Merge pull request #65 from tomaspinho/master

Fix for issue #52 and potentially #62
sl1pm4t · Apr 23, 2020 · e8c0fd7 · e8c0fd7
2 parents 661e762 + c4f434f
commit e8c0fd7
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 1 deletion.
diff --git a/pkg/tfkschema/name_mapper.go b/pkg/tfkschema/name_mapper.go
@@ -21,6 +21,7 @@ func init() {
 	inflection.AddSingular("resources", "resources")
 	inflection.AddSingular("requests", "requests")
 	inflection.AddSingular("imagePullSecrets", "imagePullSecrets")
+	inflection.AddSingular("capabilities", "capabilities")
 
 	inflection.AddUncountable("data")
 	inflection.AddUncountable("metadata")

diff --git a/pkg/tfkschema/name_mapper_test.go b/pkg/tfkschema/name_mapper_test.go
@@ -234,7 +234,15 @@ func Test_NormalizeTerraformName(t *testing.T) {
 			},
 			"image_pull_secrets",
 		},
-
+		{
+			"capabilities",
+			args{
+				"capabilities",
+				true,
+				"",
+			},
+			"capabilities",
+		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {

diff --git a/test-fixtures/deployment.tf.golden b/test-fixtures/deployment.tf.golden
@@ -68,6 +68,12 @@ resource "kubernetes_deployment" "backend_api" {
           }
           termination_message_path = "/dev/termination-log"
           image_pull_policy        = "IfNotPresent"
+          security_context {
+            capabilities {
+              add  = ["NET_BIND_SERVICE"]
+              drop = ["ALL"]
+            }
+          }
         }
         container {
           name    = "api"

diff --git a/test-fixtures/deployment.yaml b/test-fixtures/deployment.yaml
@@ -66,6 +66,12 @@ spec:
               port: 443
             timeoutSeconds: 1
           resources: {}
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+              add:
+                - NET_BIND_SERVICE
           terminationMessagePath: /dev/termination-log
           terminationMessagePolicy: File
           volumeMounts: