init

06-monitoring/02-debugging/policy-exception-example.yaml

@@ -0,0 +1,24 @@
+apiVersion: kyverno.io/v2beta1
+kind: PolicyException
+metadata:
+  name: legacy-app-resource-limits-exception
+  namespace: production
+  annotations:
+    # Обязательные поля для аудита — заполняйте всегда
+    exception.company.com/expires: "2025-06-01"
+    exception.company.com/reason: "Legacy приложение в процессе миграции. JIRA-4321"
+    exception.company.com/approved-by: "platform-team"
+    exception.company.com/created-by: "john.doe"
+spec:
+  exceptions:
+  - policyName: require-resource-limits
+    ruleNames:
+    - check-container-limits
+  match:
+    resources:
+      kinds:
+      - Pod
+      namespaces:
+      - production
+      names:
+      - legacy-app-*          # только legacy поды