A policy engine read the manifest on the way into the cluster and refused it, and somebody had to write the rule that did the refusing. This credential is for that somebody, and a third of it rests on the writing.
Kyverno Certified Associate Exam: Six Domains, One Tool
