Kyverno
Hard
Policies
Which Kyverno resource exempts specific resources from a policy rule without editing the policy?
Select your answer:
Show answer and explanation
Answer: PolicyException
Explanation
A PolicyException names the policies and rules it applies to and matches the resources to exempt, so teams can get exceptions without touching shared policies. Because exceptions weaken enforcement, Kyverno lets you restrict which namespaces may hold them, and you should limit who can create them with RBAC.
More hard Kyverno questions
- What does the 'kyverno test' command read to run policy tests?
- Why must background be set to false on a Kyverno policy whose rules use request.userInfo, such as the requesting user's name or roles?
- In recent Kyverno versions, where should you set Enforce or Audit for a validate rule?
- Kyverno 1.16 ships CEL-based policy types at API version v1beta1. Which one validates resources with CEL expressions, in the style of Kubernetes ValidatingAdmissionPolicy?
- What is the purpose of the 'context' field in a Kyverno policy?
- Which of the following is NOT a valid variable source in a Kyverno context?