mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-07 00:17:13 +00:00
Code Activity
kyverno/test/conformance/kuttl/generate/validation/policy/immutable-rule-spec
History
shuting 6249ab70e8
fix: block generate policies when lack of permission to operate downstream resources (#6610) 
* debug

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* return on errors only

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update clusterrolebinding

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update clusterrolebinding

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove debug

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix ns

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-22 13:14:57 +00:00
..
01-assert.yaml feat: validate immutable fields for a generate rule - 2 (#6451) 2023-03-10 14:39:44 +00:00
01-policy.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
02-update.yaml feat: validate immutable fields for a generate rule - 2 (#6451) 2023-03-10 14:39:44 +00:00
README.md feat: validate immutable fields for a generate rule - 2 (#6451) 2023-03-10 14:39:44 +00:00
update-rule-exclude.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
update-rule-generate-synchronize.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
update-rule-match.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
update-rule-name.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00
update-rule-preconditions.yaml fix: block generate policies when lack of permission to operate downstream resources (#6610) 2023-03-22 13:14:57 +00:00

README.md

Description

This test ensures that modification of the rule spec fields defined in a generate Policy is disallowed except spec.generate.synchronize.

Expected Behavior

The test fails if the modification is allowed, otherwise passes.

Reference Issue(s)

https://github.com/kyverno/kyverno/issues/6440