kyverno-policies

(⎈ |ondemand-aks:kyverno)]$ kc get clusterpolicies.kyverno.io add-ingress-policy -o yaml
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  annotations:
    meta.helm.sh/release-name: kyverno-policies
    meta.helm.sh/release-namespace: kyverno
    pod-policies.kyverno.io/autogen-controllers: DaemonSet,Deployment,Job,StatefulSet,CronJob
  generation: 2
  labels:
    app: raw
    app.kubernetes.io/managed-by: Helm
    chart: raw-0.2.3
    heritage: Helm
    release: kyverno-policies
  name: add-ingress-policy
spec:
  background: true
  failurePolicy: Fail
  rules:
  - exclude:
      resources: {}
    generate:
      clone: {}
    match:
      resources:
        kinds:
        - Ingress
        namespaceSelector:
          matchLabels:
            personal: "true"
    mutate:
      patchStrategicMerge:
        metadata:
          annotations:
            +(external-dns.alpha.kubernetes.io/target): gw.aks.ondemand.dev
        spec:
          tls:
          - secretName: environment-certificate-tls
    name: add-ingress-policy
    validate: {}
  validationFailureAction: audit