ce7cb702218693d08ea6d83464d2457c9250027c

This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c
2 changed files with 145336 additions and 0 deletions

View file

@ -0,0 +1,93 @@
apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
name: dragonfly-identity
policies:
- ../../policies/require-app-labels.yaml
resources:
- resources.yaml
results:
- policy: require-app-labels
rule: dragonfly-identity
kind: Pod
resources:
- native-cache
result: pass
- policy: require-app-labels
rule: require-app-name-and-instance
kind: Pod
resources:
- native-cache
result: skip
- policy: require-app-labels
rule: dragonfly-identity
kind: Pod
resources:
- legacy-cache
result: pass
- policy: require-app-labels
rule: require-app-name-and-instance
kind: Pod
resources:
- legacy-cache
result: skip
- policy: require-app-labels
rule: dragonfly-identity
kind: Pod
resources:
- missing-cache-id
result: fail
- policy: require-app-labels
rule: require-app-name-and-instance
kind: Pod
resources:
- missing-cache-id
result: skip
- policy: require-app-labels
rule: dragonfly-identity
kind: Pod
resources:
- missing-op-id
result: fail
- policy: require-app-labels
rule: require-app-name-and-instance
kind: Pod
resources:
- missing-op-id
result: skip
- policy: require-app-labels
rule: dragonfly-identity
kind: Pod
resources:
- other-namespace
result: skip
- policy: require-app-labels
rule: require-app-name-and-instance
kind: Pod
resources:
- other-namespace
result: fail
- policy: require-app-labels
rule: autogen-dragonfly-identity
kind: StatefulSet
resources:
- native-set
result: pass
- policy: require-app-labels
rule: autogen-require-app-name-and-instance
kind: StatefulSet
resources:
- native-set
result: skip
- policy: require-app-labels
rule: autogen-dragonfly-identity
kind: StatefulSet
resources:
- missing-set-id
result: fail
- policy: require-app-labels
rule: autogen-require-app-name-and-instance
kind: StatefulSet
resources:
- missing-set-id
result: skip

View file

@ -0,0 +1,102 @@
apiVersion: v1
kind: Pod
metadata:
name: native-cache
namespace: dragonfly
labels:
app.kubernetes.io/name: dragonfly
app: quay
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: legacy-cache
namespace: dragonfly
labels:
app.kubernetes.io/name: dragonfly
app.kubernetes.io/instance: quay
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: missing-cache-id
namespace: dragonfly
labels:
app.kubernetes.io/name: dragonfly
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: missing-op-id
namespace: dragonfly
labels:
app.kubernetes.io/name: dragonfly-operator
app: operator
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: other-namespace
namespace: quay
labels:
app.kubernetes.io/name: dragonfly
app: quay
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: native-set
namespace: dragonfly
spec:
serviceName: native-set
selector:
matchLabels:
app.kubernetes.io/name: dragonfly
template:
metadata:
labels:
app.kubernetes.io/name: dragonfly
app: quay
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: missing-set-id
namespace: dragonfly
spec:
serviceName: missing-set-id
selector:
matchLabels:
app.kubernetes.io/name: dragonfly
template:
metadata:
labels:
app.kubernetes.io/name: dragonfly
spec:
containers:
- name: app
image: busybox:1.36