mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 17:37:12 +00:00
17 lines
642 B
Markdown
17 lines
642 B
Markdown
|
## Description
|
||
|
|
|
||
|
|
This test makes sure that policy exception matches `Pod/epehemeralcontainers` resource by default in case it matches Pods.
|
||
|
|
|
||
|
|
## Expected Behavior
|
||
|
|
1. Create a policy that matches Pods and restrict setting `runAsNonRoot` to `true`.
|
||
|
|
|
||
|
|
2. Create an exception that excludes Pods from the policy.
|
||
|
|
|
||
|
|
3. Create a Pod that violates the policy. It is expected that the Pod will be created successfully as it matches the exception.
|
||
|
|
|
||
|
|
4. Run `kubectl debug` command to attach to the Pod. It is expected that the command will run successfully since exceptions match `Pod/ephemeralcontainers` resource by default.
|
||
|
|
|
||
|
|
## Reference Issue(s)
|
||
|
|
|
||
|
|
#9484
|