diff --git a/pkg/security/securitycontextconstraints/selinux/mustrunas_test.go b/pkg/security/securitycontextconstraints/selinux/mustrunas_test.go index 64828d625c6e..242cd4e470c4 100644 --- a/pkg/security/securitycontextconstraints/selinux/mustrunas_test.go +++ b/pkg/security/securitycontextconstraints/selinux/mustrunas_test.go @@ -79,9 +79,6 @@ func TestMustRunAsValidate(t *testing.T) { user := newValidOpts() user.User = "invalid" - level := newValidOpts() - level.Level = "invalid" - seType := newValidOpts() seType.Type = "invalid" @@ -102,15 +99,20 @@ func TestMustRunAsValidate(t *testing.T) { sccSeLinux: validOpts, expectedMsg: "user: Invalid value", }, - "invalid level": { - podSeLinux: level, - sccSeLinux: validOpts, + "levels are not equal": { + podSeLinux: newValidOptsWithLevel("s0"), + sccSeLinux: newValidOptsWithLevel("s0:c1,c2"), expectedMsg: "level: Invalid value", }, - "invalid type": { - podSeLinux: seType, - sccSeLinux: validOpts, - expectedMsg: "type: Invalid value", + "levels differ by sensitivity": { + podSeLinux: newValidOptsWithLevel("s0:c6"), + sccSeLinux: newValidOptsWithLevel("s1:c6"), + expectedMsg: "level: Invalid value", + }, + "levels differ by categories": { + podSeLinux: newValidOptsWithLevel("s0:c0,c8"), + sccSeLinux: newValidOptsWithLevel("s0:c1,c7"), + expectedMsg: "level: Invalid value", }, "valid": { podSeLinux: validOpts,