apiVersion: policy.open-cluster-management.io/v1
kind: Policy
metadata:
  name: case1-test-policy
spec:
  remediationAction: inform
  disabled: false
  policy-templates:
    - objectDefinition:
        apiVersion: policies.ibm.com/v1alpha1
        kind: TrustedContainerPolicy
        metadata:
          name: xxxxx
        spec:
          xxxxx: 5
          namespaceSelector:
            exclude:
              - kube-system
              - openshift-*
            include:
              - default
          remediationAction: enforce
          severity: low
          imageRegistry: quay.io
---
apiVersion: policy.open-cluster-management.io/v1
kind: PlacementBinding
metadata:
  name: case1-test-policy-pb
placementRef:
  apiGroup: apps.open-cluster-management.io
  kind: PlacementRule
  name: case1-test-policy-plr
subjects:
- apiGroup: policy.open-cluster-management.io
  kind: Policy
  name: case1-test-policy
---
apiVersion: apps.open-cluster-management.io/v1
kind: PlacementRule
metadata:
  name: case1-test-policy-plr
spec:
  clusterConditions:
  - status: "True"
    type: ManagedClusterConditionAvailable
  clusterSelector:
    matchExpressions:
      []
