問題文
A rule must apply the latest Pod Security Standards baseline profile across the cluster in one rule. Which option correctly identifies the fields that the documentation uses?
選択肢
- The profile field and the controls field, which lists the individual checks to apply.
- A namespaceSelector on the standard label and an AdmissionConfiguration reference, because the built-in mechanism is what implements the standards and Kyverno delegates to it.
- The level field naming the profile, and the version field which may be latest or a pinned version.
- The pattern field with the full set of controls expressed as an overlay, because the standards are a collection of field constraints and expressing them as a pattern is what the subrule reduces to.