Fix seccomp value in test

The seccomp value should be `2` rather than `1`. The test succeeded
because we also have the value `Seccomp_filters` which gets matched by
"ecc", too. We now check for "Seccomp:" to actually match the right
field.

Signed-off-by: Sascha Grunert <[email protected]>

pkg/validate/security_context_linux.go

@@ -681,6 +681,8 @@ var _ = framework.KubeDescribe("Security Context", func() {
 			}
 		})
 
+		const seccompField = "Seccomp:"
+
 		It("should support seccomp unconfined on the container", func() {
 			var containerID string
 			seccompProfile := &runtimeapi.SecurityProfile{ProfileType: runtimeapi.SecurityProfile_Unconfined}
@@ -689,7 +691,7 @@ var _ = framework.KubeDescribe("Security Context", func() {
 			podID, containerID = seccompTestContainer(rc, ic, seccompProfile)
 
 			By("verify seccomp profile")
-			verifySeccomp(rc, containerID, []string{"grep", "ecc", "/proc/self/status"}, false, "0") // seccomp disabled
+			verifySeccomp(rc, containerID, []string{"grep", seccompField, "/proc/self/status"}, false, "0") // seccomp disabled
 		})
 
 		It("should support seccomp localhost profile on the container", func() {
@@ -714,7 +716,7 @@ var _ = framework.KubeDescribe("Security Context", func() {
 			podID, containerID = seccompTestContainer(rc, ic, seccompProfile)
 
 			By("verify seccomp profile")
-			verifySeccomp(rc, containerID, []string{"grep", "ecc", "/proc/self/status"}, false, "1") // seccomp enabled
+			verifySeccomp(rc, containerID, []string{"grep", seccompField, "/proc/self/status"}, false, "2") // seccomp enabled
 		})
 
 		It("should support nil profile, which is unconfined", func() {
@@ -724,7 +726,7 @@ var _ = framework.KubeDescribe("Security Context", func() {
 			podID, containerID = seccompTestContainer(rc, ic, nil)
 
 			By("verify seccomp profile")
-			verifySeccomp(rc, containerID, []string{"grep", "ecc", "/proc/self/status"}, false, "0") // seccomp disabled
+			verifySeccomp(rc, containerID, []string{"grep", seccompField, "/proc/self/status"}, false, "0") // seccomp disabled
 		})
 
 		// SYS_ADMIN capability allows sethostname, and seccomp is unconfined. sethostname should work.