Skip to content

Commit 643ce0d

Browse files
added configs
Signed-off-by: hackeramitkumar <[email protected]>
1 parent 1d0fba3 commit 643ce0d

File tree

7 files changed

+88
-4
lines changed

7 files changed

+88
-4
lines changed

Deployment1.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# verified
1+
#verified
22
apiVersion: apps/v1
33
kind: Deployment
44
metadata:

cli-tests/kuttl-tests/policy.yaml

+28
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
apiVersion: kyverno.io/v1
2+
kind: ClusterPolicy
3+
metadata:
4+
name: check-image
5+
spec:
6+
validationFailureAction: Enforce
7+
background: false
8+
webhookTimeoutSeconds: 30
9+
failurePolicy: Fail
10+
rules:
11+
- name: check-image
12+
match:
13+
any:
14+
- resources:
15+
kinds:
16+
- Deployment
17+
verifyImages:
18+
- imageReferences:
19+
- "ghcr.io/hackeramitkumar*"
20+
attestors:
21+
- count: 1
22+
entries:
23+
- keys:
24+
publicKeys: |-
25+
-----BEGIN PUBLIC KEY-----
26+
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFN8gGjQua2g8N+aLx3Eff+/j5HxL
27+
bV+H2z50/0A4d8XyMUvizPQBtcgei43pqLj1850m3wSwI08z2+6zT1QaEg==
28+
-----END PUBLIC KEY-----
+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
apiVersion: apps/v1
2+
kind: Deployment
3+
metadata:
4+
labels:
5+
app: nginx
6+
name: nginx-deployment
7+
spec:
8+
replicas: 1
9+
selector:
10+
matchLabels:
11+
app: nginx
12+
template:
13+
metadata:
14+
labels:
15+
app: nginx
16+
spec:
17+
containers:
18+
- image: ghcr.io/hackeramitkumar/test5:app
19+
name: nginx
20+
resources: {}
+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
apiVersion: apps/v1
2+
kind: Deployment
3+
metadata:
4+
labels:
5+
app: nginx
6+
name: nginx-deployment
7+
spec:
8+
replicas: 1
9+
selector:
10+
matchLabels:
11+
app: nginx
12+
template:
13+
metadata:
14+
labels:
15+
app: nginx
16+
spec:
17+
containers:
18+
- image: ghcr.io/hackeramitkumar/test5:app2
19+
name: nginx
20+
resources: {}

cli-tests/resources.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ spec:
77
- name: signed
88
image: ghcr.io/hackeramitkumar/test5:app
99
- name: unsigned
10-
image: ghcr.io/hackeramitkumar/test5:app2
10+
image: ghcr.io/hackeramitkumar/test6:app
1111
---
1212
apiVersion: v1
1313
kind: Pod

kubeconfig

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
clusters:
2+
- cluster:
3+
certificate-authority-data: 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
4+
server: https://127.0.0.1:35381
5+
name: cluster
6+
contexts:
7+
- context:
8+
cluster: cluster
9+
user: user
10+
name: cluster
11+
current-context: cluster
12+
preferences: {}
13+
users:
14+
- name: user
15+
user:
16+
client-certificate-data: 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
17+
client-key-data: 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

policy3.yml

+1-2
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,6 @@ spec:
1414
- resources:
1515
kinds:
1616
- Deployment
17-
- Pod
1817
verifyImages:
1918
- imageReferences:
2019
- "ghcr.io/hackeramitkumar*"
@@ -26,4 +25,4 @@ spec:
2625
-----BEGIN PUBLIC KEY-----
2726
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFN8gGjQua2g8N+aLx3Eff+/j5HxL
2827
bV+H2z50/0A4d8XyMUvizPQBtcgei43pqLj1850m3wSwI08z2+6zT1QaEg==
29-
-----END PUBLIC KEY-----
28+
-----END PUBLIC KEY-----

0 commit comments

Comments
 (0)