:
-          runAsNonRoot: false
+          privileged: true
 status:
   replicas: 1
   readyReplicas: 1

bundle/tests/scorecard/kuttl/security-context/02-assert.yaml

@@ -12,7 +12,10 @@ spec:
       containers:
       - name: app
         securityContext:
-          allowPrivilegeEscalation: true
+          capabilities:
+            add:
+              - NET_ADMIN
+              - SYS_TIME
 status:
   replicas: 1
   readyReplicas: 1

bundle/tests/scorecard/kuttl/security-context/04-privileged-override.yaml renamed to bundle/tests/scorecard/kuttl/security-context/02-privileged-override.yaml

@@ -12,8 +12,14 @@ spec:
       containers:
       - name: app
         securityContext:
-          privileged: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          privileged: false
+          readOnlyRootFilesystem: false
+          runAsNonRoot: true
 status:
   replicas: 1
   readyReplicas: 1
-  availableReplicas: 1
+  updatedReplicas: 1