<p>Would it be possible to mandate developers (by creating policies on in some other way) to mark all of their pods/resources with pre-defined label , e.g. environment=dev or department=dev ?</p>

<p>It can be in the form of enforcement ( e.g. if pod is created without propel label - deny the creation request) or just silently apply necessary label and re-write the existing one if needed.</p>

Andy
<p>I gave <a href="https://stackoverflow.com/a/58841928/9889148">this answer</a> to a similar question regarding "...policy check before container execution".</p>

<p>In essence, <a href="https://www.openpolicyagent.org/" rel="nofollow noreferrer">Open Policy Agent</a> - a Cloud Native Computing Foundation (incubating) project - supports custom policy enforcement for Kubernetes. Check out this <a href="https://github.com/open-policy-agent/gatekeeper#constraint-templates" rel="nofollow noreferrer">example</a> regarding enforcing labels to be present.</p>
