41 lines
941 B
YAML
41 lines
941 B
YAML
apiVersion: cli.kyverno.io/v1alpha1
|
|
kind: Test
|
|
metadata:
|
|
name: image-registries
|
|
policies:
|
|
- ../../policies/restrict-image-registries.yaml
|
|
resources:
|
|
- resources.yaml
|
|
results:
|
|
- policy: restrict-image-registries
|
|
rule: allow-internal-registries-only
|
|
kind: Pod
|
|
resources:
|
|
- registry
|
|
- quay
|
|
- zot
|
|
- internal-init
|
|
- internal-debug
|
|
result: pass
|
|
- policy: restrict-image-registries
|
|
rule: allow-internal-registries-only
|
|
kind: Pod
|
|
resources:
|
|
- external
|
|
- external-init
|
|
- external-debug
|
|
- lookalike
|
|
- suffix
|
|
result: fail
|
|
- policy: restrict-image-registries
|
|
rule: autogen-allow-internal-registries-only
|
|
kind: Deployment
|
|
resources:
|
|
- internal-deploy
|
|
result: pass
|
|
- policy: restrict-image-registries
|
|
rule: autogen-allow-internal-registries-only
|
|
kind: Deployment
|
|
resources:
|
|
- external-deploy
|
|
result: fail
|