apiVersion : kyverno.io/v1alpha1 kind : Policy metadata : name : policy-endpoints spec : rules: - name: demo-ep resource: kinds : - Endpoints selector: matchLabels: label : test mutate: patches: # add a new label - path: /metadata/labels/app.type op: add value: dev # replace port - path : /subsets/0/ports/0/port op : replace value: 9663