Skip to content

Commit b397eab

Browse files
committed
docs(vulnerability-policy): add admission control stage documentation
1 parent b6c902e commit b397eab

File tree

1 file changed

+12
-1
lines changed

1 file changed

+12
-1
lines changed

website/docs/r/secure_vulnerability_policy.md

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,15 @@ resource "sysdig_secure_vulnerability_policy" "vulnerability_policy_example" {
2626
scope = "container.image != ''"
2727
}
2828
}
29+
30+
stages {
31+
name = "admission_control"
32+
configuration {
33+
scope = "kubernetes.cluster.name = 'my-cluster'"
34+
failure_action = "reject"
35+
unknown_image_action = "rejectAndScan"
36+
}
37+
}
2938
}
3039
```
3140

@@ -38,12 +47,14 @@ resource "sysdig_secure_vulnerability_policy" "vulnerability_policy_example" {
3847

3948
### Stages block
4049

41-
* `name` - (Required) Must be one of `pipeline`, `registry`, or `runtime`.
50+
* `name` - (Required) Must be one of `pipeline`, `registry`, `runtime`, or `admission_control`.
4251
* `configuration` - (Optional) Configuration block for the stage. If no configuration is provided, it will apply to any workload in this stage.
4352

4453
### Configuration block
4554

4655
* `scope` - (Required) Scope expression defining the stage applicability.
56+
* `failure_action` - (Optional) Required for `admission_control` stage only. Policy Failure Action. What should happen if the policy fails (aka: there's a rule vioation). Must be one of `reject` or `warn`.
57+
* `unknown_image_action` - (Optional) Required for `admission_control` stage only. Unknown Image Action. What should happen if the image is unknown. Must be one of `reject`, `rejectAndScan`, or `warn`.
4758

4859
## Attributes Reference
4960

0 commit comments

Comments
 (0)