kyverno

mirror of https://github.com/kyverno/kyverno.git synced 2025-03-10 09:56:55 +00:00

History

shuting 955570b0c5 fix: auth checks with the APIVersion and the subresource (#7628 ) * fix auth checks with apiVersion and subresource Signed-off-by: ShutingZhao <shuting@nirmata.com> * add kuttl tests Signed-off-by: ShutingZhao <shuting@nirmata.com> * remove duplicate code Signed-off-by: ShutingZhao <shuting@nirmata.com> * update permissions Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com>		2023-06-22 14:14:06 +00:00
..
01-crd.yaml	fix: target scope validation for the generate rule (#7479 )	2023-06-13 10:26:56 +00:00
01-update-clusterrole.yaml	fix: auth checks with the APIVersion and the subresource (#7628 )	2023-06-22 14:14:06 +00:00
02-check.yaml	fix: target scope validation for the generate rule (#7479 )	2023-06-13 10:26:56 +00:00
03-delete.yaml	fix: target scope validation for the generate rule (#7479 )	2023-06-13 10:26:56 +00:00
04-delete.yaml	fix: target scope validation for the generate rule (#7479 )	2023-06-13 10:26:56 +00:00
policy-cluster-target.yaml	validate target resource scope & namespace settings (#7098 )	2023-05-05 11:08:08 +00:00
policy-namespaced-target.yaml	validate target resource scope & namespace settings (#7098 )	2023-05-05 11:08:08 +00:00
policy-pass.yaml	fix: target scope validation for the generate rule (#7479 )	2023-06-13 10:26:56 +00:00
README.md	fix: target scope validation for the generate rule (#7479 )	2023-06-13 10:26:56 +00:00

Description

This test ensures that the target namespace must be set for namespace-scoped target resource, and must not be set for cluster-wide target resources.

The test fails if the policy creation is allowed, otherwise passes.