[Chainsaw Tests] Add Chainsaw Test for Pod Security Sub-rule Baseline Cluster Policy

pod-security/subrule/podsecurity-subrule-baseline/.chainsaw-test/chainsaw-step-01-assert-1.yaml

@@ -0,0 +1,6 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: podsecurity-subrule-baseline
+status:
+  ready: true

pod-security/subrule/podsecurity-subrule-baseline/.chainsaw-test/chainsaw-test.yaml

@@ -0,0 +1,29 @@
+apiVersion: chainsaw.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: podsecurity-subrule-baseline
+spec:
+  steps:
+  - name: step-01
+    try:
+      - apply:
+          file: ../podsecurity-subrule-baseline.yaml
+      - patch:
+          resource:
+            apiVersion: kyverno.io/v1
+            kind: ClusterPolicy
+            metadata:
+              name: podsecurity-subrule-baseline
+            spec:
+              validationFailureAction: Enforce
+      - assert:
+          file: chainsaw-step-01-assert-1.yaml
+  - name: step-02
+    try:
+    - apply:
+        file: pod-non-privileged.yaml
+    - apply:
+        expect:
+        - check:
+            ($error != null): true
+        file: pod-privileged.yaml

pod-security/subrule/podsecurity-subrule-baseline/.chainsaw-test/pod-non-privileged.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pod-non-privileged
+spec:
+  containers:
+  - name: nginx
+    image: nginx:1.14.1
+    securityContext:
+      privileged: false

pod-security/subrule/podsecurity-subrule-baseline/.chainsaw-test/pod-privileged.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pod-privileged
+spec:
+  containers:
+  - name: nginx
+    image: nginx:1.14.1
+    securityContext:
+      privileged: true