Skip to content

Demo policy showing how to write a raw WASI validating policy

License

Notifications You must be signed in to change notification settings

kubewarden/raw-validation-wasi-policy

Repository files navigation

Kubewarden Policy Repository Stable

Kubewarden policy raw-validation-wasi-policy

Description

This is a WASI test policy that validates raw requests.

The policy accepts requests in the following format:

{
  "request": {
    "user": "tonio"
    "action": "eats",
    "resource": "hay",
  }
}

and validates that:

  • user is in the list of valid users
  • action is in the list of valid actions
  • resource is in the list of valid resources

Settings

This policy has configurable settings:

  • validUsers: a list of valid users. Cannot be empty.
  • validActions: a list of valid actions.Cannot be empty.
  • validResources: a list of valid resources. Cannot be empty.