-
Notifications
You must be signed in to change notification settings - Fork 4
/
metadata.yml
60 lines (60 loc) · 1.67 KB
/
metadata.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
rules:
- apiGroups:
- ''
apiVersions:
- v1
resources:
- pods
operations:
- CREATE
- apiGroups:
- ''
apiVersions:
- v1
resources:
- replicationcontrollers
operations:
- CREATE
- UPDATE
- apiGroups:
- apps
apiVersions:
- v1
resources:
- deployments
- replicasets
- statefulsets
- daemonsets
operations:
- CREATE
- UPDATE
- apiGroups:
- batch
apiVersions:
- v1
resources:
- jobs
- cronjobs
operations:
- CREATE
- UPDATE
mutating: false
contextAware: false
executionMode: kubewarden-wapc
annotations:
# artifacthub specific
io.artifacthub.displayName: volumeMounts
io.artifacthub.resources: Pod,Deployment,Replicaset,Statefulset,Daemonset,Replicationcontroller,Job,Cronjob
io.artifacthub.keywords: container, volumeMounts, volume, pod, workload resources
# kubewarden specific
io.kubewarden.policy.ociUrl: ghcr.io/kubewarden/policies/volumemounts
io.kubewarden.policy.title: volumemounts
io.kubewarden.policy.description: Policy that inspects containers, init containers,
and ephemeral containers, and restricts their usage of volumes by checking the
`volume` name being used in `volumeMounts[*].name`
io.kubewarden.policy.author: Kubewarden developers <[email protected]>
io.kubewarden.policy.url: https://github.com/kubewarden/volumemounts-policy
io.kubewarden.policy.source: https://github.com/kubewarden/volumemounts-policy
io.kubewarden.policy.license: Apache-2.0
io.kubewarden.policy.category: Resource validation
io.kubewarden.policy.severity: medium