Testing Exception resource

chart/templates/exception-require-non-root-group.yaml

+{{- $name := "require-non-root-group" }}
+{{- if and .Values.enabled (dig $name "enabled" false .Values.policies) }}
+apiVersion: kyverno.io/v1
+kind: PolicyException
+metadata:
+  name: {{ $name }}-exception
+namespace: {{ .Release.Namespace }}
+spec:
+  exceptions:
+  - policyName: {{ $name }}
+    ruleNames:
+    - run-as-group
+  match:
+    any:
+    - resources:
+        kinds:
+        - Pods/containers
+        names:
+        - istio-init
+{{- end }}