mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 09:26:54 +00:00
Code Activity
kyverno/test/conformance/chainsaw/exceptions/exclude-hostpath-volume/README.md
Mariam Fahmy ace5b59003
feat: add chainsaw tests for pod security in exceptions (#9667) 
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-02-06 13:07:58 +00:00

765 B
Raw Blame History

Description

This test creates a policy that enforces the baseline profile and a policy exception that exempts any pod whose namespace is staging-ns and make use of the HostPath volume.

Steps

    • Create a cluster policy
    • Assert the policy becomes ready
    • Create a policy exception for the cluster policy created above.
    • Try to create a pod named good-pod-1 in the default namespace and doesn't use the HostPath volume, expecting the creation to succeed.
    • Try to create a pod named good-pod-2 in the staging-ns namespace that uses the HostPath volume, expecting the creation to succeed.
    • Try to create a pod named bad-pod in the default namespace that makes use of the HostPath volume, expecting the creation to fail.