Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var FluxValidateTests = []struct { //TestName - Name of the Test TestName string // PolicyRaw - The Yaml file of the ClusterPolicy PolicyRaw []byte // ResourceRaw - The Yaml file of the ClusterPolicy ResourceRaw []byte // ResourceNamespace - Namespace of the Resource ResourceNamespace string // MustSucceed declares if test case must fail on validation MustSucceed bool }{ { TestName: "test-validate-with-flux-and-variable-substitution-2043", PolicyRaw: kyverno_2043_policy, ResourceRaw: kyverno_2043_FluxKustomization, ResourceNamespace: "test-validate", MustSucceed: false, }, { TestName: "test-validate-with-flux-and-variable-substitution-2241", PolicyRaw: kyverno_2241_policy, ResourceRaw: kyverno_2241_FluxKustomization, ResourceNamespace: "test-validate", MustSucceed: true, }, }
FluxValidateTests is E2E Test Config for validation
View Source
var ValidateTests = []struct { //TestDescription - Description of the Test TestDescription string // PolicyName - Name of the Policy PolicyName string // PolicyRaw - The Yaml file of the ClusterPolicy PolicyRaw []byte // ResourceName - Name of the Resource ResourceName string // ResourceNamespace - Namespace of the Resource ResourceNamespace string // ResourceGVR - GVR of the Resource ResourceGVR schema.GroupVersionResource // ResourceRaw - The Yaml file of the ClusterPolicy ResourceRaw []byte // MustSucceed - indicates if validation must succeed MustSucceed bool }{ { TestDescription: "checks that contains function works properly with string list", PolicyName: "drop-cap-net-raw", PolicyRaw: kyverno_2345_policy, ResourceName: "test", ResourceNamespace: "test-validate1", ResourceGVR: podGVR, ResourceRaw: kyverno_2345_resource, MustSucceed: false, }, { TestDescription: "checks that policy contains global anchor fields", PolicyName: "check-image-pull-secret", PolicyRaw: kyverno_global_anchor_validate_policy, ResourceName: "pod-with-nginx-allowed-registory", ResourceNamespace: "test-validate", ResourceGVR: podGVR, ResourceRaw: kyverno_global_anchor_validate_resource_1, MustSucceed: true, }, { TestDescription: "checks that policy contains global anchor fields", PolicyName: "check-image-pull-secret", PolicyRaw: kyverno_global_anchor_validate_policy, ResourceName: "pod-with-nginx-disallowed-registory", ResourceNamespace: "test-validate", ResourceGVR: podGVR, ResourceRaw: kyverno_global_anchor_validate_resource_2, MustSucceed: false, }, { TestDescription: "checks that images are trustable", PolicyName: "check-trustable-images", PolicyRaw: kyverno_trustable_image_policy, ResourceName: "pod-with-trusted-registry", ResourceNamespace: "test-validate", ResourceGVR: podGVR, ResourceRaw: kyverno_trusted_image_pod, MustSucceed: true, }, { TestDescription: "checks that images are trustable", PolicyName: "check-trustable-images", PolicyRaw: kyverno_trustable_image_policy, ResourceName: "pod-with-root-user", ResourceNamespace: "test-validate", ResourceGVR: podGVR, ResourceRaw: kyverno_pod_with_root_user, MustSucceed: false, }, { TestDescription: "checks that images are small", PolicyName: "check-small-images", PolicyRaw: kyverno_small_image_policy, ResourceName: "pod-with-small-image", ResourceNamespace: "test-validate", ResourceGVR: podGVR, ResourceRaw: kyverno_pod_with_small_image, MustSucceed: true, }, { TestDescription: "checks that images are small", PolicyName: "check-large-images", PolicyRaw: kyverno_small_image_policy, ResourceName: "pod-with-large-image", ResourceNamespace: "test-validate", ResourceGVR: podGVR, ResourceRaw: kyverno_pod_with_large_image, MustSucceed: false, }, }
Functions ¶
This section is empty.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.