feat: upgrade policy ready assertion to use conditions (kyverno#1148)

Signed-off-by: Charles-Edouard Brétéché <[email protected]>
Rohanraj123 · Sep 4, 2024 · b1d2d4e · b1d2d4e
1 parent b20995e
commit b1d2d4e
Show file tree

Hide file tree

Showing 371 changed files with 1,692 additions and 385 deletions.
diff --git a/argo-cel/application-field-validation/.chainsaw-test/policy-ready.yaml b/argo-cel/application-field-validation/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: application-field-validation
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo-cel/application-prevent-default-project/.chainsaw-test/policy-ready.yaml b/argo-cel/application-prevent-default-project/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: application-prevent-default-project
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo-cel/application-prevent-updates-project/.chainsaw-test/policy-ready.yaml b/argo-cel/application-prevent-updates-project/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: application-prevent-updates-project
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo-cel/applicationset-name-matches-project/.chainsaw-test/policy-ready.yaml b/argo-cel/applicationset-name-matches-project/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: applicationset-name-matches-project
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo-cel/appproject-clusterresourceblacklist/.chainsaw-test/policy-ready.yaml b/argo-cel/appproject-clusterresourceblacklist/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: appproject-clusterresourceblacklist
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo/application-field-validation/.chainsaw-test/chainsaw-step-02-assert-1.yaml b/argo/application-field-validation/.chainsaw-test/chainsaw-step-02-assert-1.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: application-field-validation
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo/application-prevent-default-project/.chainsaw-test/chainsaw-step-02-assert-1.yaml b/argo/application-prevent-default-project/.chainsaw-test/chainsaw-step-02-assert-1.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: application-prevent-default-project
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo/application-prevent-updates-project/.chainsaw-test/chainsaw-step-02-assert-1.yaml b/argo/application-prevent-updates-project/.chainsaw-test/chainsaw-step-02-assert-1.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: application-prevent-updates-project
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo/applicationset-name-matches-project/.chainsaw-test/chainsaw-step-02-assert-1.yaml b/argo/applicationset-name-matches-project/.chainsaw-test/chainsaw-step-02-assert-1.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: applicationset-name-matches-project
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo/appproject-clusterresourceblacklist/.chainsaw-test/chainsaw-step-02-assert-1.yaml b/argo/appproject-clusterresourceblacklist/.chainsaw-test/chainsaw-step-02-assert-1.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: appproject-clusterresourceblacklist
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/argo/argo-cluster-generation-from-rancher-capi/.chainsaw-test/policy-ready.yaml b/argo/argo-cluster-generation-from-rancher-capi/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: argo-cluster-generation-from-rancher-capi
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/aws-cel/require-encryption-aws-loadbalancers/.chainsaw-test/policy-ready.yaml b/aws-cel/require-encryption-aws-loadbalancers/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-encryption-aws-loadbalancers
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/aws/require-encryption-aws-loadbalancers/.chainsaw-test/chainsaw-step-01-assert-1.yaml b/aws/require-encryption-aws-loadbalancers/.chainsaw-test/chainsaw-step-01-assert-1.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-encryption-aws-loadbalancers
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/disallow-cri-sock-mount/.chainsaw-test/policy-ready.yaml b/best-practices-cel/disallow-cri-sock-mount/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-container-sock-mounts
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/disallow-default-namespace/.chainsaw-test/policy-ready.yaml b/best-practices-cel/disallow-default-namespace/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-default-namespace
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/disallow-empty-ingress-host/.chainsaw-test/policy-ready.yaml b/best-practices-cel/disallow-empty-ingress-host/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-empty-ingress-host
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/disallow-helm-tiller/.chainsaw-test/policy-ready.yaml b/best-practices-cel/disallow-helm-tiller/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-helm-tiller
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/disallow-latest-tag/.chainsaw-test/policy-ready.yaml b/best-practices-cel/disallow-latest-tag/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-latest-tag
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/require-drop-all/.chainsaw-test/policy-ready.yaml b/best-practices-cel/require-drop-all/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: drop-all-capabilities
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/require-drop-cap-net-raw/.chainsaw-test/policy-ready.yaml b/best-practices-cel/require-drop-cap-net-raw/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: drop-cap-net-raw
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/require-labels/.chainsaw-test/policy-ready.yaml b/best-practices-cel/require-labels/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-labels
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/require-pod-requests-limits/.chainsaw-test/policy-ready.yaml b/best-practices-cel/require-pod-requests-limits/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-requests-limits
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/require-probes/.chainsaw-test/policy-ready.yaml b/best-practices-cel/require-probes/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-pod-probes
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/require-ro-rootfs/.chainsaw-test/policy-ready.yaml b/best-practices-cel/require-ro-rootfs/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-ro-rootfs
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/restrict-image-registries/.chainsaw-test/policy-ready.yaml b/best-practices-cel/restrict-image-registries/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: restrict-image-registries
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/restrict-node-port/.chainsaw-test/policy-ready.yaml b/best-practices-cel/restrict-node-port/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: restrict-nodeport
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices-cel/restrict-service-external-ips/.chainsaw-test/policy-ready.yaml b/best-practices-cel/restrict-service-external-ips/.chainsaw-test/policy-ready.yaml
@@ -3,5 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: restrict-external-ips
 status:
-  ready: true
-
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/add-network-policy/.chainsaw-test/policy-ready.yaml b/best-practices/add-network-policy/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: add-networkpolicy
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/add-networkpolicy-dns/.chainsaw-test/policy-ready.yaml b/best-practices/add-networkpolicy-dns/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: add-networkpolicy-dns
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/add-ns-quota/.chainsaw-test/policy-ready.yaml b/best-practices/add-ns-quota/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: add-ns-quota
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/add-rolebinding/.chainsaw-test/policy-ready.yaml b/best-practices/add-rolebinding/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: add-rolebinding
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/add-safe-to-evict/.chainsaw-test/policy-ready.yaml b/best-practices/add-safe-to-evict/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: add-safe-to-evict
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/disallow-cri-sock-mount/.chainsaw-test/policy-ready.yaml b/best-practices/disallow-cri-sock-mount/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-container-sock-mounts
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/disallow-default-namespace/.chainsaw-test/policy-ready.yaml b/best-practices/disallow-default-namespace/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-default-namespace
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/disallow-empty-ingress-host/.chainsaw-test/policy-ready.yaml b/best-practices/disallow-empty-ingress-host/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-empty-ingress-host
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/disallow-helm-tiller/.chainsaw-test/policy-ready.yaml b/best-practices/disallow-helm-tiller/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-helm-tiller
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/disallow-latest-tag/.chainsaw-test/policy-ready.yaml b/best-practices/disallow-latest-tag/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: disallow-latest-tag
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/require-drop-all/.chainsaw-test/policy-ready.yaml b/best-practices/require-drop-all/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: drop-all-capabilities
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/require-drop-cap-net-raw/.chainsaw-test/policy-ready.yaml b/best-practices/require-drop-cap-net-raw/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: drop-cap-net-raw
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/require-labels/.chainsaw-test/policy-ready.yaml b/best-practices/require-labels/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-labels
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/require-pod-requests-limits/.chainsaw-test/policy-ready.yaml b/best-practices/require-pod-requests-limits/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-requests-limits
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready
diff --git a/best-practices/require-probes/.chainsaw-test/policy-ready.yaml b/best-practices/require-probes/.chainsaw-test/policy-ready.yaml
@@ -3,4 +3,7 @@ kind: ClusterPolicy
 metadata:
   name: require-pod-probes
 status:
-  ready: true
+  conditions:
+  - reason: Succeeded
+    status: "True"
+    type: Ready