apiVersion: cli.kyverno.io/v1alpha1
kind: Values
metadata:
  name: restrict-route-parentrefs-values
policies:
  - name: restrict-route-parentrefs
    resources:
      - name: allowed-relay
        values:
          nslabels:
            gateway.quorate.internal/allow-public: "true"
      - name: denied-relay
        values:
          nslabels: {}
      - name: allowed-internal
        values:
          nslabels:
            gateway.quorate.internal/allow-internal: "true"
      - name: denied-internal
        values:
          nslabels: {}
      - name: unrelated-gateway
        values:
          nslabels: {}
      - name: short-http-allowed
        values:
          nslabels:
            gateway.quorate.internal/allow-short: "true"
      - name: short-http-denied
        values:
          nslabels: {}
      - name: short-http-public
        values:
          nslabels:
            gateway.quorate.internal/allow-public: "true"
      - name: short-tcp-allowed
        values:
          nslabels:
            gateway.quorate.internal/allow-short: "true"
      - name: short-tcp-denied
        values:
          nslabels:
            gateway.quorate.internal/allow-short: "false"
      - name: short-tcp-public
        values:
          nslabels:
            gateway.quorate.internal/allow-public: "true"
      - name: unrelated-tcp
        values:
          nslabels: {}
      - name: mixed-parents
        values:
          nslabels:
            gateway.quorate.internal/allow-public: "true"