apiVersion: chainsaw.kyverno.io/v1alpha1
kind: Test
metadata:
  creationTimestamp: null
  name: restrict-image-registries
spec:
  steps:
  - name: step-01
    try:
    - apply:
        file: policy.yaml
    - assert:
        file: policy-assert.yaml
  - name: step-02
    try:
    - script:
        content: kubectl run nginx-1 --image nginx
        check:
          ($error != null): true
          (contains($stderr, 'rule validate-registries failed at path /spec/containers/0/image/')): true
  - name: step-03
    try:
    - script:
        content: kubectl create deployment testing --image=nginx --replicas=1
        check:
          ($error != null): true
          (contains($stderr, 'rule autogen-validate-registries failed at path /spec/template/spec/containers/0/image/')): true
  - name: step-04
    try:
    - script:
        content: kubectl create cronjob my-job --image=busybox --schedule="*/1 * * * *"
        check:
          ($error != null): true
          (contains($stderr, 'rule autogen-cronjob-validate-registries failed')): true