apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: deployment-has-multiple-replicas spec: validationFailureAction: audit rules: - name: deployment-has-multiple-replicas match: resources: kinds: - Deployment exclude: resources: namespaces: - kyverno - kube-system - kube-node-lease - kube-public validate: message: "Deployments must have more than one replica to ensure availability." pattern: spec: replicas: ">1"