Files
opendesk/docs/security/wld-iso/kyverno-test.yaml
2025-12-01 13:33:13 +01:00

34 lines
793 B
YAML

apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
name: wld-iso
policies:
- wld-iso-001_host-namespaces.yaml
- wld-iso-002_hostpath-volumes.yaml
- wld-iso-003_host-ports.yaml
- wld-iso-004_host-probes.yaml
- wld-iso-005_volume-types.yaml
resources:
- ../../../rendered.yaml
exceptions: []
results:
# wld-iso-001
- policy: disallow-host-namespaces
rule: host-namespaces
result: pass
# wld-iso-002
- policy: disallow-host-path
rule: host-path
result: pass
# wld-iso-003
- policy: disallow-host-ports
rule: host-ports-none
result: pass
# wld-iso-004
- policy: disallow-host-probes-lifecycle
rule: host-probes-lifecycle
result: pass
# wld-iso-005
- policy: restrict-volume-types
rule: restricted-volumes
result: pass