115 lines
2.1 KiB
YAML
115 lines
2.1 KiB
YAML
|
apiVersion: cli.kyverno.io/v1alpha1
|
||
|
|
kind: Test
|
||
|
|
metadata:
|
||
|
|
name: tls-rollout
|
||
|
|
policies:
|
||
|
|
- ../../policies/tls-rollout.yaml
|
||
|
|
resources:
|
||
|
|
- resources.yaml
|
||
|
|
targetResources:
|
||
|
|
- targets.yaml
|
||
|
|
values:
|
||
|
|
globalValues:
|
||
|
|
request.operation: UPDATE
|
||
|
|
request.oldObject.data:
|
||
|
|
tls.crt: c3ludGhldGljLW9sZA==
|
||
|
|
results:
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: deployments
|
||
|
|
kind: Deployment
|
||
|
|
resources:
|
||
|
|
- tls-test/direct
|
||
|
|
- tls-test/projected
|
||
|
|
- tls-test/environment
|
||
|
|
- tls-test/mixed
|
||
|
|
patchedResources: patched.yaml
|
||
|
|
result: pass
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: daemonsets
|
||
|
|
kind: DaemonSet
|
||
|
|
resources:
|
||
|
|
- tls-test/daemon
|
||
|
|
patchedResources: patched.yaml
|
||
|
|
result: pass
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: statefulsets
|
||
|
|
kind: StatefulSet
|
||
|
|
resources:
|
||
|
|
- tls-test/stateful
|
||
|
|
patchedResources: patched.yaml
|
||
|
|
result: pass
|
||
|
|
---
|
||
|
|
apiVersion: cli.kyverno.io/v1alpha1
|
||
|
|
kind: Test
|
||
|
|
metadata:
|
||
|
|
name: tls-unchanged
|
||
|
|
policies:
|
||
|
|
- ../../policies/tls-rollout.yaml
|
||
|
|
resources:
|
||
|
|
- resources.yaml
|
||
|
|
targetResources:
|
||
|
|
- targets.yaml
|
||
|
|
values:
|
||
|
|
globalValues:
|
||
|
|
request.operation: UPDATE
|
||
|
|
request.oldObject.data:
|
||
|
|
tls.crt: c3ludGhldGljLW5ldw==
|
||
|
|
results:
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: deployments
|
||
|
|
kind: Secret
|
||
|
|
resources:
|
||
|
|
- tls-test/cert
|
||
|
|
result: skip
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: daemonsets
|
||
|
|
kind: Secret
|
||
|
|
resources:
|
||
|
|
- tls-test/cert
|
||
|
|
result: skip
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: statefulsets
|
||
|
|
kind: Secret
|
||
|
|
resources:
|
||
|
|
- tls-test/cert
|
||
|
|
result: skip
|
||
|
|
---
|
||
|
|
apiVersion: cli.kyverno.io/v1alpha1
|
||
|
|
kind: Test
|
||
|
|
metadata:
|
||
|
|
name: tls-created
|
||
|
|
policies:
|
||
|
|
- ../../policies/tls-rollout.yaml
|
||
|
|
resources:
|
||
|
|
- resources.yaml
|
||
|
|
targetResources:
|
||
|
|
- targets.yaml
|
||
|
|
values:
|
||
|
|
globalValues:
|
||
|
|
request.operation: CREATE
|
||
|
|
request.oldObject.data: {}
|
||
|
|
results:
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: deployments
|
||
|
|
kind: Deployment
|
||
|
|
resources:
|
||
|
|
- tls-test/direct
|
||
|
|
- tls-test/projected
|
||
|
|
- tls-test/environment
|
||
|
|
- tls-test/mixed
|
||
|
|
patchedResources: patched.yaml
|
||
|
|
result: pass
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: daemonsets
|
||
|
|
kind: DaemonSet
|
||
|
|
resources:
|
||
|
|
- tls-test/daemon
|
||
|
|
patchedResources: patched.yaml
|
||
|
|
result: pass
|
||
|
|
- policy: tls-rollout
|
||
|
|
rule: statefulsets
|
||
|
|
kind: StatefulSet
|
||
|
|
resources:
|
||
|
|
- tls-test/stateful
|
||
|
|
patchedResources: patched.yaml
|
||
|
|
result: pass
|