mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-15 17:51:20 +00:00
716611b7ea
* fix: return all the exceptions that match the incoming resource Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * fix: modify log messages Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> --------- Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> |
||
|---|---|---|
| .. | ||
| chainsaw-test.yaml | ||
| exceptions.yaml | ||
| pod.yaml | ||
| policy-assert.yaml | ||
| policy.yaml | ||
| README.md | ||
Description
This test creates two policy exceptions that match the same policy. It is expected that the pod that satisfies both exceptions will be created successfully.
Expected Behavior
-
Create a policy that applies the baseline profile.
-
Create two exceptions for the init containters as follows:
- The first exception
init1-exception-baselineallows the values ofNET_ADMINandNET_RAWcapabilities in the init containers. - The second exception
init2-exception-baselineallows the values ofSYS_TIMEcapabilities in the init containers.
- The first exception
-
Create a pod with two init containers. The first init container should have the
NET_ADMINandNET_RAWcapabilities, and the second init container should have theSYS_TIMEcapability. It is expected that the pod will be created successfully as it matches both exceptions.
Reference Issue(s)
#10580