apiVersion: kyverno.io/v2beta1
kind: PolicyException
metadata:
  name: legacy-app-resource-limits-exception
  namespace: production
  annotations:
    # Обязательные поля для аудита — заполняйте всегда
    exception.company.com/expires: "2025-06-01"
    exception.company.com/reason: "Legacy приложение в процессе миграции. JIRA-4321"
    exception.company.com/approved-by: "platform-team"
    exception.company.com/created-by: "john.doe"
spec:
  exceptions:
  - policyName: require-resource-limits
    ruleNames:
    - check-container-limits
  match:
    resources:
      kinds:
      - Pod
      namespaces:
      - production
      names:
      - legacy-app-*          # только legacy поды