28 lines
647 B
YAML
28 lines
647 B
YAML
|
apiVersion: cli.kyverno.io/v1alpha1
|
||
|
|
kind: Test
|
||
|
|
metadata:
|
||
|
|
name: require-public-runtime-gvisor
|
||
|
|
policies:
|
||
|
|
- ../../policies/require-public-runtime-gvisor.yaml
|
||
|
|
resources:
|
||
|
|
- resources.yaml
|
||
|
|
variables: values.yaml
|
||
|
|
results:
|
||
|
|
- policy: require-public-runtime-gvisor
|
||
|
|
rule: public-pods-use-gvisor
|
||
|
|
kind: Pod
|
||
|
|
resources:
|
||
|
|
- public-gvisor
|
||
|
|
result: pass
|
||
|
|
- policy: require-public-runtime-gvisor
|
||
|
|
rule: public-pods-use-gvisor
|
||
|
|
kind: Pod
|
||
|
|
resources:
|
||
|
|
- public-runc
|
||
|
|
result: fail
|
||
|
|
- policy: require-public-runtime-gvisor
|
||
|
|
rule: public-pods-use-gvisor
|
||
|
|
kind: Pod
|
||
|
|
resources:
|
||
|
|
- private-runc
|
||
|
|
result: skip
|