apiVersion: kyverno.io/v1 kind: Policy metadata: name: deny spec: background: true rules: - name: deny match: any: - resources: kinds: - Scale validate: validationFailureAction: Audit deny: {}