Validate Test Cases

[oshi36]

SignedOff-by : Oshi Gupta oshiagupta36@gmail.com

Related Issue(s)

Partially addresses #3121

Description

As a part of my LFX mentorship task, I am adding test cases and other manifests for the validate policies

Adding different validate policies for which I have added test cases :

Best-Practices Category

• check-deprecated-apis
  Note: the above is an updated policy for checking deprecation APIs and not the existing one in this policy repo.

Other Category

• advanced_restrict_image_registries
• allowed_label_changes
• block-images-with-volumes
• block_large_images
• block_stale_images
• check_nvidia_gpu
• disallow_all_secrets
• enforce_resources_as_ratio
• ensure_readonly_hostpath
• exclude_namespaces_dynamically
• ensure-production-matches-staging
• ingress_host_match_tls
• limit-hostpath-vols
• only_trustworthy_registries_set_root
• require_emptydir_requests_limits
• require_unique_external_dns
• restrict_service_port_range
• require_netpol
• require_pdb
• require_image_source
• restrict_service_account
• restrict_secrets_by_label

Trafeik Category

• disallow_default_tlsoptions

Also, I have moved policies in the folder so that they will not be duplicated in rendering to the website and added the kyverno.io/kyverno-version: 1.6.2 and kyverno.io/kubernetes-version: "1.23" in the polices where it was missing, after checking on the respective versions.

Unique Ingress path policy for Other category has some issue with kyverno CLI , so its test cases are not added in this.

Checklist

• I have read the policy contribution guidelines.
• I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended.

[chipzoller]

@oshi36 a couple of things if you please:

1. There are now conflicts that must be resolved.
2. Would you mark this as draft until you are finished with adding all necessary tests? This is so it is easier to review one time rather than tracking across scattered commits.

Thank you!

[oshi36]

Sure @chipzoller, I will resolve the conflicts.
Also, I have finished adding all the test cases from my side. But as you are suggesting I will mark it as draft.

[chipzoller]

Looks like tests are failing.

[chipzoller]

Conflicts to resolve here.

[oshi36]

@chipzoller, I have resolved merge conflicts and failed test cases.

[chipzoller]

Thank you, Oshi, this will be of tremendous help in testing future code for regressions. A few of these policies were copied and not moved, but I will clean these up.

[oshi36]

Thank you @chipzoller for this.Looking forward to working more with your guidance.