7/ And run the admission controller with 3 replicas: single replica + failurePolicy Fail = every deploy hangs when that pod drains.
Full guide, all manifests:
https://devtocash.com/blog/2026-07-18-kyverno-policy-as-code-kubernetes-guide
#Kubernetes #DevOps #PolicyAsCode
