| | @@ -0,0 +1,25 @@ |
| + | name: admission-policy-check |
| + | |
| + | on: |
| + | pull_request: |
| + | paths: |
| + | - "policy/**" |
| + | workflow_dispatch: |
| + | |
| + | permissions: |
| + | contents: read |
| + | |
| + | jobs: |
| + | kyverno-test: |
| + | runs-on: ubuntu-latest |
| + | steps: |
| + | - uses: actions/checkout@v4 |
| + | |
| + | - name: install kyverno cli |
| + | run: | |
| + | curl -sLo kyverno.tar.gz https://github.com/kyverno/kyverno/releases/download/v1.12.5/kyverno-cli_v1.12.5_linux_x86_64.tar.gz |
| + | tar -xzf kyverno.tar.gz kyverno |
| + | sudo install kyverno /usr/local/bin/ |
| + | |
| + | - name: validate policy |
| + | run: kyverno apply policy/kyverno-verify-images.yaml --resource policy/test/pods.yaml |