kyverno/test/conformance/chainsaw/globalcontext/gctxentry-not-exist/clusterpolicy.yaml

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: cpol-gctxentry-not-exist
spec:
  failurePolicy: Fail
  rules:
  - name: main-deployment-exists
    context:
    - name: deploymentCount
      globalReference:
        name: non-existent-gctx
        jmesPath: "length(@)"
    match:
      all:
      - resources:
          kinds:
          - Pod
          namespaces:
          - test-globalcontext-gctxentry-not-exist
    preconditions:
      all:
      - key: '{{ request.operation }}'
        operator: AnyIn
        value:
        - CREATE
        - UPDATE
    validate:
      failureAction: Enforce
      deny:
        conditions:
          any:
          - key: "{{ deploymentCount }}"
            operator: Equal
            value: 0