ce7cb702218693d08ea6d83464d2457c9250027c

This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c

View file

@ -0,0 +1,54 @@
apiVersion: cli.kyverno.io/v1alpha1
kind: Values
metadata:
name: restrict-route-parentrefs-values
policies:
- name: restrict-route-parentrefs
resources:
- name: allowed-relay
values:
nslabels:
gateway.quorate.internal/allow-public: "true"
- name: denied-relay
values:
nslabels: {}
- name: allowed-internal
values:
nslabels:
gateway.quorate.internal/allow-internal: "true"
- name: denied-internal
values:
nslabels: {}
- name: unrelated-gateway
values:
nslabels: {}
- name: short-http-allowed
values:
nslabels:
gateway.quorate.internal/allow-short: "true"
- name: short-http-denied
values:
nslabels: {}
- name: short-http-public
values:
nslabels:
gateway.quorate.internal/allow-public: "true"
- name: short-tcp-allowed
values:
nslabels:
gateway.quorate.internal/allow-short: "true"
- name: short-tcp-denied
values:
nslabels:
gateway.quorate.internal/allow-short: "false"
- name: short-tcp-public
values:
nslabels:
gateway.quorate.internal/allow-public: "true"
- name: unrelated-tcp
values:
nslabels: {}
- name: mixed-parents
values:
nslabels:
gateway.quorate.internal/allow-public: "true"