[Security Policies] Add tests for recursive pki/ directories (elastic…

…#235)
orestisfl · Oct 11, 2023 · 61c6a5c · 61c6a5c
1 parent 642f6eb
commit 61c6a5c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/bundle/compliance/cis_k8s/rules/cis_1_1_19/test.rego b/bundle/compliance/cis_k8s/rules/cis_1_1_19/test.rego
@@ -8,11 +8,13 @@ test_violation {
 	test.assert_fail(finding) with input as rule_input("etc/kubernetes/pki", "user", "root")
 	test.assert_fail(finding) with input as rule_input("etc/kubernetes/pki", "user", "user")
 	test.assert_fail(finding) with input as rule_input("etc/kubernetes/pki/some_file.txt", "root", "user")
+	test.assert_fail(finding) with input as rule_input("etc/kubernetes/pki/some/directory/some_file.txt", "root", "user")
 }
 
 test_pass {
 	test.assert_pass(finding) with input as rule_input("etc/kubernetes/pki", "root", "root")
 	test.assert_pass(finding) with input as rule_input("etc/kubernetes/pki/some_file.txt", "root", "root")
+	test.assert_pass(finding) with input as rule_input("etc/kubernetes/pki/some/directory/some_file.txt", "root", "root")
 }
 
 test_not_evaluated {