policyGenerator.yaml

apiVersion: policy.open-cluster-management.io/v1
kind: PolicyGenerator
metadata:
  name: policy-generator-name
placementBindingDefaults:
  name: my-placement-binding
policyDefaults:
  # categories: []
  # complianceType: "musthave"
  controls: 
    - PR.DS-1 Data-at-rest
  namespace: my-policies
  # Use an existing placement rule so that placement bindings can be consolidated
  placement:
    placementPath: input/placement.yaml
  # Example of using labelSelector to generate a placement
  # placement:
  #   labelSelector:
  #     cloud: red hat
  remediationAction: inform
  severity: medium
  # standards: []
policies:
- name: policy-app-config-aliens
  disabled: false
  manifests:
    - path: input/configmap-aliens.yaml
      patches:
        - apiVersion: v1
          kind: ConfigMap
          metadata:
            labels:
              chandler: bing
  remediationAction: enforce
- name: policy-app-config-others
  disabled: true
  manifests:
    - path: input-folder/
      patches:
        - apiVersion: v1
          kind: ConfigMap
          metadata:
            name: game-config-toads
            namespace: default
            labels:
              monica: geller
- name: policy-require-labels
  disabled: true
  manifests:
    - path: input-kyverno/
- name: policy-require-ns-labels
  manifests:
    - path: input-gatekeeper/