-
Story
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
Product / Portfolio Work
-
False
-
-
False
-
3
-
None
-
None
-
Lillipup Sprint 272
In order to ensure NetworkPolicy changes have sufficient review context, let's implement a test that ensures that each network policy rule present in our NetworkPolicy objects are separately "registered" with a provided justification.
The test would likely need to be run in the context of the e2e tests so that it has access to the actual NetworkPolicy objects that were installed via our release manifest into the cluster.
The test should:
- Define a registry of "allowedNetworkPolicies", which would map a network policy name to a set of ingress and egress rules + justifications.
- Validate that each justification is at least 40
characters. - Gather all of the NetworkPolicy objects in the OLMv1 system namespace
- For each NetworkPolicy object in the cluster, validate that:
- It is present in the allowedNetworkPolicies registry
- The cluster rules match the registry rules (we don't want either list to have extra rules that the other doesn't have).