Kyverno
Hard
Validation
In recent Kyverno versions, where should you set Enforce or Audit for a validate rule?
Select your answer:
Show answer and explanation
Answer: In validate.failureAction on each rule
Explanation
Setting the action per rule lets one policy mix enforced and audited rules. Policies that still set spec.validationFailureAction keep working, but the field is deprecated, so new policies should use validate.failureAction.
More hard Kyverno questions
- Kyverno 1.16 ships CEL-based policy types at API version v1beta1. Which one validates resources with CEL expressions, in the style of Kubernetes ValidatingAdmissionPolicy?
- What is the purpose of the 'context' field in a Kyverno policy?
- Which of the following is NOT a valid variable source in a Kyverno context?
- What is the purpose of the 'foreach' field in a Kyverno rule?
- Which of the following is NOT a component of the Kyverno architecture?
- What is the purpose of the 'kyverno.io/updateToken' annotation in a generated resource?