mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-15 17:51:20 +00:00
b7bf894fe9
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> |
||
---|---|---|
.. | ||
chainsaw-test.yaml | ||
exception.yaml | ||
ns.yaml | ||
pod-allowed-1.yaml | ||
pod-allowed-2.yaml | ||
pod-rejected.yaml | ||
policy-assert.yaml | ||
policy.yaml | ||
README.md |
Description
This test creates a policy that enforces the baseline profile and a policy exception that exempts any pod whose namespace is staging-ns
and make use of the HostPath volume.
Steps
-
- Create a cluster policy
- Assert the policy becomes ready
-
- Create a policy exception for the cluster policy created above.
-
- Try to create a pod named
good-pod-1
in thedefault
namespace and doesn't use the HostPath volume, expecting the creation to succeed. - Try to create a pod named
good-pod-2
in thestaging-ns
namespace that uses the HostPath volume, expecting the creation to succeed. - Try to create a pod named
bad-pod
in thedefault
namespace that makes use of the HostPath volume, expecting the creation to fail.
- Try to create a pod named