mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 09:56:55 +00:00
675 B
675 B
Description
This test validates that an existing ConfigMap can't be updated with a new key that results in violation of a policy.
Expected Behavior
The existing ConfigMap isn't patched and policy violation is reported.
Steps
Test Steps
- Create a
Policy
that denies only permits combination of two particular keys together. - Create a
ConfigMap
that contains one of the keys. - Try to patch the
ConfigMap
with a new key that is not permitted by the policy. - Verify that the
ConfigMap
is not patched and policy violation is reported. - Delete the
Policy
andConfigMap
.