ms2k/quorate
SHA256
Watch
0
Code Releases Activity

ce7cb702218693d08ea6d83464d2457c9250027c

Browse source
This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c
2 changed files with 145336 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

32
vendor/platform/kyverno/tests/cilium-cidrs/kyverno-test.yaml vendored Normal file
View file

@ -0,0 +1,32 @@
apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
name: canonical-cilium-cidrs
policies:
- ../../policies/canonical-cilium-cidrs.yaml
resources:
- resources.yaml
results:
- policy: canonical-cilium-cidrs
rule: require-canonical-cidrs
kind: CiliumNetworkPolicy
resources:
- canonical-routed-ranges
- specific-private-peers
- dynamic-peer-groups
result: pass
- policy: canonical-cilium-cidrs
rule: require-canonical-cidrs
kind: CiliumClusterwideNetworkPolicy
resources:
- canonical-specs
result: pass
- policy: canonical-cilium-cidrs
rule: require-canonical-cidrs
kind: CiliumNetworkPolicy
resources:
- noncanonical-range
- redundant-range
- generic-private-range
- noncanonical-cidrset-exception
result: fail

109
vendor/platform/kyverno/tests/cilium-cidrs/resources.yaml vendored Normal file
View file

@ -0,0 +1,109 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: canonical-routed-ranges
namespace: default
spec:
endpointSelector: {}
ingress:
- fromCIDR:
- 10.115.187.218/24
- 10.63.81.107/24
- 10.162.8.60/24
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: specific-private-peers
namespace: default
spec:
endpointSelector: {}
ingress:
- fromCIDR:
- 10.77.102.91/32
- 10.212.111.120/32
egress:
- toCIDRSet:
- cidr: 10.90.141.119/24
except:
- 10.66.127.81/32
---
apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata:
name: canonical-specs
spec:
specs:
- nodeSelector: {}
egress:
- toCIDR:
- 1.1.1.1/32
- nodeSelector: {}
ingress:
- fromCIDRSet:
- cidr: 10.63.81.107/24
except:
- 10.111.126.149/25
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: noncanonical-range
namespace: default
spec:
endpointSelector: {}
ingress:
- fromCIDR:
- 10.77.102.91/24
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: redundant-range
namespace: default
spec:
endpointSelector: {}
egress:
- toCIDR:
- 10.63.81.107/24
- 10.77.102.91/32
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: generic-private-range
namespace: default
spec:
endpointSelector: {}
ingress:
- fromCIDR:
- 10.87.139.185/16
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: noncanonical-cidrset-exception
namespace: default
spec:
endpointSelector: {}
egress:
- toCIDRSet:
- cidr: 10.90.141.119/24
except:
- 10.66.127.81/28
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: dynamic-peer-groups
namespace: default
spec:
endpointSelector: {}
ingress:
- fromCIDRSet:
- cidrGroupRef: short
egress:
- toCIDRSet:
- cidrGroupRef: short
- cidrGroupSelector:
matchLabels: {owner: short}