chainsaw tests

multitenancy-benchmarks/require-resource-quota/.chainsaw-test/chainsaw-enforce-assert.yaml

@@ -0,0 +1,6 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: require-resource-quota
+spec:
+  validationFailureAction: Enforce

multitenancy-benchmarks/require-resource-quota/.chainsaw-test/chainsaw-test.yaml

@@ -5,26 +5,34 @@ metadata:
   name: require-resource-quota
 spec:
   steps:
-  - name: step-01
+  - name: test-disallow-capabilities
     try:
+    - apply:
+        file: ../require-resource-quota.yaml
+    - assert:
+        file: chainsaw-policy-assert.yaml
     - apply:
         file: ns-good.yaml
-    - script:
-        content: |
-          sed 's/validationFailureAction: audit/validationFailureAction: Audit/' ../require-resource-quota.yaml | kubectl create -f -
+    - patch:
+        resource:
+          apiVersion: kyverno.io/v1
+          kind: ClusterPolicy
+          metadata:
+            name: require-resource-quota
+          spec:
+            validationFailureAction: Enforce
+    # - script:
+    #     content: |
+    #       sed 's/validationFailureAction: Audit/validationFailureAction: Enforce/' ../require-resource-quota.yaml | kubectl apply -f - 
     - assert:
-        file: chainsaw-step-01-assert-1.yaml
-  - name: step-02
-    try:
+        file: chainsaw-enforce-assert.yaml
     - apply:
         expect:
         - check:
             ($error != null): true
         file: ns-bad.yaml
-  - name: step-99
-    try:
     - delete:
         ref:
-          apiVersion: kyverno.io/v1
-          kind: ClusterPolicy
-          name: require-resource-quota
+          apiVersion: v1
+          kind: namespace
+          name: good-ns

multitenancy-benchmarks/require-resource-quota/.chainsaw-test/ns-good.yaml

@@ -1,4 +1,3 @@
-
 apiVersion: v1
 kind: Namespace
 metadata: