quorate/vendor/platform/kyverno/tests/cilium-cidrs/kyverno-test.yaml

32 lines
823 B
YAML

apiVersion: cli.kyverno.io/v1alpha1
kind: Test
metadata:
name: canonical-cilium-cidrs
policies:
- ../../policies/canonical-cilium-cidrs.yaml
resources:
- resources.yaml
results:
- policy: canonical-cilium-cidrs
rule: require-canonical-cidrs
kind: CiliumNetworkPolicy
resources:
- canonical-routed-ranges
- specific-private-peers
- dynamic-peer-groups
result: pass
- policy: canonical-cilium-cidrs
rule: require-canonical-cidrs
kind: CiliumClusterwideNetworkPolicy
resources:
- canonical-specs
result: pass
- policy: canonical-cilium-cidrs
rule: require-canonical-cidrs
kind: CiliumNetworkPolicy
resources:
- noncanonical-range
- redundant-range
- generic-private-range
- noncanonical-cidrset-exception
result: fail