fix: kyverno test workload

.gitignore

@@ -0,0 +1 @@
+.vscode

resources/add-label-namespace.yml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: meu-namespace
+  labels:
+    ns: "granato"

resources/disallow-root-user.yml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: non-root-pod
+spec:
+  containers:
+    - name: non-root-container
+      image: nginx
+      securityContext:
+        runAsNonRoot: true
+      resources:
+        limits:
+          cpu: "1"
+          memory: "512Mi"

resources/registry-allowed.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: trusted-pod
+spec:
+  containers:
+    - name: trusted-container
+      image: trustedrepo.com/my-image
+      resources:
+        limits:
+          cpu: "1"
+          memory: "1Gi"

resources/require-resources-limits-exclude.yml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: limited-resources-pod
+spec:
+  containers:
+    - name: limited-resources-container
+      image: nginx
+      resources:
+        limits:
+          cpu: "1"
+          memory: "500Mi"

resources/require-resources-limits.yml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: requests-limits-pod
+spec:
+  containers:
+    - name: requests-limits-container
+      image: nginx
+      resources:
+        requests:
+          cpu: "500m"
+          memory: "256Mi"
+        limits:
+          cpu: "500m"
+          memory: "1Gi"