apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: restrict-gateway-client-label
policies:
  - ../../policies/restrict-gateway-client-label.yaml
resources:
  - resources.yaml
results:
  - policy: restrict-gateway-client-label
    rule: gateway-client-label-namespace-allowlist
    kind: Pod
    resources:
      - allowed-client
      - allowed-forge-git-client
    result: pass
  - policy: restrict-gateway-client-label
    rule: gateway-client-label-namespace-allowlist
    kind: Pod
    resources:
      - denied-client
    result: fail
  - policy: restrict-gateway-client-label
    rule: gateway-client-label-namespace-allowlist
    kind: Pod
    resources:
      - no-client-label
    result: skip