no-proxy-pod-vars.yaml

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: exclude-all-pods-http-proxy
spec:
  mutateExistingOnPolicyUpdate: false
  rules:
  - name: pod-ns
    match:
      any:
      - resources:
          kinds:
          - Pod
          namespaces:
          - default
    mutate:
      patchesJson6902: |-
        - path: "/metadata/annotations/kubernetes.azure.com~1no-http-proxy-vars"
          op: add
          value: "true"