kyverno/test/scenarios/samples/best_practices/disallow_sysctls.yaml

# file path relative to project root
input:
  policy: test/best_practices/disallow_sysctls.yaml
  resource: test/resources/resource_validate_sysctl_configs.yaml
expected:
  validation:
    policyresponse:
      policy:
        namespace: ''
        name: disallow-sysctls
      resource:
        kind: Pod
        apiVersion: v1
        namespace: ''
        name: nginx
      rules:
        - name: validate-sysctls
          type: Validation
          status: fail