kyverno

mirror of https://github.com/kyverno/kyverno.git synced 2025-03-07 00:17:13 +00:00

History

shuting 2948adba57 fix: auth check the generate policy when use variables in name/namespace (#6874 ) * decrease log level Signed-off-by: ShutingZhao <shuting@nirmata.com> * set namespace to for 'all' Signed-off-by: ShutingZhao <shuting@nirmata.com> * udpate kuttl tests Signed-off-by: ShutingZhao <shuting@nirmata.com> * rename file Signed-off-by: ShutingZhao <shuting@nirmata.com> * rename file Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com>		2023-04-13 07:38:47 +00:00
..
01-ns.yaml	fix: block generate policies when lack of permission to operate downstream resources (#6610 )	2023-03-22 13:14:57 +00:00
02-fail-no-permission.yaml	fix: block generate policies when lack of permission to operate downstream resources (#6610 )	2023-03-22 13:14:57 +00:00
03-update-clusterrole.yaml	fix: auth check the generate policy when use variables in name/namespace (#6874 )	2023-04-13 07:38:47 +00:00
04-pass.yaml	fix: block generate policies when lack of permission to operate downstream resources (#6610 )	2023-03-22 13:14:57 +00:00
05-delete.yaml	fix: auth check the generate policy when use variables in name/namespace (#6874 )	2023-04-13 07:38:47 +00:00
policy-assert.yaml	fix: block generate policies when lack of permission to operate downstream resources (#6610 )	2023-03-22 13:14:57 +00:00
policy.yaml	fix: block generate policies when lack of permission to operate downstream resources (#6610 )	2023-03-22 13:14:57 +00:00
README.md	fix: block generate policies when lack of permission to operate downstream resources (#6610 )	2023-03-22 13:14:57 +00:00

README.md

Description

This test ensures that a generate policy is denied when it does not have corresponding permissions to generate the downstream resource.

Expected Behavior

The test fails if the policy creation is allowed, otherwise passes.

Reference Issue(s)

https://github.com/kyverno/kyverno/issues/6584