1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 09:26:54 +00:00
Commit graph

7 commits

Author SHA1 Message Date
shuting
f87b0204e6
fix: generate policy validation to prevent endless loop (#7026)
* refactor policy validation

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add loop check for generate

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fixes

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fixes

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-28 13:54:17 +00:00
yinka
04c7b64ae7
add kuttl generate tests for Namespaced policy (#6662)
* [WIP] kuttl generate tests for Namespaced Policy

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-clone-create-on-trigger-deletion

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-data-sync-delete-trigger

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-clone-sync-delete-trigger

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-data-nosync-delete-trigger

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-clone-nosync-delete-trigger

Signed-off-by: yimikao <holayinkajr@gmail.com>

* add change

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-data-sync-update-trigger-no-match

Signed-off-by: yimikao <holayinkajr@gmail.com>

* remove file

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-data-nosync-update-trigger-no-match

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-clone-sync-update-trigger-no-match

Signed-off-by: yimikao <holayinkajr@gmail.com>

* pol-clone-nosync-update-trigger-no-match

Signed-off-by: yimikao <holayinkajr@gmail.com>

* corner cases

Signed-off-by: yimikao <holayinkajr@gmail.com>

* standard

Signed-off-by: yimikao <holayinkajr@gmail.com>

* remove failing test

Signed-off-by: yimikao <holayinkajr@gmail.com>

* sleep before assert

Signed-off-by: yimikao <holayinkajr@gmail.com>

* increase sleep dur

Signed-off-by: yimikao <holayinkajr@gmail.com>

* sleep before assert

Signed-off-by: yimikao <holayinkajr@gmail.com>

* use cm

Signed-off-by: yimikao <holayinkajr@gmail.com>

* fix cm name

Signed-off-by: yimikao <holayinkajr@gmail.com>

* use former resources

Signed-off-by: yimikao <holayinkajr@gmail.com>

* fix tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: yimikao <holayinkajr@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-04-03 18:45:24 +00:00
shuting
ea306d6d7f
rename generateExistingOnPolicyUpdate to generateExisting (#6470)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-03 12:05:53 +01:00
shuting
0c91e87bbb
fix: delete downstream for a generate rule removal, with data and sync (#6393)
* remove policy handler for updates

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove policy update handler from the ur controller

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* rework cleanup downstream on policy deletion

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix downstream deletion on data rule removal

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl test for clusterpolicy

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fix

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl test for policy

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update api docs

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add delays

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix name assertion

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* delete downstream when deletes the clone source

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl test pol-clone-sync-delete-source

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fixes

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl test pol-clone-sync-delete-downstream

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl test pol-data-sync-modify-rule

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix labels

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix policy assertions

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix annotation missing names

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* rename policy

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove dead code

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* create unique namespaces

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* create more unique namespaces

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix assertion

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2023-03-01 03:48:18 +00:00
Chip Zoller
bc7b73401e
More kuttl standard generate tests (#6332)
* add test cpol-data-sync-delete-downstream

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test cpol-data-sync-modify-downstream

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* rename to be more descriptive

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-sync-delete-downstream

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* cleanup test

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test cpol-data-nosync-delete-rule

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test cpol-data-nosync-delete-policy

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix formatting

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add Kyverno kuttl specific snippets to BEST_PRACTICES

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add reminder note

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test cpol-data-nosync-modify-rule

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test cpol-data-nosync-modify-downstream

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-nosync-create-policy-invalid

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-sync-delete-policy

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* separate files

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-nosync-delete-downstream

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-nosync-delete-rule

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-nosync-delete-policy

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix description

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix description

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-nosync-modify-rule

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test pol-data-nosync-modify-downstream

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test existing-basic-create-data

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test existing-basic-create-preconditions-data

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add basic clone multiple test

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add delays

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add generate permissions

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* reorder source and ClusterPolicy, cleanup removal, README update

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add test for cascading-mutation

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Change creation order, remove cleanup

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* increase sleep

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* remove unused test files

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* remove networkpolicies from perms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add networkpolicies back

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* clarify readme

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

---------

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-02-27 14:39:18 +00:00
shuting
3653130806
feat: add the kuttl test for Policy (Namespaced) with generate rule, data, and sync (#6387)
* add the test

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update readme

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-24 21:59:17 +00:00
Prateek Pandey
42221a93e4
fix: add clone check before validating namespace policy (#5459)
fix: add clone check before validate clone namespace

- fix data policy validation
- add kuttl tests to validate the behaviour

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-11-25 12:49:22 +05:30