mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
838d02c475
* - support wildcards for namespaces * do not annotate resource, unless policy is an autogen policy * close HTTP body * improve messages * remove policy store Policy store was not fully implemented and simply provided a way to list all polices and get a policy by name, which can be done via standard client-go interfaces. We need to revisit and design a better PolicyStore that provides fast lookups for matching policies based on names, namespaces, etc. * handle wildcard namespaces in background processing * fix unit tests 1) remove platform dependent path usage 2) remove policy store * add test case for mutate with wildcard namespaces
19 lines
No EOL
596 B
YAML
19 lines
No EOL
596 B
YAML
# file path relative to project root
|
|
input:
|
|
policy: test/policy/mutate/policy_mutate_pod_spec.yaml
|
|
resource: test/resources/resource_mutate_pod_spec.yaml
|
|
expected:
|
|
mutation:
|
|
patchedresource: test/output/output_mutate_pod_spec.yaml
|
|
policyresponse:
|
|
policy: mutate-pods-spec
|
|
resource:
|
|
kind: Deployment
|
|
apiVersion: apps/v1
|
|
namespace: test-foo-aaaaaaaaa-bbbbbbbb
|
|
name: nginx-deployment
|
|
rules:
|
|
- name: disable-servicelink-and-token
|
|
type: Mutation
|
|
success: true
|
|
message: successfully processed overlay |