diff --git a/devstack/lib/kuryr_kubernetes b/devstack/lib/kuryr_kubernetes index 84f2acdb0..759257f94 100644 --- a/devstack/lib/kuryr_kubernetes +++ b/devstack/lib/kuryr_kubernetes @@ -1603,6 +1603,9 @@ function update_tempest_conf_file { iniset "$TEMPEST_CONFIG" kuryr_kubernetes test_services_without_selector True iniset "$TEMPEST_CONFIG" kuryr_kubernetes test_sctp_services True iniset "$TEMPEST_CONFIG" kuryr_kubernetes test_configurable_listener_timeouts True + if [[ "$KURYR_SUPPORT_POD_SECURITY" == "True" ]]; then + iniset "$TEMPEST_CONFIG" kuryr_kubernetes set_pod_security_context True + fi } function configure_neutron_defaults { diff --git a/devstack/settings b/devstack/settings index c4a0039bd..0ea9b1f32 100644 --- a/devstack/settings +++ b/devstack/settings @@ -96,3 +96,6 @@ KURYR_OVERCLOUD_VM_PORT=${KURYR_OVERCLOUD_VM_PORT:-port0} KURYR_IPV6=${KURYR_IPV6:-False} KURYR_DUAL_STACK=${KURYR_DUAL_STACK:-False} SUBNETPOOL_KURYR_NAME_V6=${SUBNETPOOL_KURYR_NAME_V6:-"shared-kuryr-subnetpool-v6"} + +# Support Pod Security Standards +KURYR_SUPPORT_POD_SECURITY=False