SUSE Security Admission Controller artifacts

Verifying SUSE Security Admission Controller

There is a tutorial on verifying Admission Controller demonstrating how to verify Admission Controller artifacts.

Binaries

SUSE Security Admission Controller publishes the kwctl CLI tool at GitHub releases. Learn how to install it in the install kwctl documentation.

OCI artifacts

The SUSE Security Admission Controller Helm chart and container images are Open Container Initiative (OCI) artifacts distributed through the SUSE Application Collection. Accessing them requires Application Collection credentials.

  • oci://dp.apps.rancher.io/charts/suse-security-admission-controller is the Helm chart.

  • dp.apps.rancher.io/containers/kubewarden-controller, dp.apps.rancher.io/containers/kubewarden-policy-server, dp.apps.rancher.io/containers/kubewarden-audit-scanner and dp.apps.rancher.io/containers/kubectl are the container images.

The policies maintained by the Admission Controller team are policy Wasm OCI artifacts published in ghcr.io under kubewarden/packages/policies/*.

Helm charts via HTTPS

The SUSE Application Collection distributes the Admission Controller Helm chart only as an OCI artifact. There’s no Helm chart HTTPS repository.