fix(charts): fix kyverno empty namespace error when syncronizing copy-host-secret-artifact-s3 policy

Author: davehadley

charts/workflows/templates/sessionspace-clusterpolicy.yaml

@@ -127,7 +127,7 @@ spec:
       apiVersions: ["v1"]
       operations:  ["CREATE"]
       resources:   ["namespaces"]
-    namespaceSelector:
+    objectSelector:
       matchLabels:
           app.kubernetes.io/managed-by: sessionspaces
   variables:

charts/workflows/test-policy/artifact-s3-clone/chainsaw-test.yaml

@@ -1,8 +1,9 @@
 apiVersion: chainsaw.kyverno.io/v1alpha1
 kind: Test
 metadata:
-  name: artifact-s3-clone
+  name: artifact-s3-clone-on-namespace-creation
 spec:
+  concurrent: false
   steps:
     - try:
         - apply:
@@ -29,12 +30,73 @@ spec:
                 name: session
                 labels:
                   app.kubernetes.io/managed-by: sessionspaces
-        - sleep:
-            duration: 10s
         - assert:
             resource:
               apiVersion: v1
               kind: Secret
               metadata:
                 name: artifact-s3
                 namespace: session
+---
+apiVersion: chainsaw.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: artifact-s3-clone-on-secret-update
+spec:
+  concurrent: false
+  steps:
+    - try:
+        - apply:
+            resource:
+              apiVersion: v1
+              kind: Namespace
+              metadata:
+                name: workflows
+        - apply:
+            resource:
+              apiVersion: v1
+              kind: Secret
+              metadata:
+                name: artifact-s3
+                namespace: workflows
+              data:
+                access-key: aWQ=
+                secret-key: c2VjcmV0
+        - apply:
+            resource:
+              apiVersion: v1
+              kind: Namespace
+              metadata:
+                name: session
+                labels:
+                  app.kubernetes.io/managed-by: sessionspaces
+        - assert:
+            resource:
+              apiVersion: v1
+              kind: Secret
+              metadata:
+                name: artifact-s3
+                namespace: session
+              data:
+                access-key: aWQ=
+                secret-key: c2VjcmV0
+        - apply:
+            resource:
+              apiVersion: v1
+              kind: Secret
+              metadata:
+                name: artifact-s3
+                namespace: workflows
+              data:
+                access-key: aWQ=
+                secret-key: dXBkYXRlZC1zZWNyZXQK
+        - assert:
+            resource:
+              apiVersion: v1
+              kind: Secret
+              metadata:
+                name: artifact-s3
+                namespace: session
+              data:
+                access-key: aWQ=
+                secret-key: dXBkYXRlZC1zZWNyZXQK