This is unreleased documentation for Admission Controller 1.30-next.

Building and distributing policies

Building the policy

Thus far, you’ve built the policy with a compilation target of the same operating system and architecture of your development machine.

It’s now time to build the policy as a WebAssembly binary, a .wasm file.

You use the command:

make policy.wasm

This command builds the code in release mode, with a WebAssembly compilation target.

The build produces a policy.wasm file:

$ file policy.wasm
policy.wasm: WebAssembly (wasm) binary module version 0x1 (MVP)

Distributing the policy

SUSE Security Admission Controller documents policy distribution in the distributing policies section.

More examples

You can find more Rust Admission Controller policies in Admission Controller’s GitHub space. This query can help you find them.

The Admission Controller policy repositories, shown by that query, have GitHub Actions that automate the following tasks:

  • Run unit tests and code linting on pull requests and after code merges into the main branch.

  • Build the policy in release mode and push it to an OCI registry as an artifact.