Security

Security policies for access control.

Installation

entries:
  - name: security
    kind: ns.dependency
    component: wippy/security
    version: "*"

Policies

General Access

entries:
  - name: general
    kind: security.policy
    groups:
      - wippy.security:process
    policy:
      resources: '*'
      actions: '*'
      effect: allow

Registry Write Protection

entries:
  - name: registry.no_write
    kind: security.policy
    groups:
      - wippy.security:process
    policy:
      resources: '*'
      actions: '*'
      conditions:
        - field: action
          operator: matches
          value: ^registry\.apply.*$
      effect: deny

Custom Policies

entries:
  - name: my_policy
    kind: security.policy
    meta:
      comment: Custom access policy
    groups:
      - my_namespace:my_group
    policy:
      resources: 'my_namespace:*'
      actions: 'read,write'
      effect: allow