Kyverno
Hard
Policies
What is the purpose of the 'kyverno.io/policy-update-mode' annotation?
Select your answer:
Show answer and explanation
Answer: To control how resources are updated when policies change
Explanation
The 'kyverno.io/policy-update-mode' annotation is used to control how resources are updated when policies change. It can be set to values like 'enforce' or 'audit' to determine the behavior when a policy is updated.
More hard Kyverno questions
- All Kyverno admission controller pods are down, and a policy's webhook failurePolicy is Fail. What happens to API requests that its webhook matches?
- How does Kyverno change resources that already exist in the cluster, rather than only new admission requests?
- A new generate rule creates a NetworkPolicy in every Namespace. What makes Kyverno also create it in Namespaces that existed before the policy?
- Which label makes Kyverno delete a resource automatically after a set amount of time?
- A Kyverno verifyImages rule has mutateDigest: true. What does it do once the signature is verified?
- In a Kyverno mutate overlay (patchStrategicMerge), what does the +() anchor do, as in '+(imagePullPolicy): IfNotPresent'?