Kyverno
Hard
Policies
Which label makes Kyverno delete a resource automatically after a set amount of time?
Select your answer:
Show answer and explanation
Answer: cleanup.kyverno.io/ttl
Explanation
Kyverno's cleanup controller watches resources with this label and deletes them when the time runs out, for example cleanup.kyverno.io/ttl: 2h. The controller needs RBAC permission to delete that kind. For rule-based deletion on a schedule, use a CleanupPolicy or ClusterCleanupPolicy instead.
More hard Kyverno questions
- A Kyverno verifyImages rule has mutateDigest: true. What does it do once the signature is verified?
- In a Kyverno mutate overlay (patchStrategicMerge), what does the +() anchor do, as in '+(imagePullPolicy): IfNotPresent'?
- In a Kyverno validate pattern, what does the X() negation anchor mean, as in 'X(hostPath): "null"'?
- Which Kyverno resource exempts specific resources from a policy rule without editing the policy?
- What does the 'kyverno test' command read to run policy tests?
- Why must background be set to false on a Kyverno policy whose rules use request.userInfo, such as the requesting user's name or roles?