Write an Admission Policy

Platform teams enforce policy at admission time — the cluster simply rejects workloads that break the rules. Write a Kyverno-style policy banning privileged containers.

Validator

⏱ 0:00

IDLE — checks run live as you type commands; submit when done

01Requirements

live checks

File ~/policies/no-privileged.yaml exists○
It validates that privileged: false is required○

02Walkthrough

1 of 3 revealed

01
Create the policies directory
Policies are applied cluster-wide, so they live apart from app manifests.
mkdir ~/policies
2 locked · each failed submit reveals one

03Stuck?

0 of 3 revealed

Take a hint without losing the lab — each one points at the thing to look at, not at the answer.

04AI Tutor

guides, never solves

Tell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?

04Notebook

saved locally in this browser

learner@lab — ubuntu:24.04

Session is disposable

↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list

← Previous lab

Declare a GitOps Application

Platform Engineering

Next lab →

Keep a Credentials File Private

Security & Hardening