mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity

chore: fix chainsaw tests cleanup timeout (#9028)

Browse source 
* chore: fix chainsaw tests cleanup timeout

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* bump chainsaw

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* grace

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* checks

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* bump chainsaw

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix deletes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix exceptions

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2023-11-28 02:02:32 +01:00 committed by GitHub
parent 4c275bca05
commit 426525be37
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
150 changed files with 664 additions and 470 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
.github/workflows/conformance.yaml vendored
View file

@ -147,7 +147,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -217,7 +217,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -287,7 +287,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -359,7 +359,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -429,7 +429,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -505,7 +505,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -580,7 +580,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -674,7 +674,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:
@ -748,7 +748,7 @@ jobs:
- name: Install Chainsaw
uses: kyverno/chainsaw/.github/actions/install@c08ae80bc45546987edff33212bf33161c84ce59 # v0.0.6
with:
release: v0.0.7-alpha.3
release: v0.0.7-alpha.5
- name: Test with Chainsaw
shell: bash
env:

2
test/conformance/chainsaw/_config/common.yaml
View file

@ -5,9 +5,9 @@ metadata:
spec:
timeouts:
assert: 90s
cleanup: 150s
error: 90s
parallel: 1
fullName: true
failFast: false
excludeTestRegex: '_.+'
forceTerminationGracePeriod: 5s

5
test/conformance/chainsaw/cleanup/validation/cron-format/03-invalidpolicy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: invalidpolicy.yaml

15
test/conformance/chainsaw/cleanup/validation/no-user-info-in-match/01-cleanuppolicy.yaml
View file

@ -8,14 +8,17 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: cleanuppolicy-with-subjects.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: cleanuppolicy-with-roles.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: cleanuppolicy-with-clusterroles.yaml

10
test/conformance/chainsaw/cleanup/validation/not-supported-attributes-in-context/01-cleanup-policy.yaml
View file

@ -8,10 +8,12 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: cleanuppolicy-with-image-registry.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: cleanuppolicy-with-configmap.yaml

5
test/conformance/chainsaw/deferred/dependencies/02-testcase.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: deploy.yaml

5
test/conformance/chainsaw/events/policy/policy-violation/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/exceptions/allows-rejects-creation/03-configmap.yaml
View file

@ -10,8 +10,9 @@ spec:
- apply:
file: configmap-allowed.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: configmap-rejected.yaml
- assert:
file: configmap-allowed.yaml

9
test/conformance/chainsaw/exceptions/applies-to-delete/05-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: apps/v1
kind: Deployment
name: test-dpl1
namespace: reza-dev
ref:
apiVersion: apps/v1
kind: Deployment
name: test-dpl1
namespace: reza-dev

5
test/conformance/chainsaw/exceptions/background-mode/standard/01-exception.yaml
View file

@ -10,8 +10,9 @@ spec:
- apply:
file: exception-allowed.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: exception-rejected.yaml
- assert:
file: exception-allowed.yaml

9
test/conformance/chainsaw/exceptions/conditions/03-deployment.yaml
View file

@ -10,6 +10,11 @@ spec:
- apply:
file: good-deployment.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: bad-deployment.yaml
finally:
- script:
content: sleep 5
timeout: 10s

13
test/conformance/chainsaw/exceptions/conditions/04-sleep.yaml
View file

@ -1,13 +0,0 @@
---
apiVersion: chainsaw.kyverno.io/v1alpha1
kind: TestStep
metadata:
creationTimestamp: null
name: sleep
spec:
timeouts: {}
try:
- command:
args:
- "4"
entrypoint: sleep

5
test/conformance/chainsaw/exceptions/only-for-specific-user/03-configmap.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: configmap.yaml

5
test/conformance/chainsaw/exceptions/with-wildcard/03-configmap.yaml
View file

@ -10,8 +10,9 @@ spec:
- apply:
file: configmap-allowed.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: configmap-rejected.yaml
- assert:
file: configmap-allowed.yaml

5
test/conformance/chainsaw/filter/exclude/sa/no-wildcard/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/filter/exclude/sa/wildcard/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/filter/exclude/user/no-wildcard/block/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/filter/exclude/user/wildcard/block/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/filter/match/user/no-wildcard/block/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/filter/match/user/wildcard/block/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

5
test/conformance/chainsaw/flags/standard/emit-events/03-resource.yaml
View file

@ -10,6 +10,7 @@ spec:
- apply:
file: resource.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource-fail.yaml

9
test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-list-sync-same-trigger-source-delete-source/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: mysecret
namespace: clone-list-sync-same-trigger-source-trigger-ns
ref:
apiVersion: v1
kind: Secret
name: mysecret
namespace: clone-list-sync-same-trigger-source-trigger-ns

9
test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-source-name-exceeds-63-characters/04-delete-source.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcred
namespace: default
ref:
apiVersion: v1
kind: Secret
name: regcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcredregcred
namespace: default

9
test/conformance/chainsaw/generate/clusterpolicy/cornercases/clone-sync-same-trigger-source-delete-source/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: mysecret
namespace: clone-sync-same-trigger-source-trigger-ns
ref:
apiVersion: v1
kind: Secret
name: mysecret
namespace: clone-sync-same-trigger-source-trigger-ns

7
test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-create-on-trigger-deletion/02-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Namespace
name: cpol-clone-create-on-trigger-deletion-trigger-ns
ref:
apiVersion: v1
kind: Namespace
name: cpol-clone-create-on-trigger-deletion-trigger-ns

7
test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-clone-sync-reinstall-policy/04-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-clone-sync-reinstall-policy
ref:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-clone-sync-reinstall-policy

9
test/conformance/chainsaw/generate/clusterpolicy/cornercases/cpol-data-create-on-trigger-deletion/02-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-create-on-trigger-deletion-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-create-on-trigger-deletion-ns

9
test/conformance/chainsaw/generate/clusterpolicy/cornercases/trigger-resource-name-exceeds-63-characters/04-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: my-configmapmy-configmapmy-configmapmy-configmapmy-configmapmy-configmap
namespace: trigger-resource-name-exceeds-63-characters-ns
ref:
apiVersion: v1
kind: ConfigMap
name: my-configmapmy-configmapmy-configmapmy-configmapmy-configmapmy-configmap
namespace: trigger-resource-name-exceeds-63-characters-ns

9
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-downstream/04-delete-secret.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcred
namespace: cpol-clone-nosync-delete-downstream-ns
ref:
apiVersion: v1
kind: Secret
name: regcred
namespace: cpol-clone-nosync-delete-downstream-ns

7
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-policy/03-removepolicy.yaml
View file

@ -10,6 +10,7 @@ spec:
- assert:
file: check.yaml
- delete:
apiVersion: kyverno.io/v2beta1
kind: ClusterPolicy
name: cpol-nosync-clone-delete-policy
ref:
apiVersion: kyverno.io/v2beta1
kind: ClusterPolicy
name: cpol-nosync-clone-delete-policy

7
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-source/03-deletesource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcred
ref:
apiVersion: v1
kind: Secret
name: regcred

9
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/nosync/cpol-clone-nosync-delete-trigger/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-clone-nosync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-clone-nosync-delete-trigger-ns

7
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-list-sync-delete-source/03-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Namespace
name: cpol-clone-list-sync-delete-source-trigger-ns-1
ref:
apiVersion: v1
kind: Namespace
name: cpol-clone-list-sync-delete-source-trigger-ns-1

9
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-downstream/04-delete-secret.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcred
namespace: cpol-clone-sync-delete-downstream-ns
ref:
apiVersion: v1
kind: Secret
name: regcred
namespace: cpol-clone-sync-delete-downstream-ns

7
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-policy/04-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v2beta1
kind: ClusterPolicy
name: cpol-clone-sync-delete-policy
ref:
apiVersion: kyverno.io/v2beta1
kind: ClusterPolicy
name: cpol-clone-sync-delete-policy

9
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-source/03-deletesource.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcred
namespace: cpol-clone-sync-delete-source-ns
ref:
apiVersion: v1
kind: Secret
name: regcred
namespace: cpol-clone-sync-delete-source-ns

9
test/conformance/chainsaw/generate/clusterpolicy/standard/clone/sync/cpol-clone-sync-delete-trigger/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-clone-sync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-clone-sync-delete-trigger-ns

9
test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-delete-downstream/04-downstream-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: cpol-data-nosync-delete-downstream-ns
ref:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: cpol-data-nosync-delete-downstream-ns

7
test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-delete-policy/03-delete-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-data-nosync-delete-policy-policy
ref:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-data-nosync-delete-policy-policy

9
test/conformance/chainsaw/generate/clusterpolicy/standard/data/nosync/cpol-data-nosync-delete-trigger/04-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-data-nosync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-data-nosync-delete-trigger-ns

9
test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-downstream/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: cpol-data-sync-delete-downstream-ns
ref:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: cpol-data-sync-delete-downstream-ns

9
test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-one-trigger/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: foosource-1
namespace: cpol-data-sync-delete-one-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: foosource-1
namespace: cpol-data-sync-delete-one-trigger-ns

7
test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-policy/04-policy-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-data-sync-delete-policy
ref:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-data-sync-delete-policy

9
test/conformance/chainsaw/generate/clusterpolicy/standard/data/sync/cpol-data-sync-delete-trigger/02-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-data-sync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: cpol-data-sync-delete-trigger-ns

9
test/conformance/chainsaw/generate/policy/cornercases/pol-clone-create-on-trigger-deletion/02-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: pol-clone-create-on-trigger-deletion-configmap
namespace: pol-clone-create-on-trigger-deletion-ns
ref:
apiVersion: v1
kind: ConfigMap
name: pol-clone-create-on-trigger-deletion-configmap
namespace: pol-clone-create-on-trigger-deletion-ns

9
test/conformance/chainsaw/generate/policy/cornercases/pol-data-create-on-trigger-deletion/02-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-create-on-trigger-deletion-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-create-on-trigger-deletion-ns

9
test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-downstream/04-delete-downstream.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: newsecret
namespace: default
ref:
apiVersion: v1
kind: Secret
name: newsecret
namespace: default

9
test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-policy/03-delete-policy.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v2beta1
kind: Policy
name: pol-clone-nosync-delete-policy
namespace: default
ref:
apiVersion: kyverno.io/v2beta1
kind: Policy
name: pol-clone-nosync-delete-policy
namespace: default

9
test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-source/03-delete-source.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcred
namespace: default
ref:
apiVersion: v1
kind: Secret
name: regcred
namespace: default

9
test/conformance/chainsaw/generate/policy/standard/clone/nosync/pol-clone-nosync-delete-trigger/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-clone-nosync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-clone-nosync-delete-trigger-ns

9
test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-policy/04-delete-policy.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v2beta1
kind: Policy
name: pol-clone-sync-delete-policy
namespace: default
ref:
apiVersion: kyverno.io/v2beta1
kind: Policy
name: pol-clone-sync-delete-policy
namespace: default

9
test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-source/03-deletesource.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: Secret
name: regcred
namespace: pol-clone-sync-delete-source
ref:
apiVersion: v1
kind: Secret
name: regcred
namespace: pol-clone-sync-delete-source

9
test/conformance/chainsaw/generate/policy/standard/clone/sync/pol-clone-sync-delete-trigger/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-clone-sync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-clone-sync-delete-trigger-ns

5
test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-create-policy-invalid/01-create.yaml
View file

@ -10,6 +10,7 @@ spec:
- apply:
file: ns.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

9
test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-downstream/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: hammer
ref:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: hammer

9
test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-policy/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v1
kind: Policy
name: pol-data-nosync-delete-policy-policy
namespace: manta
ref:
apiVersion: kyverno.io/v1
kind: Policy
name: pol-data-nosync-delete-policy-policy
namespace: manta

9
test/conformance/chainsaw/generate/policy/standard/data/nosync/pol-data-nosync-delete-trigger/04-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-data-nosync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-data-nosync-delete-trigger-ns

9
test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-downstream/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: exeter
ref:
apiVersion: v1
kind: ConfigMap
name: zk-kafka-address
namespace: exeter

9
test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-policy/03-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v1
kind: Policy
name: pol-data-sync-delete-policy-policy
namespace: manasis
ref:
apiVersion: kyverno.io/v1
kind: Policy
name: pol-data-sync-delete-policy-policy
namespace: manasis

9
test/conformance/chainsaw/generate/policy/standard/data/sync/pol-data-sync-delete-trigger/05-delete.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-data-sync-delete-trigger-ns
ref:
apiVersion: v1
kind: ConfigMap
name: test-org
namespace: pol-data-sync-delete-trigger-ns

15
test/conformance/chainsaw/generate/validation/clusterpolicy/cloneList/02-check.yaml
View file

@ -10,14 +10,17 @@ spec:
- apply:
file: policy-pass.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-1.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-2.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-3.yaml

10
test/conformance/chainsaw/generate/validation/clusterpolicy/immutable-clone/02-update.yaml
View file

@ -8,10 +8,12 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-name.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-namespace.yaml

15
test/conformance/chainsaw/generate/validation/clusterpolicy/immutable-clonelist/02-update.yaml
View file

@ -8,14 +8,17 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-ns.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-kinds.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-selector.yaml

20
test/conformance/chainsaw/generate/validation/clusterpolicy/immutable-downstream/02-update.yaml
View file

@ -8,18 +8,22 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-name.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-apiversion.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-namespace.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-kind.yaml

20
test/conformance/chainsaw/generate/validation/clusterpolicy/immutable-rule-spec/02-update.yaml
View file

@ -8,20 +8,24 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-name.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-match.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-exclude.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-preconditions.yaml
- apply:
file: update-rule-generate-synchronize.yaml

5
test/conformance/chainsaw/generate/validation/clusterpolicy/permissions/no-permission/01-fail-no-permission.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

7
test/conformance/chainsaw/generate/validation/clusterpolicy/permissions/no-permission/04-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-validate-create-sa-permission
ref:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
name: cpol-validate-create-sa-permission

10
test/conformance/chainsaw/generate/validation/clusterpolicy/permissions/same-kind/03-check.yaml
View file

@ -12,10 +12,12 @@ spec:
- apply:
file: policy-1-subresource.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-2.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-2-subresource.yaml

10
test/conformance/chainsaw/generate/validation/clusterpolicy/target-namespace-scope/02-check.yaml
View file

@ -8,12 +8,14 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-1-no-ns-namespaced-target.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-2-ns-cluster-target.yaml
- apply:
file: policy-pass-1-ns-namespaced-target.yaml

15
test/conformance/chainsaw/generate/validation/policy/cloneList/02-check.yaml
View file

@ -10,14 +10,17 @@ spec:
- apply:
file: policy-pass.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-1.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-2.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-3.yaml

10
test/conformance/chainsaw/generate/validation/policy/immutable-clone/02-update.yaml
View file

@ -8,10 +8,12 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-namespace.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-name.yaml

15
test/conformance/chainsaw/generate/validation/policy/immutable-clonelist/02-update.yaml
View file

@ -8,14 +8,17 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-ns.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-kinds.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-selector.yaml

20
test/conformance/chainsaw/generate/validation/policy/immutable-downstream/02-update.yaml
View file

@ -8,18 +8,22 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-name.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-apiversion.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-namespace.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-kind.yaml

20
test/conformance/chainsaw/generate/validation/policy/immutable-rule-spec/02-update.yaml
View file

@ -8,20 +8,24 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-name.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-match.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-exclude.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: update-rule-preconditions.yaml
- apply:
file: update-rule-generate-synchronize.yaml

5
test/conformance/chainsaw/generate/validation/policy/permissions/02-fail-no-permission.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

20
test/conformance/chainsaw/generate/validation/policy/target-namespace-scope/02-check.yaml
View file

@ -10,18 +10,22 @@ spec:
- apply:
file: policy-pass.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-0.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-1.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-2.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-fail-3.yaml

7
test/conformance/chainsaw/generate/validation/policy/target-namespace-scope/03-delete.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
name: roles.iam.aws.crossplane.io
ref:
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
name: roles.iam.aws.crossplane.io

9
test/conformance/chainsaw/mutate/clusterpolicy/standard/existing/basic-delete/02-delete-cm.yaml
View file

@ -8,7 +8,8 @@ spec:
timeouts: {}
try:
- delete:
apiVersion: v1
kind: ConfigMap
name: dictionary-2
namespace: staging-2
ref:
apiVersion: v1
kind: ConfigMap
name: dictionary-2
namespace: staging-2

5
test/conformance/chainsaw/mutate/clusterpolicy/standard/existing/validation/auth-check/cpol-namespace-variable/01-fail-no-permission.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

5
test/conformance/chainsaw/mutate/clusterpolicy/standard/existing/validation/auth-check/cpol-standard-auth-check/01-fail-no-permission.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

5
test/conformance/chainsaw/mutate/clusterpolicy/standard/existing/validation/mutate-existing-require-targets/01-no-targets-fail.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-no-targets.yaml

5
test/conformance/chainsaw/mutate/clusterpolicy/standard/existing/validation/target-variable-validation/01-policy.yaml
View file

@ -8,8 +8,9 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-bad.yaml
- apply:
file: policy-good.yaml

5
test/conformance/chainsaw/mutate/policy/standard/existing/validation/auth-check/02-fail-no-permission.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

15
test/conformance/chainsaw/policy-validation/cluster-policy/admission-disabled/01-policy.yaml
View file

@ -10,14 +10,17 @@ spec:
- apply:
file: policy-validate.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-mutate.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-generate.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-verify-image.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/all-disabled/01-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/background-subresource/01-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-1.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/background-subresource/02-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-2.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/background-subresource/03-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-3.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/background-subresource/04-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-4.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/background-subresource/05-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-5.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/invalid-subject-kind/01-policies.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

10
test/conformance/chainsaw/policy-validation/cluster-policy/invalid-timeout/01-policies.yaml
View file

@ -8,10 +8,12 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-1.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-2.yaml

5
test/conformance/chainsaw/policy-validation/cluster-policy/policy-exceptions-disabled/02-resource.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: resource.yaml

10
test/conformance/chainsaw/policy-validation/cluster-policy/target-context/01-policies.yaml
View file

@ -8,10 +8,12 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-1.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-2.yaml

10
test/conformance/chainsaw/policy-validation/policy/admission-disabled/01-policy.yaml
View file

@ -10,10 +10,12 @@ spec:
- apply:
file: policy-validate.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-mutate.yaml
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-verify-image.yaml

5
test/conformance/chainsaw/policy-validation/policy/all-disabled/01-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy.yaml

5
test/conformance/chainsaw/policy-validation/policy/background-subresource/01-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-1.yaml

5
test/conformance/chainsaw/policy-validation/policy/background-subresource/02-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-2.yaml

5
test/conformance/chainsaw/policy-validation/policy/background-subresource/03-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-3.yaml

5
test/conformance/chainsaw/policy-validation/policy/background-subresource/04-policy.yaml
View file

@ -8,6 +8,7 @@ spec:
timeouts: {}
try:
- apply:
check:
(error != null): true
expect:
- check:
($error != null): true
file: policy-4.yaml

Some files were not shown because too many files have changed in this diff Show more