diff --git a/README.md b/README.md index 9ea5cc5..6ae2702 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,3 @@ -Continuous integration | License - -----------------------|-------- -![Continuous integration](https://github.com/kubewarden/readonly-root-filesystem-psp-policy/workflows/Continuous%20integration/badge.svg) | [![License: Apache 2.0](https://img.shields.io/badge/License-Apache2.0-brightgreen.svg)](https://opensource.org/licenses/Apache-2.0) - - This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that enforces the usage of [`ReadOnlyRootFilesystems`](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#volumes-and-file-systems). @@ -25,13 +20,3 @@ cannot have a `securityContext`. # Configuration The policy doesn't have any configuration. - -# Obtain policy - -The policy is automatically published as an OCI artifact inside of -[this](https://github.com/orgs/kubewarden/packages/container/package/policies%2Freadonly-root-filesystem-psp-policy) -container registry. - -# Using the policy - -The easiest way to use this policy is through the [kubewarden-controller](https://github.com/kubewarden/kubewarden-controller). diff --git a/artifacthub-pkg.yml b/artifacthub-pkg.yml index 749a225..1044981 100644 --- a/artifacthub-pkg.yml +++ b/artifacthub-pkg.yml @@ -1,14 +1,14 @@ --- -version: 0.1.3 +version: 0.1.4 name: readonly-root-filesystem-psp displayName: Readonly Root Filesystem PSP -createdAt: '2022-07-19T16:05:52+02:00' +createdAt: '2023-01-19T14:46:21+02:00' description: A Kubewarden policy that enforces root filesystem to be readonly license: Apache-2.0 homeURL: https://github.com/kubewarden/readonly-root-filesystem-psp-policy containersImages: - name: policy - image: ghcr.io/kubewarden/policies/readonly-root-filesystem-psp:v0.1.3 + image: ghcr.io/kubewarden/policies/readonly-root-filesystem-psp:v0.1.4 keywords: - psp - container @@ -16,7 +16,7 @@ keywords: - volume links: - name: policy - url: https://github.com/kubewarden/readonly-root-filesystem-psp-policy/releases/download/v0.1.3/policy.wasm + url: https://github.com/kubewarden/readonly-root-filesystem-psp-policy/releases/download/v0.1.4/policy.wasm - name: source url: https://github.com/kubewarden/readonly-root-filesystem-psp-policy provider: @@ -27,3 +27,10 @@ annotations: kubewarden/resources: Pod kubewarden/mutation: false kubewarden/contextAware: false + kubewarden/rules: | + rules: + - apiGroups: [""] + apiVersions: ["v1"] + resources: ["pods"] + operations: ["CREATE", "UPDATE"] +