1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 17:37:12 +00:00
kyverno/test/conformance/chainsaw/exceptions/multiple-exceptions
Charles-Edouard Brétéché 5a0ce6bb67
chore: bump chainsaw (#11161)
* chore: bump chainsaw

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* more template use

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* v0.2.10

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* go mod

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-17 09:28:33 +00:00
..
chainsaw-test.yaml chore: bump chainsaw (#11161) 2024-09-17 09:28:33 +00:00
exceptions.yaml fix: return all the exceptions that match the incoming resource (#10722) 2024-07-25 17:36:19 +00:00
pod.yaml fix: return all the exceptions that match the incoming resource (#10722) 2024-07-25 17:36:19 +00:00
policy-assert.yaml fix: return all the exceptions that match the incoming resource (#10722) 2024-07-25 17:36:19 +00:00
policy.yaml fix: return all the exceptions that match the incoming resource (#10722) 2024-07-25 17:36:19 +00:00
README.md fix: return all the exceptions that match the incoming resource (#10722) 2024-07-25 17:36:19 +00:00

Description

This test creates two policy exceptions that match the same policy. It is expected that the pod that satisfies both exceptions will be created successfully.

Expected Behavior

  1. Create a policy that applies the baseline profile.

  2. Create two exceptions as follows:

    • The first exception exception-baseline that exempts the whole pod from the baseline profile.
    • The second exception init-exception-baseline allows the values of SYS_TIME capabilities in the init containers.
  3. Create a pod with two init containers. The first init container should have the NET_ADMIN and NET_RAW capabilities, and the second init container should have the SYS_TIME capability. It is expected that the pod will be created successfully as it matches both exceptions.

Reference Issue(s)

#10580