CHANGELOG.md

@@ -3,6 +3,10 @@
 Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ---
+## [1.1.0-bb.4] - 2023-03-29
+### Changed
+- modified enabled policy test to only run on package pipelines
+
 ## [1.1.0-bb.3] - 2023-03-04
 ### Changed
 - ironbank/opensource/kubernetes/kubectl updated from v1.26.1 to v1.26.2

README.md

 # kyverno-policies
 
-![Version: 1.1.0-bb.3](https://img.shields.io/badge/Version-1.1.0--bb.3-informational?style=flat-square) ![AppVersion: 1.1.0](https://img.shields.io/badge/AppVersion-1.1.0-informational?style=flat-square)
+![Version: 1.1.0-bb.4](https://img.shields.io/badge/Version-1.1.0--bb.4-informational?style=flat-square) ![AppVersion: 1.1.0](https://img.shields.io/badge/AppVersion-1.1.0-informational?style=flat-square)
 
 Collection of Kyverno security and best-practice policies for Kyverno
 

chart/Chart.yaml

 apiVersion: v2
 name: kyverno-policies
-version: 1.1.0-bb.3
+version: 1.1.0-bb.4
 appVersion: 1.1.0
 icon: https://github.com/kyverno/kyverno/raw/main/img/logo.png
 description: Collection of Kyverno security and best-practice policies for Kyverno

chart/tests/scripts/test-policies.sh

@@ -16,19 +16,21 @@ POLICIES=($ENABLED_POLICIES)
 
 #######################################
 
-# Test for disabled cluster policies
-echo -e "${CYN}Test: Disabled cluster policies are not deployed${NC}"
-echo -n "- enabled policies >= deployed policies: "
-DEPLOYED_POLICIES=( $(kubectl get cpol --no-headers -o custom-columns=":metadata.name") )
-# Get deployed policies that are not in our enabled policies list
-DELTA=( $(echo ${POLICIES[@]} ${POLICIES[@]} ${DEPLOYED_POLICIES[@]} | tr ' ' '\n' | sort | uniq -u) )
-if [ -z $DELTA ]; then
-  echo -e "${GRN}PASS${NC}"
-  ((PASS+=1))
-else
-  echo -e "${RED}FAIL${NC}"
-  echo "Policies causing failure: ${DELTA[@]}"
-  ((FAIL+=1))
+# Test for disabled cluster policies for package level only
+if [[ $PACKAGE_LEVEL_TEST == "true" ]]; then
+  echo -e "${CYN}Test: Disabled cluster policies are not deployed${NC}"
+  echo -n "- enabled policies >= deployed policies: "
+  DEPLOYED_POLICIES=( $(kubectl get cpol --no-headers -o custom-columns=":metadata.name") )
+  # Get deployed policies that are not in our enabled policies list
+  DELTA=( $(echo ${POLICIES[@]} ${POLICIES[@]} ${DEPLOYED_POLICIES[@]} | tr ' ' '\n' | sort | uniq -u) )
+  if [ -z $DELTA ]; then
+    echo -e "${GRN}PASS${NC}"
+    ((PASS+=1))
+  else
+    echo -e "${RED}FAIL${NC}"
+    echo "Policies causing failure: ${DELTA[@]}"
+    ((FAIL+=1))
+  fi
 fi
 
 #######################################

tests/test-values.yaml

 bbtests:
   enabled: true
+  scripts:
+    envs:
+      PACKAGE_LEVEL_TEST: "true"
 waitforready:
   imagePullSecrets:
   - name: private-registry