kyverno/examples/Validate/check_whitelist_registries.yaml

apiVersion : kyverno.io/v1alpha1
kind: Policy
metadata:
  name: check-whitelist-registries
spec:
  rules:
  - name: check-whitelist-registries
    resource:
      kinds:
      - Deployment
      - StatefulSet
    validate:
      message: "Registry is not allowed"
      pattern:
        spec:
          template:
            spec:
              containers:
              - name: "*"
                # Checks if the image path starts with "https://hub.docker.io/nirmata/*"
                image: https://hub.docker.io/nirmata/*