kubernetes/test/integration/apiserver/cel/admission_policy_test.go

const beginSentinel …

const recordSeparator …

var testSpec …

func createV1beta1ValidatingPolicyAndBinding(client clientset.Interface, convertedRules []admissionregistrationv1beta1.NamedRuleWithOperations) error { … }

func createV1alpha1ValidatingPolicyAndBinding(client clientset.Interface, convertedRules []admissionregistrationv1alpha1.NamedRuleWithOperations) error { … }

// This test shows that policy intercepts all requests for all resources,
// subresources, verbs, and input versions of policy/binding.
//
// This test tries to mirror very closely the same test for webhook admission
// test/integration/apiserver/admissionwebhook/admission_test.go testWebhookAdmission
func TestPolicyAdmission(t *testing.T) { … }

type policyExpectationHolder …

func (p *policyExpectationHolder) reset(t *testing.T) { … }

func (p *policyExpectationHolder) expect(gvr schema.GroupVersionResource, gvk, optionsGVK schema.GroupVersionKind, operation v1beta1.Operation, name, namespace string, object, oldObject, options bool) { … }

func (p *policyExpectationHolder) verify(t *testing.T) { … }

func (p *policyExpectationHolder) HandleWarningHeader(code int, agent string, message string) { … }