kyverno/test/DaemonSet/policy-daemonset.yaml

apiVersion: kyverno.io/v1alpha1
kind: ClusterPolicy
metadata:
  name: policy-daemonset
spec:
  rules:
    - name: "Patch and Volume validation"
      match:
        resources:
          kinds:
          - DaemonSet
          name: fluentd-elasticsearch
      mutate:
        patches:
        - path: "/metadata/labels/isMutated"
          op: add
          value: "true"
        - path: "/metadata/labels/originalLabel"
          op: remove
      validate:
        message: "This daemonset is broken"
        pattern:
          spec:
            template:
              spec:
                containers:
                  volumeMounts:
                  - name: varlibdockercontainers
                    readOnly: false