Kyverno
Hard
Policies
Which of the following is NOT a valid source for context variables in Kyverno?
Select your answer:
Show answer and explanation
Answer: Secret
Explanation
Kyverno context variables can be sourced from ConfigMap, APICall, and ImageRegistry, but not directly from Secrets for security reasons. Secrets contain sensitive data and should not be used directly in policies.
More hard Kyverno questions
- What is the purpose of the 'kyverno.io/last-applied-policy' annotation?
- Which of the following is a valid way to define a variable in a Kyverno policy?
- What is the purpose of the 'kyverno.io/policy-update-mode' annotation?
- All Kyverno admission controller pods are down, and a policy's webhook failurePolicy is Fail. What happens to API requests that its webhook matches?
- How does Kyverno change resources that already exist in the cluster, rather than only new admission requests?
- A new generate rule creates a NetworkPolicy in every Namespace. What makes Kyverno also create it in Namespaces that existed before the policy?