[Chainsaw Tests] Add Chainsaw Test for Pod Security Sub-rule Baseline Cluster Policy

[mohamedawnallah]

Related Issue(s)

Partial Fix for Issue #950

Description

Chainsaw test the podsecurity-subrule-baseline.yaml Cluster Policy with privileged and non-privileged pods as test manifests.

Additional Context

Kubernetes Pod Security Standards Docs:
https://kubernetes.io/docs/concepts/security/pod-security-standards/

Checklist

• I have read the policy contribution guidelines.
• I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended.
• I have added the artifacthub-pkg.yml file and have verified it is complete and correct.

[chipzoller]

Appreciate adding this, but we really want more comprehensive tests here. Because the subrule encompasses an entire profile (baseline in this case), we really want to test ALL the controls in that profile. Take a look at all the separate policies here. We really want to incorporate all of these test resources (check the .kyverno-test folders) as input test resources into this Chainsaw test. Because they are so extensive in number, in this case it may be OK to just reference them rather than copy-and-paste.

[chipzoller]

Any update?

[mohamedawnallah]

I apologize, but I thought I would have time to work on this. Feel free, anyone, to build upon my work here. Thanks!