Add Kyverno policy to require instance label on Pods

Author: sajal-n

kyverno-sample.yaml

@@ -0,0 +1,22 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: require-instance-label
+spec:
+  # Block the resource creation if the policy is violated
+  validationFailureAction: Enforce 
+  rules:
+    - name: check-for-instance-label
+      match:
+        # Match any request to create or update a Pod
+        any:
+        - resources:
+            kinds:
+            - Pod
+      validate:
+        message: "All Pods must have the label 'app.kubernetes.io/instance'."
+        # The pattern ensures the label exists and has any non-empty value
+        pattern:
+          metadata:
+            labels:
+              app.kubernetes.io/instance: "?*"