mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 09:56:55 +00:00
c796bb765c
* fix: return policies with either audit or enforce rules from the cache Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * feat: introduce validationFailureAction under verifyImage rules Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * feat: add chainsaw tests Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * fix Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> --------- Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> Co-authored-by: shuting <shuting@nirmata.com> |
||
|---|---|---|
| .. | ||
| chainsaw-test.yaml | ||
| configmap-allowed.yaml | ||
| configmap-rejected.yaml | ||
| exception.yaml | ||
| policy-assert.yaml | ||
| policy.yaml | ||
| README.md | ||
Description
This test creates a policy, a policy exception and tries to create a couple configmaps.
The policy exception is configured to apply only to the emergency configmap and has wildcard in the rule name.
The emergency configmap is expected to create fine while other configmaps creations should fail.
Steps
-
- Create a cluster policy
- Assert the policy becomes ready
-
- Create a policy exception for the cluster policy created above, configured to apply to configmap named
emergency
- Create a policy exception for the cluster policy created above, configured to apply to configmap named
-
- Try to create a confimap named
emergency, expecting the creation to succeed - Try to create a confimap named
foo, expecting the creation to fail
- Try to create a confimap named