apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: restrict-minimum-replicas-selected-ns
spec:
  validationFailureAction: Enforce
  background: false
  rules:
    - name: min-replicas-deployments-statefulsets
      match:
        resources:
          kinds:
            - Deployment
            - StatefulSet
            - Deployment/scale
            - StatefulSet/scale
          names: 
            - coredns
          namespaces:
            - kube-system
          operations:
            - CREATE
            - UPDATE
      validate:
        message: "Deployments and StatefulSets must have at least 5 replicas in this namespace."
        anyPattern:
          # Case 1: replicas explicitly set and >= 5
          - spec:
              replicas: ">=5"