artifacthub-pkg.yml

# Kubewarden Artifacthub Package config
#
# Use this config to submit the policy to https://artifacthub.io.
#
# This config can be saved to its default location with:
#   kwctl scaffold artifacthub > artifacthub-pkg.yml 
version: 0.3.0
name: container-resources
displayName: Container Resources
createdAt: 2024-08-12T17:48:51.791476123Z
description: Policy is designed to enforce constraints on the resource requirements of Kubernetes containers
license: Apache-2.0
homeURL: https://github.com/kubewarden/container-resources-policy
containersImages:
- name: policy
  image: ghcr.io/kubewarden/policies/container-resources:v0.3.0
keywords:
- container
- resources
links:
- name: policy
  url: https://github.com/kubewarden/container-resources-policy/releases/download/v0.3.0/policy.wasm
- name: source
  url: https://github.com/kubewarden/container-resources-policy
install: |
  The policy can be obtained using [`kwctl`](https://github.com/kubewarden/kwctl):
  ```console
  kwctl pull ghcr.io/kubewarden/policies/container-resources:v0.3.0
  ```
  Then, generate the policy manifest and tune it to your liking. For example:
  ```console
  kwctl scaffold manifest -t ClusterAdmissionPolicy registry://ghcr.io/kubewarden/policies/container-resources:v0.3.0
  ```
maintainers:
- name: Kubewarden developers
  email: cncf-kubewarden-maintainers@lists.cncf.io
provider:
  name: kubewarden
recommendations:
- url: https://artifacthub.io/packages/helm/kubewarden/kubewarden-controller
annotations:
  kubewarden/mutation: 'true'
  kubewarden/questions-ui: |
    questions:
    - default: null
      description: >-
        This policy is designed to enforce constraints on the resource requirements
        of Kubernetes containers.
      group: Settings
      label: Description
      required: false
      hide_input: true
      type: string
      variable: description
    - default: {}
      description: Defines the limit and minimum amount requested for CPU resource
      group: Settings
      label: CPU
      hide_input: true
      type: map[
      variable: cpu
      subquestions:
        - default: false
          group: Settings
          label: Ignore values
          title: Ignore values
          type: boolean
          variable: cpu.ignoreValues
          tooltip: >-
           Skip enforcement of specific values, but ensure that requests and limits are set
        - default: ''
          tooltip: >-
            Defines default minimum CPU requested.
          group: Settings
          label: Default CPU requested
          type: string
          variable: cpu.defaultRequest
          show_if: cpu.ignoreValues=false
        - default: ''
          tooltip: >-
            Defines default CPU limit value.
          group: Settings
          label: Default CPU limit
          type: string
          variable: cpu.defaultLimit
          show_if: cpu.ignoreValues=false
        - default: ''
          tooltip: >-
            Defines maximum limit value allowed to be set for the CPU resource
          group: Settings
          label: Max CPU limit allowed
          type: string
          variable: cpu.maxLimit
          show_if: cpu.ignoreValues=false
    - default: {}
      description: Defines the limit and minimum amount requested for memory resource
      group: Settings
      label: Memory
      hide_input: true
      type: map[
      variable: memory
      subquestions:
        - default: false
          group: Settings
          label: Ignore values
          title: Ignore values
          type: boolean
          variable: memory.ignoreValues
          tooltip: >-
            Skip enforcement of specific values, but ensure that requests and limits are set
        - default: ''
          tooltip: >-
            Defines default minimum memory requested.
          group: Settings
          label: Default memory requested
          type: string
          variable: memory.defaultRequest
          show_if: memory.ignoreValues=false
        - default: ''
          tooltip: >-
            Defines default memory limit value.
          group: Settings
          label: Default memory limit
          type: string
          variable: memory.defaultLimit
          show_if: memory.ignoreValues=false
        - default: ''
          tooltip: >-
            Defines maximum limit value allowed to be set for the memory resource
          group: Settings
          label: Max memory limit allowed
          type: string
          variable: memory.maxLimit
          show_if: memory.ignoreValues=false
    - default: []
      description: >-
        Configuration used to exclude containers from enforcement
      group: Settings
      label: Ignore images
      type: array[
      value_multiline: false
      variable: ignoreImages
  kubewarden/resources: Pod, Replicationcontroller, Deployments, Replicaset, Statefulset, Daemonset, Job, Cronjob
  kubewarden/rules: |
    - apiGroups:
      - ''
      apiVersions:
      - v1
      resources:
      - pods
      operations:
      - CREATE
    - apiGroups:
      - ''
      apiVersions:
      - v1
      resources:
      - replicationcontrollers
      operations:
      - CREATE
      - UPDATE
    - apiGroups:
      - apps
      apiVersions:
      - v1
      resources:
      - deployments
      - replicasets
      - statefulsets
      - daemonsets
      operations:
      - CREATE
      - UPDATE
    - apiGroups:
      - batch
      apiVersions:
      - v1
      resources:
      - jobs
      - cronjobs
      operations:
      - CREATE
      - UPDATE