mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
fce35b91d2
* cleanup: error string formating Fixes Staticcheck ST1005 KubeCon EU 2022 BugBash Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * cleanup: merge var declaration with assignment Fixes staticcheck S1021 Kubecon EU 2022 Bugbash Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * cleanup normalize yoda condition to simple compare fixes staticcheck ST1017 Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * cleanup: remove extraneous err param on executeTest err is not used anywhere except to throw Fatal inside execureTest() fix staticcheck SA4009 Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com> Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * fix: match validation error message to actual errors Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * cleanup: more of normalize validation error messages Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> * cleanup: additional error message formatting fixes Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com> Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
20 lines
No EOL
746 B
YAML
20 lines
No EOL
746 B
YAML
# file path relative to project root
|
|
input:
|
|
policy: test/policy/validate/policy_validate_disallow_default_serviceaccount.yaml
|
|
resource: test/resources/resource_validate_disallow_default_serviceaccount.yaml
|
|
expected:
|
|
validation:
|
|
policyresponse:
|
|
policy:
|
|
namespace: ''
|
|
name: validate-disallow-default-serviceaccount
|
|
resource:
|
|
kind: Pod
|
|
apiVersion: v1
|
|
namespace: ''
|
|
name: pod-with-default-sa
|
|
rules:
|
|
- name: prevent-mounting-default-serviceaccount
|
|
type: Validation
|
|
message: "validation error: Prevent mounting of default service account. rule prevent-mounting-default-serviceaccount failed at path /spec/serviceAccountName/"
|
|
status: fail |