Skip to content

Commit

Permalink
Add missing questions-path to Makefile
Browse files Browse the repository at this point in the history
Signed-off-by: Martin Kravec <kravciak@gmail.com>
  • Loading branch information
kravciak committed Jan 4, 2024
1 parent 5a56fd1 commit 7785541
Show file tree
Hide file tree
Showing 3 changed files with 26 additions and 8 deletions.
2 changes: 1 addition & 1 deletion Cargo.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[package]
name = "pod-privileged-policy"
version = "0.3.0"
version = "0.3.1"
authors = ["José Guilherme Vanz <jguilhermevanz@suse.com>"]
edition = "2021"

Expand Down
2 changes: 1 addition & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ policy.wasm: $(SOURCE_FILES) Cargo.*

artifacthub-pkg.yml: metadata.yml Cargo.toml
kwctl scaffold artifacthub --metadata-path metadata.yml --version $(VERSION) \
--output artifacthub-pkg.yml
--questions-path questions-ui.yml --output artifacthub-pkg.yml

annotated-policy.wasm: policy.wasm metadata.yml
kwctl annotate -m metadata.yml -u README.md -o annotated-policy.wasm policy.wasm
Expand Down
30 changes: 24 additions & 6 deletions artifacthub-pkg.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,34 +4,34 @@
#
# This config can be saved to its default location with:
# kwctl scaffold artifacthub > artifacthub-pkg.yml
version: 0.3.0
version: 0.3.1
name: pod-privileged-policy
displayName: Pod Privileged Policy
createdAt: 2023-12-19T16:36:22.009478594Z
createdAt: 2024-01-04T15:12:05.850009857Z
description: Limit the ability to create privileged containers
license: Apache-2.0
homeURL: https://github.com/kubewarden/pod-privileged-policy
containersImages:
- name: policy
image: ghcr.io/kubewarden/policies/pod-privileged:v0.3.0
image: ghcr.io/kubewarden/policies/pod-privileged:v0.3.1
keywords:
- psp
- pod
- container
- privileged
links:
- name: policy
url: https://github.com/kubewarden/pod-privileged-policy/releases/download/v0.3.0/policy.wasm
url: https://github.com/kubewarden/pod-privileged-policy/releases/download/v0.3.1/policy.wasm
- name: source
url: https://github.com/kubewarden/pod-privileged-policy
install: |
The policy can be obtained using [`kwctl`](https://github.com/kubewarden/kwctl):
```console
kwctl pull ghcr.io/kubewarden/policies/pod-privileged:v0.3.0
kwctl pull ghcr.io/kubewarden/policies/pod-privileged:v0.3.1
```
Then, generate the policy manifest and tune it to your liking. For example:
```console
kwctl scaffold manifest -t ClusterAdmissionPolicy registry://ghcr.io/kubewarden/policies/pod-privileged:v0.3.0
kwctl scaffold manifest -t ClusterAdmissionPolicy registry://ghcr.io/kubewarden/policies/pod-privileged:v0.3.1
```
maintainers:
- name: Kubewarden developers
Expand All @@ -42,6 +42,24 @@ recommendations:
- url: https://artifacthub.io/packages/helm/kubewarden/kubewarden-controller
annotations:
kubewarden/mutation: 'false'
kubewarden/questions-ui: |
questions:
- default: false
tooltip: >-
Ignore that some init container is configured as privileged
group: Settings
label: Skip init containers
required: false
type: boolean
variable: skip_init_containers
- default: false
tooltip: >-
Ignore that some ephemeral container is configured as privileged
group: Settings
label: Skip ephemeral containers
required: false
type: boolean
variable: skip_ephemeral_containers
kubewarden/resources: Pod
kubewarden/rules: |
- apiGroups:
Expand Down

0 comments on commit 7785541

Please sign in to comment.