apiVersion: chainsaw.kyverno.io/v1alpha1
kind: Test
metadata:
  creationTimestamp: null
  name: exclude-host-process-and-host-namespaces
spec:
  steps:
  - name: step-01
    try:
    - apply:
        file: policy.yaml
    - assert:
        file: policy-assert.yaml
  - name: step-02
    try:
    - apply:
        file: ns.yaml
    - assert:
        file: ns.yaml
  - name: step-03
    try:
    - apply:
        file: exception.yaml
  - name: step-04
    try:
    - apply:
        file: pod-allowed-1.yaml
    - apply:
        file: pod-allowed-2.yaml
    - apply:
        file: pod-allowed-3.yaml
    - apply:
        expect:
        - check:
            ($error != null): true
        file: pod-rejected.yaml