apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: deny spec: validationFailureAction: Audit background: true rules: - name: deny match: any: - resources: kinds: - Scale validate: deny: {}