問題文
Auto-generation was suppressed and the team needs Pods created by a Job controller to pass. Which expression does the documentation give?
選択肢
- An annotation on the policy setting autogen-controllers to the Job kind, because naming the controller in the autogen annotation is what tells Kyverno to hand the enforcement of that shape over to the generated rule instead of to the Pod rule.
- A PolicyException with a name wildcard covering the generated Pod names, because the hash suffix of a controller-managed Pod cannot be predicted and an exception with a wildcard is the documented mechanism for that shape of exemption.
- An exclude block naming the Job kind.
- A precondition with an AnyNotIn operator against the kinds listed in the object's owner references.