apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
  name: image-registries
policies:
  - ../../policies/restrict-image-registries.yaml
resources:
  - resources.yaml
results:
  - policy: restrict-image-registries
    rule: allow-internal-registries-only
    kind: Pod
    resources:
      - registry
      - quay
      - zot
      - internal-init
      - internal-debug
    result: pass
  - policy: restrict-image-registries
    rule: allow-internal-registries-only
    kind: Pod
    resources:
      - external
      - external-init
      - external-debug
      - lookalike
      - suffix
    result: fail
  - policy: restrict-image-registries
    rule: autogen-allow-internal-registries-only
    kind: Deployment
    resources:
      - internal-deploy
    result: pass
  - policy: restrict-image-registries
    rule: autogen-allow-internal-registries-only
    kind: Deployment
    resources:
      - external-deploy
    result: fail