mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-31 03:45:17 +00:00
chore: use more chainsaw step templates (#11313)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
parent
f9724778b1
commit
9914675674
158 changed files with 946 additions and 958 deletions
2
.github/workflows/conformance.yaml
vendored
2
.github/workflows/conformance.yaml
vendored
|
@ -59,7 +59,7 @@ jobs:
|
||||||
uses: ./.github/actions/setup-build-env
|
uses: ./.github/actions/setup-build-env
|
||||||
timeout-minutes: 10
|
timeout-minutes: 10
|
||||||
with:
|
with:
|
||||||
free-disk-space: true
|
free-disk-space: false
|
||||||
- name: Build CLI
|
- name: Build CLI
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: first-rule-is-foreach
|
name: first-rule-is-foreach
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-chain
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-chain
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: 'True'
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: no-foreach
|
name: no-foreach
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-chain
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-chain
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: 'True'
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: two-foreach-rules
|
name: two-foreach-rules
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-chain
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-chain
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: 'True'
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: cascading-mutation
|
name: cascading-mutation
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: database-protection
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: database-protection
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: propagate-cost-labels-from-namespace
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: defaulting-namespace-labels
|
name: defaulting-namespace-labels
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: propagate-cost-labels-from-namespace
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- script:
|
- script:
|
||||||
|
@ -23,7 +31,7 @@ spec:
|
||||||
- name: step-04
|
- name: step-04
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-04-apply-1-1.yaml
|
file: policy-update.yaml
|
||||||
- name: step-05
|
- name: step-05
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: jmespath-with-special-chars
|
name: jmespath-with-special-chars
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-00
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: jmespath-with-special-chars-demo
|
||||||
- name: step-01
|
- name: step-01
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: jmespath-with-special-chars-demo
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: mutate-using-default-context
|
name: mutate-using-default-context
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-00
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: pod-add-labels
|
||||||
- name: step-01
|
- name: step-01
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: pod-add-labels
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: mutate-with-404-api-call
|
name: mutate-with-404-api-call
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-404-api-call
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,4 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-404-api-call
|
|
|
@ -16,12 +16,20 @@ spec:
|
||||||
file: configmap.yaml
|
file: configmap.yaml
|
||||||
- assert:
|
- assert:
|
||||||
file: configmap-assert.yaml
|
file: configmap-assert.yaml
|
||||||
- name: step-03
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: trigger-deployment-restarts
|
||||||
- name: step-04
|
- name: step-04
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: trigger-deployment-restarts
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: reload
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: variables-mutate-existing
|
name: variables-mutate-existing
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: reload
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: reload
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: variables-mutate-existing
|
name: variables-mutate-existing
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: reload
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: add-labels
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: basic-check-output
|
name: basic-check-output
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: add-labels
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: add-privileged-existing-namespaces
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -8,10 +8,20 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: add-privileged-existing-namespaces
|
||||||
- name: step-03
|
- name: step-03
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: add-privileged-existing-namespaces
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -8,10 +8,20 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: add-privileged-existing-namespaces
|
||||||
- name: step-03
|
- name: step-03
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-existing-secret
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -10,10 +10,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-existing-secret
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -10,10 +10,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -10,10 +10,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-existing-secret
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -10,10 +10,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-existing-secret
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation-delete-trigger
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,10 +12,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-4.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation-delete-trigger
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- delete:
|
- delete:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation-delete-trigger
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,10 +12,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-4.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation-delete-trigger
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- delete:
|
- delete:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-existing-secret
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,10 +12,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-4.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-existing-secret
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-existing-secret
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,10 +12,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-4.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-existing-secret
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -12,12 +12,20 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: secret.yaml
|
file: secret.yaml
|
||||||
- name: step-03
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-existing-secret
|
||||||
- name: step-04
|
- name: step-04
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-existing-secret
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,12 +12,20 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: secret.yaml
|
file: secret.yaml
|
||||||
- name: step-03
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-existing-secret
|
||||||
- name: step-04
|
- name: step-04
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-existing-secret
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,14 +4,20 @@ metadata:
|
||||||
name: descending-patchjson
|
name: descending-patchjson
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- name: step-01-assert
|
bindings:
|
||||||
try:
|
- name: file
|
||||||
- assert:
|
value: policy.yaml
|
||||||
file: policy-assert.yaml
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: descending-jsonpatch
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,5 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: descending-jsonpatch
|
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: cpol-multiple-rules-match-exclude
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -14,10 +14,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-4.yaml
|
file: chainsaw-step-01-apply-1-4.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-5.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: cpol-multiple-rules-match-exclude
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- command:
|
- command:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: cpol-multiple-rules-match-exclude
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -14,10 +14,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-4.yaml
|
file: chainsaw-step-01-apply-1-4.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-5.yaml
|
use:
|
||||||
- assert:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: cpol-multiple-rules-match-exclude
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- command:
|
- command:
|
||||||
|
|
|
@ -16,12 +16,20 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: pod.yaml
|
file: pod.yaml
|
||||||
- name: step-04
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: org-label-inheritance-existing-1
|
||||||
- name: step-05
|
- name: step-05
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: org-label-inheritance-existing-1
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -16,12 +16,20 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: pod.yaml
|
file: pod.yaml
|
||||||
- name: step-04
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: org-label-inheritance-existing-1
|
||||||
- name: step-05
|
- name: step-05
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: org-label-inheritance-existing-1
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: advertise-resource
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,14 +4,23 @@ metadata:
|
||||||
name: mutate-existing-node-status
|
name: mutate-existing-node-status
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- try:
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- assert:
|
- name: wait policy ready
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: advertise-resource
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- script:
|
- script:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: mutate-pod-on-binding-request
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -8,12 +8,24 @@ spec:
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-1.yaml
|
file: chainsaw-step-01-apply-1-1.yaml
|
||||||
- apply:
|
- name: create policy
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
use:
|
||||||
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- try:
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- assert:
|
- name: wait policy ready
|
||||||
file: chainsaw-step-01-assert-1-1.yaml
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: mutate-pod-on-binding-request
|
||||||
|
- try:
|
||||||
- assert:
|
- assert:
|
||||||
file: chainsaw-step-01-assert-1-2.yaml
|
file: chainsaw-step-01-assert-1-2.yaml
|
||||||
- name: step-02
|
- name: step-02
|
||||||
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: namespaceselector
|
name: namespaceselector
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: org-label-inheritance-existing-standard
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: org-label-inheritance-existing-standard
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -4,12 +4,20 @@ metadata:
|
||||||
name: namespaceselector
|
name: namespaceselector
|
||||||
spec:
|
spec:
|
||||||
steps:
|
steps:
|
||||||
- name: step-01
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: org-label-inheritance-existing-standard
|
||||||
- name: step-02
|
- name: step-02
|
||||||
try:
|
try:
|
||||||
- apply:
|
- apply:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: org-label-inheritance-existing-standard
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation-create-policy
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,12 +12,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- name: step-02
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-02-apply-1-1.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: chainsaw-step-02-assert-1-1.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation-create-policy
|
||||||
- name: step-03
|
- name: step-03
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation-create-policy
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,12 +12,20 @@ spec:
|
||||||
file: chainsaw-step-01-apply-1-2.yaml
|
file: chainsaw-step-01-apply-1-2.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: chainsaw-step-01-apply-1-3.yaml
|
file: chainsaw-step-01-apply-1-3.yaml
|
||||||
- name: step-02
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../../_step-templates/create-policy.yaml
|
||||||
file: chainsaw-step-02-apply-1-1.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: chainsaw-step-02-assert-1-1.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation-create-policy
|
||||||
- name: step-03
|
- name: step-03
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -12,12 +12,20 @@ spec:
|
||||||
file: configmaps.yaml
|
file: configmaps.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: secrets.yaml
|
file: secrets.yaml
|
||||||
- name: step-02
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation-create-policy
|
||||||
- name: step-03
|
- name: step-03
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation-create-policy
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -12,12 +12,20 @@ spec:
|
||||||
file: configmaps.yaml
|
file: configmaps.yaml
|
||||||
- apply:
|
- apply:
|
||||||
file: secrets.yaml
|
file: secrets.yaml
|
||||||
- name: step-02
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-ready.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: test-post-mutation-create-policy
|
||||||
- name: step-03
|
- name: step-03
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: test-post-mutation-create-policy
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -18,12 +18,20 @@ spec:
|
||||||
file: chainsaw-step-01-assert-1-2.yaml
|
file: chainsaw-step-01-assert-1-2.yaml
|
||||||
- assert:
|
- assert:
|
||||||
file: chainsaw-step-01-assert-1-3.yaml
|
file: chainsaw-step-01-assert-1-3.yaml
|
||||||
- name: step-02
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: org-label-inheritance-existing
|
||||||
- name: step-04
|
- name: step-04
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: org-label-inheritance-existing
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
|
@ -18,12 +18,20 @@ spec:
|
||||||
file: chainsaw-step-01-assert-1-2.yaml
|
file: chainsaw-step-01-assert-1-2.yaml
|
||||||
- assert:
|
- assert:
|
||||||
file: chainsaw-step-01-assert-1-3.yaml
|
file: chainsaw-step-01-assert-1-3.yaml
|
||||||
- name: step-02
|
- name: create policy
|
||||||
try:
|
use:
|
||||||
- apply:
|
template: ../../../../../../_step-templates/create-policy.yaml
|
||||||
file: policy.yaml
|
with:
|
||||||
- assert:
|
bindings:
|
||||||
file: policy-assert.yaml
|
- name: file
|
||||||
|
value: policy.yaml
|
||||||
|
- name: wait policy ready
|
||||||
|
use:
|
||||||
|
template: ../../../../../../_step-templates/cluster-policy-ready.yaml
|
||||||
|
with:
|
||||||
|
bindings:
|
||||||
|
- name: name
|
||||||
|
value: org-label-inheritance-existing
|
||||||
- name: step-04
|
- name: step-04
|
||||||
try:
|
try:
|
||||||
- assert:
|
- assert:
|
||||||
|
|
|
@ -1,9 +0,0 @@
|
||||||
apiVersion: kyverno.io/v1
|
|
||||||
kind: ClusterPolicy
|
|
||||||
metadata:
|
|
||||||
name: org-label-inheritance-existing
|
|
||||||
status:
|
|
||||||
conditions:
|
|
||||||
- reason: Succeeded
|
|
||||||
status: "True"
|
|
||||||
type: Ready
|
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Reference in a new issue