Most validate policies here are set to Audit mode by default. To block resources immediately, set to Enforce.

For information on the Kyverno annotations listed in these policies, see this page.