apiVersion: cli.kyverno.io/v1alpha1
kind: Values
metadata:
  name: gateway-status
globalValues:
  request.operation: UPDATE
policies:
- name: protect-shared-gateways
  resources:
  - name: gateway-short
    values:
      request.oldObject.spec:
        gatewayClassName: cilium
        listeners:
        - name: http
          port: 80
          protocol: HTTP
          allowedRoutes:
            namespaces:
              from: Selector
              selector:
                matchLabels:
                  gateway.quorate.internal/allow-short: 'true'
  - name: gateway-relay
    values:
      request.oldObject.spec:
        gatewayClassName: cilium
        listeners:
        - name: http
          port: 80
          protocol: HTTP
          allowedRoutes:
            namespaces:
              from: Selector
              selector:
                matchLabels:
                  gateway.quorate.internal/allow-public: 'true'
  - name: gateway-internal
    values:
      request.oldObject.spec:
        gatewayClassName: cilium
        listeners:
        - name: http
          port: 80
          protocol: HTTP
          allowedRoutes:
            namespaces:
              from: Selector
              selector:
                matchLabels:
                  gateway.quorate.internal/allow-internal: 'true'