kyverno/test/policy/validate/check_registries.yaml

apiVersion : kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: check-registries
spec:
  rules:
  - name: check-registries
    match:
      resources:
        kinds:
        - Deployment
        - StatefulSet
    validate:
      message: "Registry is not allowed"
      pattern:
        spec:
          template:
            spec:
              containers:
              - name: "*"
                # Check allowed registries
                image: "*/nirmata/* | https://private.registry.io/*"