apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: patch-validation-failure-action spec: validationFailureAction: enforce background: true