metadata.yml

rules:
- apiGroups: [""]
  apiVersions: ["v1"]
  resources: ["pods"]
  operations: ["CREATE"]
mutating: false
contextAwareResources: []
executionMode: kubewarden-wapc
# Consider the policy for the background audit scans. Default is true. Note the
# intrinsic limitations of the background audit feature on docs.kubewarden.io;
# If your policy hits any limitations, set to false for the audit feature to
# skip this policy and not generate false positives.
backgroundAudit: true
annotations:
  # artifacthub specific:
  io.artifacthub.displayName: Ingress Annotations Policy
  io.artifacthub.resources: Ingress
  io.artifacthub.keywords: ingress, kubewarden
  io.kubewarden.policy.ociUrl: ghcr.io/foresightminingsoftwarecorporation/policies/ingress-annotations-policy
  # kubewarden specific:
  io.kubewarden.policy.title: ingress-annotations-policy
  io.kubewarden.policy.description: This policy will inject annotations into Ingress Resources.
  io.kubewarden.policy.author: Loïs Postula <lois.postula@fslabs.ca>
  io.kubewarden.policy.url: https://github.com/foresightminingsoftwarecorporation/ingress-annotations-policy
  io.kubewarden.policy.source: https://github.com/foresightminingsoftwarecorporation/ingress-annotations-policy
  io.kubewarden.policy.license: Apache-2.0 or MIT
  # The next two annotations are used in the policy report generated by the
  # Audit scanner. Severity indicates policy check result criticality and
  # Category indicates policy category. See more here at docs.kubewarden.io
  io.kubewarden.policy.severity: low
  io.kubewarden.policy.category: Resource validation