1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-29 10:55:05 +00:00

update require_pod_requests_limits

This commit is contained in:
Jim Bugwadia 2019-11-10 21:06:49 -08:00
parent f668113904
commit c1be682a93
4 changed files with 7 additions and 8 deletions

View file

@ -97,7 +97,7 @@ func Test_validate_restrict_image_registries(t *testing.T) {
}
func Test_require_pod_requests_limits(t *testing.T) {
testScenario(t, "test/scenarios/samples/best_practices/scenario_validate_require_pod_requests_limits.yaml")
testScenario(t, "test/scenarios/samples/best_practices/require_pod_requests_limits.yaml")
}
func Test_require_probes(t *testing.T) {

View file

@ -12,11 +12,11 @@ If a namespace level request or limit is specified, defaults will automatically
apiVersion: kyverno.io/v1alpha1
kind: ClusterPolicy
metadata:
name: check-resource
name: require-pod-requests-limits
spec:
validationFailureAction: "audit"
rules:
- name: check-resource-request-limit
- name: validate-resources
match:
resources:
kinds:

View file

@ -1,7 +1,7 @@
apiVersion: kyverno.io/v1alpha1
kind: ClusterPolicy
metadata:
name: check-resource
name: require-pod-requests-limits
annotations:
policies.kyverno.io/category: Resource Quota
policies.kyverno.io/description: As application workloads share cluster resources, it is important
@ -11,7 +11,7 @@ metadata:
spec:
validationFailureAction: "audit"
rules:
- name: check-resource-request-limit
- name: validate-resources
match:
resources:
kinds:

View file

@ -5,14 +5,13 @@ input:
expected:
validation:
policyresponse:
policy: check-resource
policy: require-pod-requests-limits
resource:
kind: Pod
apiVersion: v1
namespace: ''
name: myapp-pod
rules:
- name: check-resource-request-limit
- name: validate-resources
type: Validation
message: "Validation error: CPU and memory resource requests and limits are required\nValidation rule 'check-resource-request-limit' failed at path '/spec/containers/0/resources/limits/cpu/'."
success: false