kyverno/test/scenarios/samples/best_practices/disallow_priviledged.yaml

# file path relative to project root
input:
  policy: test/best_practices/disallow_privileged.yaml
  resource: test/resources/disallow_privileged.yaml
expected:
  validation:
    policyresponse:
      policy:
        namespace: ''
        name: disallow-privileged
      resource:
        kind: Pod
        apiVersion: v1
        namespace: ''
        name: check-privileged-cfg
      rules:
        - name: validate-privileged
          type: Validation
          status: fail
        - name: validate-allowPrivilegeEscalation
          type: Validation
          status: fail