apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: cpol-gctx-validate-reference
spec:
  failurePolicy: Fail
  rules:
  - name: main-deployment-exists
    context:
    - name: deploymentCount
      globalReference:
        jmesPath: "items | length(@)"
    match:
      all:
      - resources:
          kinds:
          - Pod
    preconditions:
      all:
      - key: '{{ request.operation }}'
        operator: AnyIn
        value:
        - CREATE
        - UPDATE
    validate:
      failureAction: Enforce
      deny:
        conditions:
          any:
          - key: "{{ deploymentCount }}"
            operator: Equal
            value: 0