ms2k/quorate
SHA256
Watch
0
Code Releases Activity

ce7cb702218693d08ea6d83464d2457c9250027c

Browse source
This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c
2 changed files with 145336 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

28
vendor/platform/kyverno/tests/gateway-client/kyverno-test.yaml vendored Normal file
View file

@ -0,0 +1,28 @@
apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
name: restrict-gateway-client-label
policies:
- ../../policies/restrict-gateway-client-label.yaml
resources:
- resources.yaml
results:
- policy: restrict-gateway-client-label
rule: gateway-client-label-namespace-allowlist
kind: Pod
resources:
- allowed-client
- allowed-forge-git-client
result: pass
- policy: restrict-gateway-client-label
rule: gateway-client-label-namespace-allowlist
kind: Pod
resources:
- denied-client
result: fail
- policy: restrict-gateway-client-label
rule: gateway-client-label-namespace-allowlist
kind: Pod
resources:
- no-client-label
result: skip

54
vendor/platform/kyverno/tests/gateway-client/resources.yaml vendored Normal file
View file

@ -0,0 +1,54 @@
apiVersion: v1
kind: Pod
metadata:
name: allowed-client
namespace: grafana
labels:
app.kubernetes.io/name: smoke
app.kubernetes.io/instance: smoke
gateway.quorate.internal/allow-gateway-client: "true"
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: allowed-forge-git-client
namespace: forgejo-public
labels:
app.kubernetes.io/name: forgejo
app.kubernetes.io/instance: forge-git
gateway.quorate.internal/allow-gateway-client: "true"
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: denied-client
namespace: default
labels:
app.kubernetes.io/name: smoke
app.kubernetes.io/instance: smoke
gateway.quorate.internal/allow-gateway-client: "true"
spec:
containers:
- name: app
image: busybox:1.36
---
apiVersion: v1
kind: Pod
metadata:
name: no-client-label
namespace: default
labels:
app.kubernetes.io/name: smoke
app.kubernetes.io/instance: smoke
spec:
containers:
- name: app
image: busybox:1.36