41 lines
941 B
YAML
41 lines
941 B
YAML
|
apiVersion: cli.kyverno.io/v1alpha1
|
||
|
|
kind: Test
|
||
|
|
metadata:
|
||
|
|
name: image-registries
|
||
|
|
policies:
|
||
|
|
- ../../policies/restrict-image-registries.yaml
|
||
|
|
resources:
|
||
|
|
- resources.yaml
|
||
|
|
results:
|
||
|
|
- policy: restrict-image-registries
|
||
|
|
rule: allow-internal-registries-only
|
||
|
|
kind: Pod
|
||
|
|
resources:
|
||
|
|
- registry
|
||
|
|
- quay
|
||
|
|
- zot
|
||
|
|
- internal-init
|
||
|
|
- internal-debug
|
||
|
|
result: pass
|
||
|
|
- policy: restrict-image-registries
|
||
|
|
rule: allow-internal-registries-only
|
||
|
|
kind: Pod
|
||
|
|
resources:
|
||
|
|
- external
|
||
|
|
- external-init
|
||
|
|
- external-debug
|
||
|
|
- lookalike
|
||
|
|
- suffix
|
||
|
|
result: fail
|
||
|
|
- policy: restrict-image-registries
|
||
|
|
rule: autogen-allow-internal-registries-only
|
||
|
|
kind: Deployment
|
||
|
|
resources:
|
||
|
|
- internal-deploy
|
||
|
|
result: pass
|
||
|
|
- policy: restrict-image-registries
|
||
|
|
rule: autogen-allow-internal-registries-only
|
||
|
|
kind: Deployment
|
||
|
|
resources:
|
||
|
|
- external-deploy
|
||
|
|
result: fail
|