metadata.yml

rules:
  - apiGroups:
      - ''
    apiVersions:
      - v1
    resources:
      - pods
    operations:
      - CREATE
      - UPDATE
mutating: true
contextAware: false
executionMode: kubewarden-wapc
annotations:
  # artifacthub specific
  io.artifacthub.displayName: Selinux PSP
  io.artifacthub.resources: Pod
  io.artifacthub.keywords: psp, container, runtime, selinux
  # kubewarden specific
  io.kubewarden.policy.ociUrl: ghcr.io/kubewarden/policies/selinux-psp
  io.kubewarden.policy.title: selinux-psp
  io.kubewarden.policy.description: Replacement for the Kubernetes Pod Security Policy
    that controls the usage of SELinux
  io.kubewarden.policy.author: Kubewarden developers <cncf-kubewarden-maintainers@lists.cncf.io>
  io.kubewarden.policy.url: https://github.com/kubewarden/selinux-psp-policy
  io.kubewarden.policy.source: https://github.com/kubewarden/selinux-psp-policy
  io.kubewarden.policy.license: Apache-2.0
  io.kubewarden.policy.category: PSP
  io.kubewarden.policy.severity: medium