mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
|
||
---|---|---|
.. | ||
01-assert.yaml | ||
01-manifests.yaml | ||
02-script.yaml | ||
README.md |
Description
This test validates that an existing ConfigMap can't be updated with a new key that results in violation of a policy.
Expected Behavior
The existing ConfigMap isn't patched and policy violation is reported.
Steps
Test Steps
- Create a
Policy
that denies only permits combination of two particular keys together. - Create a
ConfigMap
that contains one of the keys. - Try to patch the
ConfigMap
with a new key that is not permitted by the policy. - Verify that the
ConfigMap
is not patched and policy violation is reported. - Delete the
Policy
andConfigMap
.