validating_policy.yaml

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: require-deployment-label
spec:
  validationFailureAction: enforce
  rules:
  - name: require-deployment-label
    match:
      resources:
        kinds:
        - Deployment
    validate:
      message: "Every Deployment object must contain the `company` label."
      pattern:
        metadata:
          labels:
            company: squadcast