mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-12 10:56:54 +00:00
52 lines
2.6 KiB
YAML
52 lines
2.6 KiB
YAML
|
should-fail:
|
||
|
|
- description: Policy with backgound enabled and referencing user infos should be rejected
|
||
|
|
kubectl:
|
||
|
|
args:
|
||
|
|
- create
|
||
|
|
- -f
|
||
|
|
- test/conformance/manifests/should-fail/background-userinfo-1.yaml
|
||
|
|
expect:
|
||
|
|
exitcode: 1
|
||
|
|
stderr: >-
|
||
|
|
Error from server: error when creating "test/conformance/manifests/should-fail/background-userinfo-1.yaml":
|
||
|
|
admission webhook "validate-policy.kyverno.svc" denied the request: only select variables are allowed in background mode.
|
||
|
|
Set spec.background=false to disable background mode for this policy rule: variable "{{request.roles}} is not allowed
|
||
|
|
- description: Policy with backgound enabled and referencing user infos should be rejected
|
||
|
|
kubectl:
|
||
|
|
args:
|
||
|
|
- create
|
||
|
|
- -f
|
||
|
|
- test/conformance/manifests/should-fail/background-userinfo-2.yaml
|
||
|
|
expect:
|
||
|
|
exitcode: 1
|
||
|
|
stderr: >-
|
||
|
|
Error from server: error when creating "test/conformance/manifests/should-fail/background-userinfo-2.yaml":
|
||
|
|
admission webhook "validate-policy.kyverno.svc" denied the request:
|
||
|
|
only select variables are allowed in background mode.
|
||
|
|
Set spec.background=false to disable background mode for this policy rule:
|
||
|
|
invalid variable used at path: spec/rules[0]/match/clusterRoles
|
||
|
|
- description: Policy with backgound enabled and referencing user infos should be rejected
|
||
|
|
kubectl:
|
||
|
|
args:
|
||
|
|
- create
|
||
|
|
- -f
|
||
|
|
- test/conformance/manifests/should-fail/background-userinfo-3.yaml
|
||
|
|
expect:
|
||
|
|
exitcode: 1
|
||
|
|
stderr: >-
|
||
|
|
Error from server: error when creating "test/conformance/manifests/should-fail/background-userinfo-3.yaml":
|
||
|
|
admission webhook "validate-policy.kyverno.svc" denied the request: only select variables are allowed in background mode.
|
||
|
|
Set spec.background=false to disable background mode for this policy rule: variable "{{request.userInfo}} is not allowed
|
||
|
|
- description: Policy with backgound enabled and referencing user infos should be rejected
|
||
|
|
kubectl:
|
||
|
|
args:
|
||
|
|
- create
|
||
|
|
- -f
|
||
|
|
- test/conformance/manifests/should-fail/background-userinfo-4.yaml
|
||
|
|
expect:
|
||
|
|
exitcode: 1
|
||
|
|
stderr: >-
|
||
|
|
Error from server: error when creating "test/conformance/manifests/should-fail/background-userinfo-4.yaml":
|
||
|
|
admission webhook "validate-policy.kyverno.svc" denied the request: only select variables are allowed in background mode.
|
||
|
|
Set spec.background=false to disable background mode for this policy rule: variable "{{serviceAccountName}} is not allowed
|