kyverno-node-selectors

kyverno)]$ kc get clusterpolicies.kyverno.io spot-selector-policy-for-gitlab -o yaml
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  annotations:
    meta.helm.sh/release-name: kyverno-policies
    meta.helm.sh/release-namespace: kyverno
    pod-policies.kyverno.io/autogen-controllers: none
  labels:
    app: raw
    app.kubernetes.io/managed-by: Helm
    chart: raw-0.2.3
    heritage: Helm
    release: kyverno-policies
  name: spot-selector-policy-for-gitlab
spec:
  background: true
  failurePolicy: Fail
  rules:
  - match:
      resources:
        kinds:
        - Pod
        namespaceSelector:
          matchLabels:
            gitlab: "true"
    mutate:
      patchStrategicMerge:
        spec:
          nodeSelector:
            gitlab/ci: "true"
          tolerations:
          - effect: NoSchedule
            key: kubernetes.azure.com/scalesetpriority
            operator: Equal
            value: spot
    name: spot-selector-policy-gitlab
  validationFailureAction: audit