Workflow failed: Tests (refs/heads/release-1.19)

Author: github-actions[bot]Created Aug 26, 2026Updated Sep 30, 2026

Labelstesttriageworkflow-failure

Workflow failure

The Tests workflow did not succeed.


Run	`36774993847`
Branch	`refs/heads/release-1.19`
Commit	`a38fb6f02b0edabed1d5ba0c7e3ee563d77240a0`
Triggered by	@JimBugwadia
Conclusion	`failure`

Job results

Job	Result
`images`	`success`
`cli`	`success`
`conformance-tests`	`failure`
`conformance-policy-library-tests`	`success`
`k6-tests`	`success`
`perf`	`success`

Failed job instances (65)

Each name links to the detailed log. Those logs are deleted once the configured Actions retention period elapses; after that, the excerpts below are the surviving record.

Conformance tests / image-validating-policies (v1.33.7, 2) — failing log excerpt

- apiGroups:
             - ""
    sink.go:61: | 20:55:29 | accept | check webhooks    | ASSERT    | RUN   | admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration @ kyverno-resource-validating-webhook-cfg
    sink.go:61: | 20:55:30 | accept | check webhooks    | ASSERT    | DONE  | admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration @ kyverno-resource-validating-webhook-cfg
    sink.go:61: | 20:55:30 | accept | check webhooks    | TRY       | END   |
    sink.go:61: | 20:55:30 | accept | create policy     | CLEANUP   | BEGIN |
    sink.go:61: | 20:55:31 | accept | create policy     | DELETE    | OK    | policies.kyverno.io/v1beta1/ImageValidatingPolicy @ check-signed-images
    sink.go:61: | 20:55:31 | accept | create policy     | CLEANUP   | END   |
    sink.go:61: | 20:55:31 | accept | @chainsaw         | CLEANUP   | BEGIN |
    sink.go:61: | 20:55:31 | accept | @chainsaw         | DELETE    | OK    | v1/Namespace @ chainsaw-crack-bison
Error: some tests failed
    sink.go:61: | 20:55:31 | accept | @chainsaw         | CLEANUP   | END   |
=== RUN   chainsaw/webhook-configuration/combined[accept]
=== RUN   chainsaw/webhook-configuration/ephemeral-containers/single[accept]
=== RUN   chainsaw/webhook-configuration/fine-grained/match-conditions[accept]
=== RUN   chainsaw/webhook-configuration/fine-grained/match-constraints[accept]
=== RUN   chainsaw/webhook-configuration/fine-grained/timeout[accept]
=== NAME  chainsaw
    sink.go:61: | 20:55:31 | chainsaw | @chainsaw | INTERNAL  | LOG   |
--- FAIL: chainsaw (48.35s)
    --- PASS: chainsaw/validation-actions/audit[audit] (4.97s)
    --- PASS: chainsaw/validation-actions/deny[deny] (1.79s)
    --- PASS: chainsaw/validation-actions/none[deny] (1.77s)
    --- PASS: chainsaw/validation-actions/warn[audit] (2.80s)
    --- PASS: chainsaw/validation-checks/invalid-action[missing-action] (0.09s)
    --- PASS: chainsaw/validation-rules/accept[accept] (3.94s)
    --- PASS: chainsaw/validation-rules/reject[reject] (1.79s)
    --- FAIL: chainsaw/webhook-configuration/basic/single[accept] (31.20s)
    --- SKIP: chainsaw/webhook-configuration/combined[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/ephemeral-containers/single[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/fine-grained/match-conditions[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/fine-grained/match-constraints[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/fine-grained/timeout[accept] (0.00s)
FAIL
Tests Summary...
- Passed  tests 7
- Failed  tests 1
- Skipped tests 5
Done with failures.
##[error]Process completed with exit code 1.

Conformance tests / generate-validating-admission-policy (v1.34.3) — failing log excerpt

…resources-with-namespace-selector] (0.29s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-exclude-resources-with-object-selector[cpol-exclude-resources-with-object-selector] (0.27s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-exclude-user-and-roles[cpol-exclude-user-and-roles] (0.56s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-match-resource-created-by-user[cpol-match-resource-created-by-user] (0.27s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-match-resource-using-annotations[cpol-match-resource-using-annotations] (0.25s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-multiple-all-match-resources[cpol-multiple-all-match-resources] (0.25s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-multiple-rules[cpol-multiple-rules] (1.17s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-multiple-validation-failure-action-overrides[cpol-multiple-validation-failure-action-overrides] (0.64s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-non-cel-rule[cpol-non-cel-rule] (0.31s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-validation-failure-action-overrides-with-namespace[cpol-validation-failure-action-overrides-with-namespace] (0.48s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-with-exception-and-conditions[cpol-with-exceptions-and-conditions] (0.50s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-with-exception-and-namespace-selector[cpol-with-exception-and-namesapce-selector] (0.52s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-with-exception-and-object-selector[cpol-with-exception-and-object-selector] (0.54s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/cpol-with-exception-in-specific-namespace[cpol-with-exception-in-specific-namespace] (0.52s)
    --- PASS: chainsaw/clusterpolicy/standard/skip-generate/disable-generate[disable-generate] (0.52s)
    --- FAIL: chainsaw/validatingpolicy/autogen-enabled[autogen-enabled] (30.09s)
    --- SKIP: chainsaw/validatingpolicy/check-deployment-labels[check-deployment-labels] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/generation-config/default[generation-config-default] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/generation-config/disabled[generation-config-disabled] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/generation-config/enabled[generation-config-enabled] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/missing-action[missing-action] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/with-cel-exception[with-cel-exception] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/with-finegrained-exception[allow-specific-values] (0.00s)
    --- SKIP: chainsaw/validatingpolicy/with-multiple-exceptions[with-multiple-exceptions] (0.00s)
FAIL
Tests Summary...
- Passed  tests 38
- Failed  tests 1
- Skipped tests 8
Done with failures.
##[error]Process completed with exit code 1.

Conformance tests / image-validating-policies (v1.35.1, 2) — failing log excerpt

- apiGroups:
             - ""
    sink.go:61: | 20:55:10 | accept | check webhooks    | ASSERT    | RUN   | admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration @ kyverno-resource-validating-webhook-cfg
    sink.go:61: | 20:55:10 | accept | check webhooks    | ASSERT    | DONE  | admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration @ kyverno-resource-validating-webhook-cfg
    sink.go:61: | 20:55:10 | accept | check webhooks    | TRY       | END   |
    sink.go:61: | 20:55:10 | accept | create policy     | CLEANUP   | BEGIN |
    sink.go:61: | 20:55:11 | accept | create policy     | DELETE    | OK    | policies.kyverno.io/v1beta1/ImageValidatingPolicy @ check-signed-images
    sink.go:61: | 20:55:11 | accept | create policy     | CLEANUP   | END   |
    sink.go:61: | 20:55:11 | accept | @chainsaw         | CLEANUP   | BEGIN |
    sink.go:61: | 20:55:11 | accept | @chainsaw         | DELETE    | OK    | v1/Namespace @ chainsaw-central-locust
Error: some tests failed
    sink.go:61: | 20:55:11 | accept | @chainsaw         | CLEANUP   | END   |
=== RUN   chainsaw/webhook-configuration/combined[accept]
=== RUN   chainsaw/webhook-configuration/ephemeral-containers/single[accept]
=== RUN   chainsaw/webhook-configuration/fine-grained/match-conditions[accept]
=== RUN   chainsaw/webhook-configuration/fine-grained/match-constraints[accept]
=== RUN   chainsaw/webhook-configuration/fine-grained/timeout[accept]
=== NAME  chainsaw
    sink.go:61: | 20:55:11 | chainsaw | @chainsaw | INTERNAL  | LOG   |
--- FAIL: chainsaw (46.90s)
    --- PASS: chainsaw/validation-actions/audit[audit] (4.99s)
    --- PASS: chainsaw/validation-actions/deny[deny] (1.57s)
    --- PASS: chainsaw/validation-actions/none[deny] (1.57s)
    --- PASS: chainsaw/validation-actions/warn[audit] (2.58s)
    --- PASS: chainsaw/validation-checks/invalid-action[missing-action] (0.08s)
    --- PASS: chainsaw/validation-rules/accept[accept] (3.34s)
    --- PASS: chainsaw/validation-rules/reject[reject] (1.57s)
    --- FAIL: chainsaw/webhook-configuration/basic/single[accept] (31.20s)
    --- SKIP: chainsaw/webhook-configuration/combined[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/ephemeral-containers/single[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/fine-grained/match-conditions[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/fine-grained/match-constraints[accept] (0.00s)
    --- SKIP: chainsaw/webhook-configuration/fine-grained/timeout[accept] (0.00s)
FAIL
Tests Summary...
- Passed  tests 7
- Failed  tests 1
- Skipped tests 5
Done with failures.
##[error]Process completed with exit code 1.

Conformance tests / image-validating-policies (v1.35.1, 1) — failing log excerpt

-      status: "True"
        -      type: RBACPermissionsGranted
        -    (conditions[?type == 'WebhookConfigured']):
        -    - message: Webhook configured.
        -      reason: Succeeded
        -      status: "True"
        -      type: WebhookConfigured
        -    ready: true
        +    ready: false
    sink.go:61: | 20:57:00 | block-ephemeral-containers | wait-validating-policy-ready | TRY       | END   |
    sink.go:61: | 20:57:00 | block-ephemeral-containers | create policy                | CLEANUP   | BEGIN |
    sink.go:61: | 20:57:01 | block-ephemeral-containers | create policy                | DELETE    | OK    | policies.kyverno.io/v1beta1/ImageValidatingPolicy @ block-ephemeral-containers
    sink.go:61: | 20:57:01 | block-ephemeral-containers | create policy                | CLEANUP   | END   |
    sink.go:61: | 20:57:01 | block-ephemeral-containers | @chainsaw                    | CLEANUP   | BEGIN |
    sink.go:61: | 20:57:01 | block-ephemeral-containers | @chainsaw                    | DELETE    | OK    | v1/Namespace @ chainsaw-renewed-kid
Error: some tests failed
    sink.go:61: | 20:57:01 | block-ephemeral-containers | @chainsaw                    | CLEANUP   | END   |
=== NAME  chainsaw
    sink.go:61: | 20:57:01 | chainsaw | @chainsaw | INTERNAL  | LOG   |
--- FAIL: chainsaw (155.71s)
    --- PASS: chainsaw/exceptions/wrong-exception[exception-test] (16.15s)
    --- PASS: chainsaw/match-conditions[audit] (6.13s)
    --- PASS: chainsaw/mutate-digest[mutate-digest] (5.04s)
    --- PASS: chainsaw/mutate-digest-disabled[mutate-digest-disabled] (5.01s)
    --- PASS: chainsaw/mutate-then-validate[mutate-then-validate] (4.00s)
    --- PASS: chainsaw/report/admission[accept] (23.02s)
    --- PASS: chainsaw/report/background[accept] (12.91s)
    --- PASS: chainsaw/report/with-exception[with-exception] (15.18s)
    --- PASS: chainsaw/security/forged-verification-annotation[forged-verification-annotation] (1.78s)
    --- PASS: chainsaw/standard/cosign-attestation-extract-cache-hit[cosign-attestation-extract-cache-hit] (17.22s)
    --- PASS: chainsaw/standard/notary-basic[exception-test] (6.01s)
    --- PASS: chainsaw/standard/notary-configmap-cert[exception-test] (12.17s)
    --- FAIL: chainsaw/subresources/block-ephemeral-containers[block-ephemeral-containers] (31.08s)
FAIL
Tests Summary...
- Passed  tests 12
- Failed  tests 1
- Skipped tests 0
Done with failures.
##[error]Process completed with exit code 1.

Conformance tests / image-validating-policies (v1.34.3, 0) — failing log excerpt

sink.go:61: | 20:54:42 | autogen-deployments-cronjobs | create policy                      | CLEANUP   | END   |
    sink.go:61: | 20:54:42 | autogen-deployments-cronjobs | @chainsaw                          | CLEANUP   | BEGIN |
    sink.go:61: | 20:54:42 | autogen-deployments-cronjobs | @chainsaw                          | DELETE    | OK    | v1/Namespace @ chainsaw-stable-leopard
    sink.go:61: | 20:54:42 | autogen-deployments-cronjobs | @chainsaw                          | CLEANUP   | END   |
=== RUN   chainsaw/autogen/autogen-deployments-statefulsets[autogen-deployments-statefulsets]
=== RUN   chainsaw/autogen/none[none]
=== RUN   chainsaw/autogen/should-autogen[should-autogen]
=== RUN   chainsaw/autogen/should-not-autogen[should-not-autogen]
=== RUN   chainsaw/context/configmap[configmap]
=== RUN   chainsaw/context/globalreference[apicall-correct]
=== RUN   chainsaw/context/imagedata/image-data[image-data]
=== RUN   chainsaw/context/imagedata/image-data-arch[check-image-arch]
=== RUN   chainsaw/context/imagedata/imagereference[image-data]
Error: some tests failed
=== RUN   chainsaw/context/resource[fetch-pod-resource]
=== RUN   chainsaw/exceptions/autogen[autogen-deployments-cronjobs-statefulsets]
=== RUN   chainsaw/exceptions/regular[exception-test]
=== NAME  chainsaw
    sink.go:61: | 20:54:42 | chainsaw | @chainsaw | INTERNAL  | LOG   |
--- FAIL: chainsaw (5.10s)
    --- FAIL: chainsaw/autogen/autogen-deployments-cronjobs[autogen-deployments-cronjobs] (5.09s)
    --- SKIP: chainsaw/autogen/autogen-deployments-statefulsets[autogen-deployments-statefulsets] (0.00s)
    --- SKIP: chainsaw/autogen/none[none] (0.00s)
    --- SKIP: chainsaw/autogen/should-autogen[should-autogen] (0.00s)
    --- SKIP: chainsaw/autogen/should-not-autogen[should-not-autogen] (0.00s)
    --- SKIP: chainsaw/context/configmap[configmap] (0.00s)
    --- SKIP: chainsaw/context/globalreference[apicall-correct] (0.00s)
    --- SKIP: chainsaw/context/imagedata/image-data[image-data] (0.00s)
    --- SKIP: chainsaw/context/imagedata/image-data-arch[check-image-arch] (0.00s)
    --- SKIP: chainsaw/context/imagedata/imagereference[image-data] (0.00s)
    --- SKIP: chainsaw/context/resource[fetch-pod-resource] (0.00s)
    --- SKIP: chainsaw/exceptions/autogen[autogen-deployments-cronjobs-statefulsets] (0.00s)
    --- SKIP: chainsaw/exceptions/regular[exception-test] (0.00s)
FAIL
Tests Summary...
- Passed  tests 0
- Failed  tests 1
- Skipped tests 12
Done with failures.
##[error]Process completed with exit code 1.

Conformance tests / force-failure-policy-ignore (v1.35.1) — failing log excerpt

…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
             service:
               name: kyverno-svc
               namespace: kyverno
        @@ -29,7 +30,7 @@
               values:
               - kyverno
           objectSelector: {}
        -  reinvocationPolicy: Never
        +  reinvocationPolicy: IfNeeded
           rules:
           - apiGroups:
             - ""
    sink.go:61: | 20:54:39 | accept | check webhooks    | ASSERT    | RUN   | admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration @ kyverno-resource-validating-webhook-cfg
    sink.go:61: | 20:54:39 | accept | check webhooks    | ASSERT    | DONE  | admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration @ kyverno-resource-validating-webhook-cfg
    sink.go:61: | 20:54:39 | accept | check webhooks    | TRY       | END   |
    sink.go:61: | 20:54:39 | accept | create policy     | CLEANUP   | BEGIN |
    sink.go:61: | 20:54:39 | accept | create policy     | DELETE    | OK    | policies.kyverno.io/v1beta1/ImageValidatingPolicy @ check-signed-images
    sink.go:61: | 20:54:39 | accept | create policy     | CLEANUP   | END   |
    sink.go:61: | 20:54:39 | accept | @chainsaw         | CLEANUP   | BEGIN |
    sink.go:61: | 20:54:39 | accept | @chainsaw         | DELETE    | OK    | v1/Namespace @ chainsaw-legal-lizard
    sink.go:61: | 20:54:39 | accept | @chainsaw         | CLEANUP   | END   |
=== RUN   chainsaw/mutating-policy/fail[different-trigger-target]
=== RUN   chainsaw/validating-policy/fail[single]
Error: some tests failed
=== NAME  chainsaw
    sink.go:61: | 20:54:39 | chainsaw | @chainsaw | INTERNAL  | LOG   |
--- FAIL: chainsaw (32.47s)
    --- PASS: chainsaw/cluster-policy/fail[fail] (0.47s)
    --- PASS: chainsaw/cluster-policy/fail-deprecated[fail] (0.41s)
    --- FAIL: chainsaw/image-validating-policy/fail[accept] (31.58s)
    --- SKIP: chainsaw/mutating-policy/fail[different-trigger-target] (0.00s)
    --- SKIP: chainsaw/validating-policy/fail[single] (0.00s)
FAIL
Tests Summary...
- Passed  tests 2
- Failed  tests 1
- Skipped tests 2
Done with failures.
##[error]Process completed with exit code 1.

Conformance tests / image-validating-policies (v1.33.7, 1) — failing log excerpt

-      status: "True"
        -      type: RBACPermissionsGranted
        -    (conditions[?type == 'WebhookConfigured']):
        -    - message: Webhook configured.
        -      reason: Succeeded
        -      status: "True"
        -      type: WebhookConfigured
        -    ready: true
        +    ready: false
    sink.go:61: | 20:57:35 | block-ephemeral-containers | wait-validating-policy-ready | TRY       | END   |
    sink.go:61: | 20:57:35 | block-ephemeral-containers | create policy                | CLEANUP   | BEGIN |
    sink.go:61: | 20:57:36 | block-ephemeral-containers | create policy                | DELETE    | OK    | policies.kyverno.io/v1beta1/ImageValidatingPolicy @ block-ephemeral-contai

Source: kyverno/kyverno

View original on GitHub View discussion on GitHub