name: kyverno-policies-chart-tests
policies:
  - ../templates/require-resource-limits.yaml
  - ../templates/disallow-privileged.yaml
  - ../templates/require-labels.yaml
resources:
  - resources/pod-compliant.yaml
  - resources/pod-no-limits.yaml
  - resources/pod-privileged.yaml
  - resources/deployment-no-labels.yaml
results:
  - policy: require-resource-limits
    rule: check-container-limits
    resource: pod-compliant
    namespace: default
    result: pass
  - policy: require-resource-limits
    rule: check-container-limits
    resource: pod-no-limits
    namespace: default
    result: fail
  - policy: disallow-privileged-containers
    rule: privileged-containers
    resource: pod-privileged
    namespace: default
    result: fail
  - policy: require-standard-labels
    rule: check-required-labels
    resource: deployment-no-labels
    namespace: default
    result: fail