apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: bad-context-name spec: rules: - name: test match: all: - resources: kinds: - Namespace context: - name: bad-name variable: value: dummy validate: validationFailureAction: Enforce message: "namespace must have an env label" assert: object: metadata: labels: env: {}