mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 18:06:55 +00:00
01cc42e78a
* fix: add auth check to the admission controller for generate policies Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: enable auth check if sync=true Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: restict to list/get permissions Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: aggregate clusterrole to admission controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: aggregate clusterrole to admission controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: aggregate clusterrole to admission controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: aggregate clusterrole to admission controller Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com> |
||
|---|---|---|
| .. | ||
| chainsaw-step-01-apply-1-1.yaml | ||
| chainsaw-step-01-apply-2-1.yaml | ||
| chainsaw-test.yaml | ||
| policy-fail-1-no-ns-namespaced-target.yaml | ||
| policy-fail-2-ns-cluster-target.yaml | ||
| policy-pass-1-ns-namespaced-target.yaml | ||
| policy-pass-2-no-ns-cluster-target.yaml | ||
| policy-pass-3.yaml | ||
| README.md | ||
Description
This test ensures that the target namespace must be set for namespace-scoped target resource, and must not be set for cluster-wide target resources.
Expected Behavior
The test fails if the policy creation is allowed, otherwise passes.
Reference Issue(s)
https://github.com/kyverno/kyverno/issues/7038 https://github.com/kyverno/kyverno/issues/7470 https://github.com/kyverno/kyverno/issues/7750