mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

update require_pod_requests_limits

Browse source
This commit is contained in:
Jim Bugwadia 2019-11-10 21:06:49 -08:00
parent f668113904
commit c1be682a93
4 changed files with 7 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pkg/testrunner/testrunner_test.go
View file

@ -97,7 +97,7 @@ func Test_validate_restrict_image_registries(t *testing.T) {
} }
func Test_require_pod_requests_limits(t *testing.T) { func Test_require_pod_requests_limits(t *testing.T) {
testScenario(t, "test/scenarios/samples/best_practices/scenario_validate_require_pod_requests_limits.yaml") testScenario(t, "test/scenarios/samples/best_practices/require_pod_requests_limits.yaml")
} }
func Test_require_probes(t *testing.T) { func Test_require_probes(t *testing.T) {

4
samples/RequirePodRequestsLimits.md
View file

@ -12,11 +12,11 @@ If a namespace level request or limit is specified, defaults will automatically
apiVersion: kyverno.io/v1alpha1 apiVersion: kyverno.io/v1alpha1
kind: ClusterPolicy kind: ClusterPolicy
metadata: metadata:
name: check-resource name: require-pod-requests-limits
spec: spec:
validationFailureAction: "audit" validationFailureAction: "audit"
rules: rules:
- name: check-resource-request-limit - name: validate-resources
match: match:
resources: resources:
kinds: kinds:

4
samples/best_practices/require_pod_requests_limits.yaml
View file

@ -1,7 +1,7 @@
apiVersion: kyverno.io/v1alpha1 apiVersion: kyverno.io/v1alpha1
kind: ClusterPolicy kind: ClusterPolicy
metadata: metadata:
name: check-resource name: require-pod-requests-limits
annotations: annotations:
policies.kyverno.io/category: Resource Quota policies.kyverno.io/category: Resource Quota
policies.kyverno.io/description: As application workloads share cluster resources, it is important policies.kyverno.io/description: As application workloads share cluster resources, it is important
@ -11,7 +11,7 @@ metadata:
spec: spec:
validationFailureAction: "audit" validationFailureAction: "audit"
rules: rules:
- name: check-resource-request-limit - name: validate-resources
match: match:
resources: resources:
kinds: kinds:

5
test/scenarios/samples/best_practices/scenario_validate_require_pod_requests_limits.yaml → test/scenarios/samples/best_practices/require_pod_requests_limits.yaml
View file

@ -5,14 +5,13 @@ input:
expected: expected:
validation: validation:
policyresponse: policyresponse:
policy: check-resource policy: require-pod-requests-limits
resource: resource:
kind: Pod kind: Pod
apiVersion: v1 apiVersion: v1
namespace: '' namespace: ''
name: myapp-pod name: myapp-pod
rules: rules:
- name: check-resource-request-limit - name: validate-resources
type: Validation type: Validation
message: "Validation error: CPU and memory resource requests and limits are required\nValidation rule 'check-resource-request-limit' failed at path '/spec/containers/0/resources/limits/cpu/'."
success: false success: false