Kyverno
Hard
Validation
Kyverno 1.16 ships CEL-based policy types at API version v1beta1. Which one validates resources with CEL expressions, in the style of Kubernetes ValidatingAdmissionPolicy?
Select your answer:
Show answer and explanation
Answer: ValidatingPolicy
Explanation
ValidatingPolicy expresses rules as CEL expressions, like Kubernetes ValidatingAdmissionPolicy, and adds Kyverno features such as background scans and policy reports. The same family includes MutatingPolicy, GeneratingPolicy, DeletingPolicy and ImageValidatingPolicy, plus namespaced versions of some of them. Existing ClusterPolicy resources keep working.
More hard Kyverno questions
- What is the purpose of the 'context' field in a Kyverno policy?
- Which of the following is NOT a valid variable source in a Kyverno context?
- What is the purpose of the 'foreach' field in a Kyverno rule?
- Which of the following is NOT a component of the Kyverno architecture?
- What is the purpose of the 'kyverno.io/updateToken' annotation in a generated resource?
- Which of the following is NOT a valid source for context variables in Kyverno?