apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: require-public-runtime-gvisor
policies:
  - ../../policies/require-public-runtime-gvisor.yaml
resources:
  - resources.yaml
variables: values.yaml
results:
  - policy: require-public-runtime-gvisor
    rule: public-pods-use-gvisor
    kind: Pod
    resources:
      - public-gvisor
    result: pass
  - policy: require-public-runtime-gvisor
    rule: public-pods-use-gvisor
    kind: Pod
    resources:
      - public-runc
    result: fail
  - policy: require-public-runtime-gvisor
    rule: public-pods-use-gvisor
    kind: Pod
    resources:
      - private-runc
    result: skip