mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 09:26:54 +00:00
Code Activity
kyverno/test/conformance/kuttl/generate/validation/clusterpolicy/permissions
History
shuting 6249ab70e8
fix: block generate policies when lack of permission to operate downstream resources (#6610) 
* debug

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* return on errors only

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update clusterrolebinding

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update clusterrolebinding

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove debug

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix ns

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-22 13:14:57 +00:00
..
01-fail-no-permission.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
02-update-clusterrole.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
03-pass.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
04-reset-clusterrole.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
policy-assert.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
policy.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
README.md fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00

README.md

Description

This test ensures that a generate policy is denied when it does not have corresponding permissions to generate the downstream resource.

Expected Behavior

The test fails if the policy creation is allowed, otherwise passes.

Reference Issue(s)

https://github.com/kyverno/kyverno/issues/6584