Merge branch 'master' into sbapi2

codeready-toolchain · Oct 2, 2023 · 02dc856 · 02dc856
2 parents d8382b3 + 74689fa
commit 02dc856
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/testsupport/tiers/checks.go b/testsupport/tiers/checks.go
@@ -159,7 +159,7 @@ func (a *baseTierChecks) GetNamespaceObjectChecks(nsType string) []namespaceObje
 	case "stage":
 		otherNamespaceKind = "dev"
 	}
-	checks = append(checks, networkPolicyAllowFromCRW(), networkPolicyAllowFromOtherNamespace(otherNamespaceKind), numberOfNetworkPolicies(7))
+	checks = append(checks, networkPolicyAllowFromCRW(), networkPolicyAllowFromVirtualizationNamespaces(), networkPolicyAllowFromOtherNamespace(otherNamespaceKind), numberOfNetworkPolicies(8))
 
 	return checks
 }
@@ -229,7 +229,7 @@ func (a *base1nsTierChecks) GetNamespaceObjectChecks(_ string) []namespaceObject
 		crtadminViewRoleBinding(),
 	}
 	checks = append(checks, commonNetworkPolicyChecks()...)
-	checks = append(checks, networkPolicyAllowFromCRW(), numberOfNetworkPolicies(6))
+	checks = append(checks, networkPolicyAllowFromCRW(), networkPolicyAllowFromVirtualizationNamespaces(), numberOfNetworkPolicies(7))
 	return checks
 }
 
@@ -1042,6 +1042,10 @@ func networkPolicyAllowFromConsoleNamespaces() namespaceObjectsCheck {
 	return networkPolicyIngressFromPolicyGroup("allow-from-console-namespaces", "console")
 }
 
+func networkPolicyAllowFromVirtualizationNamespaces() namespaceObjectsCheck {
+	return networkPolicyIngress("allow-from-openshift-virtualization-os-images", "kubernetes.io/metadata.name", "openshift-virtualization-os-images")
+}
+
 func networkPolicyAllowFromCRW() namespaceObjectsCheck {
 	return networkPolicyIngressFromPolicyGroup("allow-from-codeready-workspaces-operator", "codeready-workspaces")
 }