artifacthub-pkg.yml

# Kubewarden Artifacthub Package config
#
# Use this config to submit the policy to https://artifacthub.io.
#
# This config can be saved to its default location with:
#   kwctl scaffold artifacthub > artifacthub-pkg.yml 
version: 0.1.16
name: ingress-policy
displayName: Ingress Policy
createdAt: 2023-10-16T07:49:55.98522702Z
description: Enforce requirements on Ingress resources
license: Apache-2.0
homeURL: https://github.com/kubewarden/ingress-policy
containersImages:
- name: policy
  image: ghcr.io/kubewarden/policies/ingress:v0.1.16
keywords:
- ingress
links:
- name: policy
  url: https://github.com/kubewarden/ingress-policy/releases/download/v0.1.16/policy.wasm
- name: source
  url: https://github.com/kubewarden/ingress-policy
install: |
  The policy can be obtained using [`kwctl`](https://github.com/kubewarden/kwctl):
  ```console
  kwctl pull ghcr.io/kubewarden/policies/ingress:v0.1.16
  ```
  Then, generate the policy manifest and tune it to your liking. For example:
  ```console
  kwctl scaffold manifest -t ClusterAdmissionPolicy registry://ghcr.io/kubewarden/policies/ingress:v0.1.16
  ```
maintainers:
- name: Kubewarden developers
  email: cncf-kubewarden-maintainers@lists.cncf.io
provider:
  name: kubewarden
recommendations:
- url: https://artifacthub.io/packages/helm/kubewarden/kubewarden-controller
annotations:
  kubewarden/mutation: 'false'
  kubewarden/questions-ui: |
    questions:
    - default: false
      description: This policy allows you to restrict ingress resources.
      tooltip: >-
        Whether the spec for ingress resources has to include a TLS attribute that
        includes all hosts defined in the .spec.rules attribute of the ingress
        resource.
      group: Settings
      label: Require TLS
      required: false
      type: boolean
      variable: requireTLS
    - default: []
      description: >-
        A list of allowed ports inside `.spec.rules.paths.backend.service.port`. If
        this array contains at least one port, any other port will be rejected.
      group: Settings
      label: Allow ports
      required: false
      type: array[
      variable: allowPorts
    - default: []
      description: >-
        A list of denied ports inside `.spec.rules.paths.backend.service.port`. If
        any port matches a port on this array, the ingress resource will be
        rejected, otherwise it will be accepted.
      group: Settings
      label: Deny ports
      required: false
      type: array[
      variable: denyPorts
  kubewarden/resources: Ingress
  kubewarden/rules: |
    - apiGroups:
      - networking.k8s.io
      apiVersions:
      - v1
      resources:
      - ingresses
      operations:
      - CREATE
      - UPDATE