フリー問題

問題文

A rule must validate every container image in a Pod against a registry prefix, including init containers. Which construct does the documentation recommend, and what does the pattern inside it reference?

選択肢

1. A preconditions block with an AllIn operator over the flattened list of images.
2. A single pattern with a wildcard container name.
3. A foreach declaration with one entry per list, whose pattern references the attributes of element directly rather than the full path.
4. A verifyImages rule with an imageReferences pattern, because registry validation belongs to the image verification path.