add default deny test to ingress-and-egress-blocked

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
kubescape · Oct 14, 2024 · ee29962 · ee29962
1 parent 152bc44
commit ee29962
Show file tree

Hide file tree

Showing 2 changed files with 29 additions and 0 deletions.
diff --git a/rules/ingress-and-egress-blocked/test/default-policy/expected.json b/rules/ingress-and-egress-blocked/test/default-policy/expected.json
@@ -0,0 +1 @@
+[]
diff --git a/rules/ingress-and-egress-blocked/test/default-policy/input/pod.yaml b/rules/ingress-and-egress-blocked/test/default-policy/input/pod.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Pod
+metadata:
+    name: test
+    namespace: my-ns
+spec:
+      containers:
+      - args:
+        - server
+        env:
+          - name: BASE_HREF
+            value: /argo/
+        image: test:latest
+        name: test
+        imagePullPolicy: Never
+      - name : test2
+        image : test
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-deny-all
+  namespace: my-ns
+spec:
+  podSelector: {}
+  policyTypes:
+    - Ingress
+    - Egress