apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: tls-rollout
policies:
- ../../policies/tls-rollout.yaml
resources:
- resources.yaml
targetResources:
- targets.yaml
values:
  globalValues:
    request.operation: UPDATE
    request.oldObject.data:
      tls.crt: c3ludGhldGljLW9sZA==
results:
- policy: tls-rollout
  rule: deployments
  kind: Deployment
  resources:
  - tls-test/direct
  - tls-test/projected
  - tls-test/environment
  - tls-test/mixed
  patchedResources: patched.yaml
  result: pass
- policy: tls-rollout
  rule: daemonsets
  kind: DaemonSet
  resources:
  - tls-test/daemon
  patchedResources: patched.yaml
  result: pass
- policy: tls-rollout
  rule: statefulsets
  kind: StatefulSet
  resources:
  - tls-test/stateful
  patchedResources: patched.yaml
  result: pass
---
apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: tls-unchanged
policies:
- ../../policies/tls-rollout.yaml
resources:
- resources.yaml
targetResources:
- targets.yaml
values:
  globalValues:
    request.operation: UPDATE
    request.oldObject.data:
      tls.crt: c3ludGhldGljLW5ldw==
results:
- policy: tls-rollout
  rule: deployments
  kind: Secret
  resources:
  - tls-test/cert
  result: skip
- policy: tls-rollout
  rule: daemonsets
  kind: Secret
  resources:
  - tls-test/cert
  result: skip
- policy: tls-rollout
  rule: statefulsets
  kind: Secret
  resources:
  - tls-test/cert
  result: skip
---
apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: tls-created
policies:
- ../../policies/tls-rollout.yaml
resources:
- resources.yaml
targetResources:
- targets.yaml
values:
  globalValues:
    request.operation: CREATE
    request.oldObject.data: {}
results:
- policy: tls-rollout
  rule: deployments
  kind: Deployment
  resources:
  - tls-test/direct
  - tls-test/projected
  - tls-test/environment
  - tls-test/mixed
  patchedResources: patched.yaml
  result: pass
- policy: tls-rollout
  rule: daemonsets
  kind: DaemonSet
  resources:
  - tls-test/daemon
  patchedResources: patched.yaml
  result: pass
- policy: tls-rollout
  rule: statefulsets
  kind: StatefulSet
  resources:
  - tls-test/stateful
  patchedResources: patched.yaml
  result: pass