-
Notifications
You must be signed in to change notification settings - Fork 5
/
metadata.yml
28 lines (28 loc) · 1.3 KB
/
metadata.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
rules:
- apiGroups: [""]
apiVersions: ["v1"]
resources: ["*"]
operations: ["CREATE", "UPDATE", "DELETE"]
mutating: false
contextAwareResources:
- apiVersion: v1
kind: Namespace
executionMode: wasi
# Consider the policy for the background audit scans. Default is true. Note the
# intrinsic limitations of the background audit feature on docs.kubewarden.io;
# If your policy hits any limitations, set to false for the audit feature to
# skip this policy and not generate false positives.
backgroundAudit: true
annotations:
io.kubewarden.policy.title: cel-policy
io.artifacthub.displayName: CEL Policy
io.artifacthub.resources: Any
io.artifacthub.keywords: compliance, CEL, ValidatingAdmissionPolicy, Common Expression Language
io.kubewarden.policy.description: A policy that evaluates CEL expressions
io.kubewarden.policy.author: "Kubewarden developers <[email protected]>"
io.kubewarden.policy.ociUrl: ghcr.io/kubewarden/policies/cel-policy
io.kubewarden.policy.url: https://github.com/kubewarden/cel-policy
io.kubewarden.policy.source: https://github.com/kubewarden/cel-policy
io.kubewarden.policy.license: Apache-2.0
# io.kubewarden.policy.category: CEL metapolicy
# io.kubewarden.policy.severity: medium # one of info, low, medium, high, critical. See docs.