ce7cb702218693d08ea6d83464d2457c9250027c

vendor/platform/kyverno/tests/route-parentrefs/kyverno-test.yaml

@@ -0,0 +1,54 @@
+apiVersion: cli.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: restrict-route-parentrefs
+policies:
+  - ../../policies/restrict-route-parentrefs.yaml
+resources:
+  - resources.yaml
+variables: values.yaml
+results:
+  - policy: restrict-route-parentrefs
+    rule: parentref-matches-namespace-labels
+    kind: HTTPRoute
+    resources:
+      - allowed-relay
+      - allowed-internal
+      - unrelated-gateway
+    result: pass
+  - policy: restrict-route-parentrefs
+    rule: parentref-matches-namespace-labels
+    kind: HTTPRoute
+    resources:
+      - denied-relay
+      - denied-internal
+    result: fail
+  - policy: restrict-route-parentrefs
+    rule: short-parent-label
+    kind: HTTPRoute
+    resources:
+      - short-http-allowed
+      - unrelated-gateway
+    result: pass
+  - policy: restrict-route-parentrefs
+    rule: short-parent-label
+    kind: HTTPRoute
+    resources:
+      - short-http-denied
+      - short-http-public
+      - mixed-parents
+    result: fail
+  - policy: restrict-route-parentrefs
+    rule: short-parent-label
+    kind: TCPRoute
+    resources:
+      - short-tcp-allowed
+      - unrelated-tcp
+    result: pass
+  - policy: restrict-route-parentrefs
+    rule: short-parent-label
+    kind: TCPRoute
+    resources:
+      - short-tcp-denied
+      - short-tcp-public
+    result: fail