mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 01:16:55 +00:00
* feat: add support for subresources to validating and mutating policies Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add CLI test cases with subresources for validating policies Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Fix existing e2e tests for validating policies and remove tests migrated to kuttl Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add kuttl e2e tests for validating policies with subresources Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add kuttl e2e tests for mutating policies with subresources Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * Add kuttl e2e tests for validating policy by-pass by manipulating preconditions Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
675 B
675 B
Description
This test validates that an existing ConfigMap can't be updated with a new key that results in violation of a policy.
Expected Behavior
The existing ConfigMap isn't patched and policy violation is reported.
Steps
Test Steps
- Create a
Policy
that denies only permits combination of two particular keys together. - Create a
ConfigMap
that contains one of the keys. - Try to patch the
ConfigMap
with a new key that is not permitted by the policy. - Verify that the
ConfigMap
is not patched and policy violation is reported. - Delete the
Policy
andConfigMap
.