metadata.yml

rules:
  - apiGroups:
      - ''
    apiVersions:
      - v1
    resources:
      - services
    operations:
      - CREATE
      - UPDATE
mutating: false
contextAware: false
executionMode: opa
annotations:
  # artifacthub specific
  io.artifacthub.displayName: Disallow Service Nodeport
  io.artifacthub.resources: Service
  io.artifacthub.keywords: service
  # artifacthub specific
  io.kubewarden.policy.ociUrl: ghcr.io/kubewarden/policies/disallow-service-nodeport
  io.kubewarden.policy.author: Kubewarden developers <cncf-kubewarden-maintainers@lists.cncf.io>
  io.kubewarden.policy.title: disallow-service-nodeport
  io.kubewarden.policy.description: A policy that prevents the creation of Service
    resources of type `NodePort`
  io.kubewarden.policy.url: https://github.com/kubewarden/disallow-service-nodeport-policy
  io.kubewarden.policy.source: https://github.com/kubewarden/disallow-service-nodeport-policy
  io.kubewarden.policy.license: Apache-2.0
  io.kubewarden.policy.category: Service
  io.kubewarden.policy.severity: high