apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: restrict-route-parentrefs
policies:
  - ../../policies/restrict-route-parentrefs.yaml
resources:
  - resources.yaml
variables: values.yaml
results:
  - policy: restrict-route-parentrefs
    rule: parentref-matches-namespace-labels
    kind: HTTPRoute
    resources:
      - allowed-relay
      - allowed-internal
      - unrelated-gateway
    result: pass
  - policy: restrict-route-parentrefs
    rule: parentref-matches-namespace-labels
    kind: HTTPRoute
    resources:
      - denied-relay
      - denied-internal
    result: fail
  - policy: restrict-route-parentrefs
    rule: short-parent-label
    kind: HTTPRoute
    resources:
      - short-http-allowed
      - unrelated-gateway
    result: pass
  - policy: restrict-route-parentrefs
    rule: short-parent-label
    kind: HTTPRoute
    resources:
      - short-http-denied
      - short-http-public
      - mixed-parents
    result: fail
  - policy: restrict-route-parentrefs
    rule: short-parent-label
    kind: TCPRoute
    resources:
      - short-tcp-allowed
      - unrelated-tcp
    result: pass
  - policy: restrict-route-parentrefs
    rule: short-parent-label
    kind: TCPRoute
    resources:
      - short-tcp-denied
      - short-tcp-public
    result: fail