diff --git a/documentation/writing-policies-validate.md b/documentation/writing-policies-validate.md index d908143c6a..3882bf7855 100644 --- a/documentation/writing-policies-validate.md +++ b/documentation/writing-policies-validate.md @@ -184,9 +184,11 @@ spec: runAsNonRoot: true ```` - Additional examples are available in [samples](/samples/README.md) +## Validation Failure Action + +The `validationFailureAction` attribute controls processing behaviors when the resource is not compliant with the policy. If the value is set to `enforce` resource creation or updates are blocked when the resource does not comply, and when the value is set to `audit` a policy violation is reported but the resource creation or update is allowed. --- *Read Next >> [Generate](/documentation/writing-policies-mutate.md)* diff --git a/documentation/writing-policies.md b/documentation/writing-policies.md index 1b1aa3d12c..3f42e331cf 100644 --- a/documentation/writing-policies.md +++ b/documentation/writing-policies.md @@ -78,9 +78,6 @@ spec : Each rule can validate, mutate, or generate configurations of matching resources. A rule definition can contain only a single **mutate**, **validate**, or **generate** child node. These actions are applied to the resource in described order: mutation, validation and then generation. -## Validation Failure Action - -The `validationFailureAction` attribute controls processing behaviors when the resource is not compliant with the policy. If the value is set to `enforce` resource creation or updates are blocked when the resource does not comply, and when the value is set to `audit` a policy violation is reported but the resource creation or update is allowed. --- *Read Next >> [Validate](/documentation/writing-policies-validate.md)* \ No newline at end of file