fab-city-software-kit/test/selector.rego

package main

import data.kubernetes

name = input.metadata.name

deny[msg] {
	input.kind = "Deployment"
	not input.spec.selector.matchLabels.app
	msg = sprintf("%s must provide app label for pod selectors: https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/#labels", [name])
}