Added test for copy-ns-labels policy

other/copy-namespace-labels/.chainsaw-test/baddeployment.yaml

@@ -0,0 +1,47 @@
+#Outside Namespace, deployment with owner label and kubernetes.io/metadata.name label
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment-with-ouside-ns
+  namespace: without-ns
+  labels:
+    app: my-app
+    tier: frontend
+spec:
+  replicas: 1  
+  selector:
+    matchLabels:
+      app: my-app
+      tier: frontend
+  template:
+    metadata:
+      labels:
+        app: my-app
+        tier: frontend
+        owner: "any-corp"   
+        kubernetes.io/metadata.name: "pod-with-owner-and-metadata-name"
+    spec:
+      containers:
+        - name: bad-deploy-outside-ns
+          image: nginx:1.25
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: bad-deployment
+  namespace: within-ns
+  labels:
+    app: bad-app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: bad-app
+  template:
+    metadata:
+      labels:
+        app: bad-app
+    spec:
+      containers:
+      - name: bad-app-deploy
+        image: nginx:1.25

other/copy-namespace-labels/.chainsaw-test/chainsaw-test.yaml

@@ -0,0 +1,24 @@
+apiVersion: chainsaw.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  creationTimestamp: null
+  name: copy-namespace-labels
+spec:
+  steps:
+  - name: step-01
+    try:
+    - apply:
+        file: ns.yaml
+    - apply:
+        file: ../copy-namespace-labels.yaml
+    - assert:
+        file: policy-ready.yaml
+  - name: step-02
+    try:
+    - apply:
+        file: gooddeployment.yaml
+    - apply:
+        expect:
+        - check:
+            ($error != null): true
+        file: baddeployment.yaml

other/copy-namespace-labels/.chainsaw-test/gooddeployment.yaml

@@ -0,0 +1,25 @@
+#Within Namespace, with Owner Label and additional labels
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment-with-ns
+  namespace: within-ns
+  labels:
+    app: good-app
+    owner: "any-corp"  
+    env: dev
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: good-app
+  template:
+    metadata:
+      labels:
+        app: good-app
+        env: dev
+        owner: "any-corp"
+    spec:
+      containers:
+        - name: good-app-deploy
+          image: nginx:1.25

other/copy-namespace-labels/.chainsaw-test/ns.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: within-ns
+  labels:
+    owner: "any-corp"  
+    env: dev

other/copy-namespace-labels/.chainsaw-test/policy-ready.yaml

@@ -0,0 +1,6 @@
+apiVersion: kyverno.io/v1          
+kind: ClusterPolicy
+metadata:
+  name: copy-namespace-labels
+status:
+  ready: true