artifacthub-pkg.yml

# Kubewarden Artifacthub Package config
#
# Use this config to submit the policy to https://artifacthub.io.
#
# This config can be saved to its default location with:
#   kwctl scaffold artifacthub > artifacthub-pkg.yml 
version: 0.2.2
name: pod-runtime
displayName: Pod Runtime
createdAt: 2023-10-25T14:18:24.323498783Z
description: Policy that controls the usage of Pod runtimeClass
license: Apache-2.0
homeURL: https://github.com/kubewarden/pod-runtime-class-policy
containersImages:
- name: policy
  image: ghcr.io/kubewarden/policies/pod-runtime:v0.2.2
keywords:
- pod
- runtime
- container runtime
links:
- name: policy
  url: https://github.com/kubewarden/pod-runtime-class-policy/releases/download/v0.2.2/policy.wasm
- name: source
  url: https://github.com/kubewarden/pod-runtime-class-policy
install: |
  The policy can be obtained using [`kwctl`](https://github.com/kubewarden/kwctl):
  ```console
  kwctl pull ghcr.io/kubewarden/policies/pod-runtime:v0.2.2
  ```
  Then, generate the policy manifest and tune it to your liking. For example:
  ```console
  kwctl scaffold manifest -t ClusterAdmissionPolicy registry://ghcr.io/kubewarden/policies/pod-runtime:v0.2.2
  ```
maintainers:
- name: Kubewarden developers
  email: cncf-kubewarden-maintainers@lists.cncf.io
provider:
  name: kubewarden
recommendations:
- url: https://artifacthub.io/packages/helm/kubewarden/kubewarden-controller
annotations:
  kubewarden/mutation: 'true'
  kubewarden/questions-ui: |
    questions:
    - default: []
      description: >-
        This policy can be used to inspect `CREATE` and `UPDATE` requests of `Pod`
        resources, and can be configured to replace a non-valid runtime with a
        fall-back one.
      tooltip: Give the explicit request to use a specific runtime.
      group: Settings
      label: Reserved Runtimes
      required: false
      type: array[
      variable: reservedRuntimes
    - default: ''
      tooltip: Replace a non-valid runtime with a fall-back.
      group: Settings
      label: Fallback runtime
      required: false
      type: string
      variable: fallbackRuntime
    - default: true
      tooltip: Prevent the usage of the default runtime.
      group: Settings
      label: Default runtime reserved
      required: false
      type: boolean
      variable: defaultRuntimeReserved
  kubewarden/resources: Pod
  kubewarden/rules: |
    - apiGroups:
      - ''
      apiVersions:
      - v1
      resources:
      - pods
      operations:
      - CREATE
      - UPDATE