# The requesting identity the policy keys on. Without this the `subjects` match never fires and
# every case below would trivially "pass" — proving nothing.
apiVersion: cli.kyverno.io/v1alpha1
kind: UserInfo
metadata:
  name: conformance-trigger
userInfo:
  username: system:serviceaccount:conformance:conformance-trigger
  groups:
    - system:serviceaccounts
    - system:serviceaccounts:conformance
    - system:authenticated