54 lines
1.3 KiB
YAML
54 lines
1.3 KiB
YAML
|
apiVersion: cli.kyverno.io/v1alpha1
|
||
|
|
kind: Test
|
||
|
|
metadata:
|
||
|
|
name: restrict-route-parentrefs
|
||
|
|
policies:
|
||
|
|
- ../../policies/restrict-route-parentrefs.yaml
|
||
|
|
resources:
|
||
|
|
- resources.yaml
|
||
|
|
variables: values.yaml
|
||
|
|
results:
|
||
|
|
- policy: restrict-route-parentrefs
|
||
|
|
rule: parentref-matches-namespace-labels
|
||
|
|
kind: HTTPRoute
|
||
|
|
resources:
|
||
|
|
- allowed-relay
|
||
|
|
- allowed-internal
|
||
|
|
- unrelated-gateway
|
||
|
|
result: pass
|
||
|
|
- policy: restrict-route-parentrefs
|
||
|
|
rule: parentref-matches-namespace-labels
|
||
|
|
kind: HTTPRoute
|
||
|
|
resources:
|
||
|
|
- denied-relay
|
||
|
|
- denied-internal
|
||
|
|
result: fail
|
||
|
|
- policy: restrict-route-parentrefs
|
||
|
|
rule: short-parent-label
|
||
|
|
kind: HTTPRoute
|
||
|
|
resources:
|
||
|
|
- short-http-allowed
|
||
|
|
- unrelated-gateway
|
||
|
|
result: pass
|
||
|
|
- policy: restrict-route-parentrefs
|
||
|
|
rule: short-parent-label
|
||
|
|
kind: HTTPRoute
|
||
|
|
resources:
|
||
|
|
- short-http-denied
|
||
|
|
- short-http-public
|
||
|
|
- mixed-parents
|
||
|
|
result: fail
|
||
|
|
- policy: restrict-route-parentrefs
|
||
|
|
rule: short-parent-label
|
||
|
|
kind: TCPRoute
|
||
|
|
resources:
|
||
|
|
- short-tcp-allowed
|
||
|
|
- unrelated-tcp
|
||
|
|
result: pass
|
||
|
|
- policy: restrict-route-parentrefs
|
||
|
|
rule: short-parent-label
|
||
|
|
kind: TCPRoute
|
||
|
|
resources:
|
||
|
|
- short-tcp-denied
|
||
|
|
- short-tcp-public
|
||
|
|
result: fail
|