apiVersion: chainsaw.kyverno.io/v1alpha1 kind: Test metadata: creationTimestamp: null name: apply-on-cluster-scoped-resources spec: steps: - name: step-01 try: - script: content: kubectl create rolebinding my-rolebinding --role=my-role --user=my-user - name: step-02 try: - script: content: kubectl create clusterrolebinding clusterrolebinding --clusterrole=my-clusterrole --user=my-user - name: step-04 try: - script: content: kyverno apply policy.yaml --cluster check: ($error != null): false