apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: canonical-cilium-cidrs
policies:
  - ../../policies/canonical-cilium-cidrs.yaml
resources:
  - resources.yaml
results:
  - policy: canonical-cilium-cidrs
    rule: require-canonical-cidrs
    kind: CiliumNetworkPolicy
    resources:
      - canonical-routed-ranges
      - specific-private-peers
      - dynamic-peer-groups
    result: pass
  - policy: canonical-cilium-cidrs
    rule: require-canonical-cidrs
    kind: CiliumClusterwideNetworkPolicy
    resources:
      - canonical-specs
    result: pass
  - policy: canonical-cilium-cidrs
    rule: require-canonical-cidrs
    kind: CiliumNetworkPolicy
    resources:
      - noncanonical-range
      - redundant-range
      - generic-private-range
      - noncanonical-cidrset-exception
    result: fail