mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 01:46:55 +00:00
426525be37
* chore: fix chainsaw tests cleanup timeout Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * bump chainsaw Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * grace Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * checks Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * bump chainsaw Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix deletes Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix exceptions Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> |
||
|---|---|---|
| .. | ||
| 01-policy.yaml | ||
| 02-create-good.yaml | ||
| 03-create-bad.yaml | ||
| bad.yaml | ||
| policy-ready.yaml | ||
| policy.yaml | ||
| README.md | ||
Description
This test is migrated from e2e. It tests an imageRegistry context lookup for a "real" image and states that an image built to run as root can only come from GHCR.
Expected Behavior
If an image is built to run as root user and it does NOT come from GHCR, the Pod is blocked. If it either isn't built to run as root OR it is built to run as root and does come from GHCR, it is allowed.
Reference Issue(s)
N/A