apiVersion: kyverno.io/v1
kind: Policy
metadata:
  name: configmap-policy
  namespace: test-validate-e2e-adding-key-to-config-map
spec:
  background: false
  rules:
  - match:
      all:
      - resources:
          kinds:
          - ConfigMap
    name: key-abc
    preconditions:
      all:
      - key: admin
        operator: Equals
        value: '{{ request.object.data.lock || '''' }}'
    validate:
      failureAction: Enforce
      anyPattern:
      - data:
          key: abc
      message: Configmap key must be "abc"
  webhookConfiguration:
    failurePolicy: Fail