ce7cb702218693d08ea6d83464d2457c9250027c

vendor/platform/kyverno/tests/image-registries/kyverno-test.yaml

@@ -0,0 +1,41 @@
+apiVersion: cli.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: image-registries
+policies:
+  - ../../policies/restrict-image-registries.yaml
+resources:
+  - resources.yaml
+results:
+  - policy: restrict-image-registries
+    rule: allow-internal-registries-only
+    kind: Pod
+    resources:
+      - registry
+      - quay
+      - zot
+      - internal-init
+      - internal-debug
+    result: pass
+  - policy: restrict-image-registries
+    rule: allow-internal-registries-only
+    kind: Pod
+    resources:
+      - external
+      - external-init
+      - external-debug
+      - lookalike
+      - suffix
+    result: fail
+  - policy: restrict-image-registries
+    rule: autogen-allow-internal-registries-only
+    kind: Deployment
+    resources:
+      - internal-deploy
+    result: pass
+  - policy: restrict-image-registries
+    rule: autogen-allow-internal-registries-only
+    kind: Deployment
+    resources:
+      - external-deploy
+    result: fail