apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: labels: webhook.kyverno.io/managed-by: kyverno name: kyverno-resource-validating-webhook-cfg webhooks: - rules: - apiGroups: - "" apiVersions: - v1 operations: - CREATE - UPDATE - DELETE - CONNECT resources: - pods - pods/ephemeralcontainers scope: '*'