chore: fix chainsaw exec timeout issue (#9013)

* chore: fix chainsaw timeouts issues

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* exec timeout

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* bump chainsaw

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix cleanup

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* custom sigstore fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* mutate

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

.github/workflows/conformance.yaml

@@ -147,7 +147,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -217,7 +217,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -287,7 +287,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -359,7 +359,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -429,7 +429,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -505,7 +505,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -580,7 +580,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -674,7 +674,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:
@@ -748,7 +748,7 @@ jobs:
       - name: Install Chainsaw
         uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
         with:
-          release: v0.0.7-alpha.2
+          release: v0.0.7-alpha.3
       - name: Test with Chainsaw
         shell: bash
         env:

test/conformance/chainsaw/_config/common.yaml

@@ -7,7 +7,6 @@ spec:
     assert: 90s
     cleanup: 150s
     error: 90s
-    exec: 150s
   parallel: 1
   fullName: true
   failFast: false

test/conformance/chainsaw/cleanup/clusterpolicy/cleanup-pod/04-sleep.yaml

@@ -11,3 +11,4 @@ spec:
       args:
       - "65"
       entrypoint: sleep
+    timeout: 90s

test/conformance/chainsaw/cleanup/clusterpolicy/context-cleanup-pod/04-sleep.yaml

@@ -7,7 +7,6 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 5
-      - "5"
+    timeout: 10s
-      entrypoint: sleep

test/conformance/chainsaw/cleanup/policy/cleanup-pod/04-sleep.yaml

@@ -11,3 +11,4 @@ spec:
       args:
       - "65"
       entrypoint: sleep
+    timeout: 90s

test/conformance/chainsaw/custom-sigstore/standard/basic/03-goodpod.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: chainsaw.kyverno.io/v1alpha1
-kind: TestStep
-metadata:
-  creationTimestamp: null
-  name: goodpod
-spec:
-  timeouts: {}
-  try:
-  - command:
-      args:
-      - -n
-      - test-custom-sigstore
-      - run
-      - test-sigstore
-      - --image=$TEST_IMAGE_URL
-      entrypoint: kubectl

test/conformance/chainsaw/custom-sigstore/standard/basic/chainsaw-test.yaml

@@ -0,0 +1,20 @@
+apiVersion: chainsaw.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: basic
+spec:
+  concurrent: false
+  namespace: foo
+  steps:
+  - try:
+    - apply:
+        file: policy.yaml
+    - assert:
+        file: policy-assert.yaml
+    - script:
+        content: kubectl run -n $NAMESPACE test-sigstore --image=$TEST_IMAGE_URL
+    - assert:
+        file: pod-assert.yaml
+    finally:
+    - script:
+        content: sleep 3

test/conformance/chainsaw/custom-sigstore/standard/basic/pod-assert.yaml

@@ -2,4 +2,3 @@ apiVersion: v1
 kind: Pod
 metadata:
   name: test-sigstore
-  namespace: test-custom-sigstore

test/conformance/chainsaw/custom-sigstore/standard/basic/policy.yaml

@@ -1,8 +1,3 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: test-custom-sigstore
----
 apiVersion: kyverno.io/v1
 kind: ClusterPolicy
 metadata:

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-list-sync-same-trigger-source-delete-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-list-sync-same-trigger-source-update-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-role-and-rolebinding/99-cleanup.yaml

@@ -1,18 +0,0 @@
----
-apiVersion: chainsaw.kyverno.io/v1alpha1
-kind: TestStep
-metadata:
-  creationTimestamp: null
-  name: cleanup
-spec:
-  timeouts: {}
-  try:
-  - command:
-      args:
-      - delete
-      - -f
-      - 01-manifests.yaml,02-ns.yaml
-      - --force
-      - --wait=true
-      - --ignore-not-found=true
-      entrypoint: kubectl

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-source-name-exceeds-63-characters/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-source-name-exceeds-63-characters/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-sync-same-trigger-source-delete-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-sync-same-trigger-source-update-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-create-on-trigger-deletion/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-sync-reinstall-policy/07-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-sync-reinstall-policy/10-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-sync-single-source-multiple-triggers-targets/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-sync-single-trigger-source-multiple-targets/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-data-create-on-trigger-deletion/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-data-sync-remove-list-element/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-data-sync-to-nosync-delete-rule/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/data-role-and-rolebinding/99-cleanup.yaml

@@ -1,18 +0,0 @@
----
-apiVersion: chainsaw.kyverno.io/v1alpha1
-kind: TestStep
-metadata:
-  creationTimestamp: null
-  name: cleanup
-spec:
-  timeouts: {}
-  try:
-  - command:
-      args:
-      - delete
-      - -f
-      - 01-manifests.yaml,02-ns.yaml
-      - --force
-      - --wait=true
-      - --ignore-not-found=true
-      entrypoint: kubectl

test/conformance/chainsaw/generate/clusterpolicy/cornercases/pod-restart-on-cm-update/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/cornercases/trigger-resource-name-exceeds-63-characters/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-create/02-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-downstream/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-downstream/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-source/04-forcesleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-trigger/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-modify-downstream/04-forcesleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-modify-source/04-forcesleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-list-sync-delete-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-downstream/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-downstream/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-policy/00-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-policy/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-policy/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-rule/00-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-source/00-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-trigger/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-existing-update-trigger-no-precondition/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-existing-update-trigger-no-precondition/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-modify-downstream-apply/00-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-modify-downstream/00-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-no-existing-update-trigger-no-precondition/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-delete-downstream/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-delete-policy/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-delete-trigger/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/generate-on-subresource-trigger/99-cleanup.yaml

@@ -16,6 +16,7 @@ spec:
       - --wait=true
       - --ignore-not-found=true
       entrypoint: kubectl
+    timeout: 30s
   - command:
       args:
       - delete
@@ -26,6 +27,7 @@ spec:
       - --wait=true
       - --ignore-not-found=true
       entrypoint: kubectl
+    timeout: 30s
   - command:
       args:
       - delete
@@ -36,6 +38,7 @@ spec:
       - --wait=true
       - --ignore-not-found=true
       entrypoint: kubectl
+    timeout: 30s
   - command:
       args:
       - delete
@@ -44,3 +47,4 @@ spec:
       - --wait=true
       - --ignore-not-found=true
       entrypoint: kubectl
+    timeout: 30s

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-downstream/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-one-trigger/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-rule/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-trigger/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-existing-update-trigger-no-precondition/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-modify-downstream/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-modify-policy/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-no-existing-update-trigger-no-precondition/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/existing/existing-basic-add-rule-data/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/existing/existing-basic-add-rule-data/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/existing/existing-basic-create-policy-data/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/clusterpolicy/standard/existing/existing-basic-create-policy-preconditions-data/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/cornercases/pol-clone-create-on-trigger-deletion/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/cornercases/pol-data-create-on-trigger-deletion/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-downstream/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-downstream/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-policy/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-rule/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-trigger/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-modify-downstream/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-modify-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-downstream/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-policy/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-policy/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-rule/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-source/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-trigger/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-modify-downstream/06-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-downstream/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-policy/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-rule/02-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-trigger/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-modify-downstream/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-modify-rule/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-update-trigger-no-match/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-downstream/04-sleep.yaml

@@ -7,7 +7,6 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 6
-      - "6"
+    timeout: 10s
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-policy/04-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-rule/05-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep

test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-trigger/03-sleep.yaml

@@ -7,7 +7,5 @@ metadata:
 spec:
   timeouts: {}
   try:
-  - command:
+  - script:
-      args:
+      content: sleep 3
-      - "3"
-      entrypoint: sleep