ce7cb702218693d08ea6d83464d2457c9250027c

2026-11-12 20:46:28 +09:00 · 2026-11-12 20:46:28 +09:00 · 34c5f8963c
commit 34c5f8963c
1 changed files with 145336 additions and 0 deletions
--- a/vendor/platform/kyverno/tests/tls-rollout/kyverno-test.yaml
+++ b/vendor/platform/kyverno/tests/tls-rollout/kyverno-test.yaml
@ -0,0 +1,115 @@
+apiVersion: cli.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: tls-rollout
+policies:
+- ../../policies/tls-rollout.yaml
+resources:
+- resources.yaml
+targetResources:
+- targets.yaml
+values:
+  globalValues:
+    request.operation: UPDATE
+    request.oldObject.data:
+      tls.crt: c3ludGhldGljLW9sZA==
+results:
+- policy: tls-rollout
+  rule: deployments
+  kind: Deployment
+  resources:
+  - tls-test/direct
+  - tls-test/projected
+  - tls-test/environment
+  - tls-test/mixed
+  patchedResources: patched.yaml
+  result: pass
+- policy: tls-rollout
+  rule: daemonsets
+  kind: DaemonSet
+  resources:
+  - tls-test/daemon
+  patchedResources: patched.yaml
+  result: pass
+- policy: tls-rollout
+  rule: statefulsets
+  kind: StatefulSet
+  resources:
+  - tls-test/stateful
+  patchedResources: patched.yaml
+  result: pass
+---
+apiVersion: cli.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: tls-unchanged
+policies:
+- ../../policies/tls-rollout.yaml
+resources:
+- resources.yaml
+targetResources:
+- targets.yaml
+values:
+  globalValues:
+    request.operation: UPDATE
+    request.oldObject.data:
+      tls.crt: c3ludGhldGljLW5ldw==
+results:
+- policy: tls-rollout
+  rule: deployments
+  kind: Secret
+  resources:
+  - tls-test/cert
+  result: skip
+- policy: tls-rollout
+  rule: daemonsets
+  kind: Secret
+  resources:
+  - tls-test/cert
+  result: skip
+- policy: tls-rollout
+  rule: statefulsets
+  kind: Secret
+  resources:
+  - tls-test/cert
+  result: skip
+---
+apiVersion: cli.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: tls-created
+policies:
+- ../../policies/tls-rollout.yaml
+resources:
+- resources.yaml
+targetResources:
+- targets.yaml
+values:
+  globalValues:
+    request.operation: CREATE
+    request.oldObject.data: {}
+results:
+- policy: tls-rollout
+  rule: deployments
+  kind: Deployment
+  resources:
+  - tls-test/direct
+  - tls-test/projected
+  - tls-test/environment
+  - tls-test/mixed
+  patchedResources: patched.yaml
+  result: pass
+- policy: tls-rollout
+  rule: daemonsets
+  kind: DaemonSet
+  resources:
+  - tls-test/daemon
+  patchedResources: patched.yaml
+  result: pass
+- policy: tls-rollout
+  rule: statefulsets
+  kind: StatefulSet
+  resources:
+  - tls-test/stateful
+  patchedResources: patched.yaml
+  result: pass