28 lines
717 B
YAML
28 lines
717 B
YAML
apiVersion: cli.kyverno.io/v1alpha1
|
|
kind: Test
|
|
metadata:
|
|
name: restrict-gateway-client-label
|
|
policies:
|
|
- ../../policies/restrict-gateway-client-label.yaml
|
|
resources:
|
|
- resources.yaml
|
|
results:
|
|
- policy: restrict-gateway-client-label
|
|
rule: gateway-client-label-namespace-allowlist
|
|
kind: Pod
|
|
resources:
|
|
- allowed-client
|
|
- allowed-forge-git-client
|
|
result: pass
|
|
- policy: restrict-gateway-client-label
|
|
rule: gateway-client-label-namespace-allowlist
|
|
kind: Pod
|
|
resources:
|
|
- denied-client
|
|
result: fail
|
|
- policy: restrict-gateway-client-label
|
|
rule: gateway-client-label-namespace-allowlist
|
|
kind: Pod
|
|
resources:
|
|
- no-client-label
|
|
result: skip
|