1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-10 18:06:55 +00:00
kyverno/test/conformance/chainsaw/exceptions/allows-rejects-creation
Mariam Fahmy c796bb765c
fix: return policies with either audit or enforce rules from the cache (#10667)
* fix: return policies with either audit or enforce rules from the cache

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* feat: introduce validationFailureAction under verifyImage rules

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* feat: add chainsaw tests

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-08-06 18:24:28 +00:00
..
chainsaw-test.yaml chore: convert chainsaw tests to Test resource (#9100) 2023-12-06 21:39:17 +00:00
configmap-allowed.yaml chore: migrate tests to chainsaw (#8997) 2023-11-24 00:02:22 +00:00
configmap-rejected.yaml chore: migrate tests to chainsaw (#8997) 2023-11-24 00:02:22 +00:00
exception.yaml chore: use v2 for exceptions in chainsaw tests (#10529) 2024-06-24 11:54:57 +00:00
policy-assert.yaml chore: migrate tests to chainsaw (#8997) 2023-11-24 00:02:22 +00:00
policy.yaml fix: return policies with either audit or enforce rules from the cache (#10667) 2024-08-06 18:24:28 +00:00
README.md chore: migrate tests to chainsaw (#8997) 2023-11-24 00:02:22 +00:00

Description

This test creates a policy, a policy exception and tries to create a couple configmaps. The policy exception is configured to apply only to the emergency configmap. The emergency configmap is expected to create fine while other configmaps creations should fail.

Steps

    • Create a cluster policy
    • Assert the policy becomes ready
    • Create a policy exception for the cluster policy created above, configured to apply to configmap named emergency
    • Try to create a confimap named emergency, expecting the creation to succeed
    • Try to create a confimap named foo, expecting the creation to fail