問題文
A rule matches on Pods and a colleague argues that the same effect could be achieved by matching on Deployments instead. Which documented behavior settles the argument?
選択肢
- Matching on Deployments is required for an upgrade, because the generated rules are recomputed at install time.
- The two are equivalent because auto-generation works in both directions, translating a controller rule down to the Pod template as well as up from it.
- Matching on Deployments is preferred because a Pod is an anti-pattern and Kyverno therefore does not evaluate standalone Pods at all.
- Matching on Pods lets auto-generation cover the controllers, whereas matching on Deployments does not cover Pods created by other means.