
You can enable a policy like this by applying the following manifest in your Kubernetes cluster: