This is unreleased documentation for Policy Manager 1.24-next.

OCI registry support for Kubewarden

You distribute your Kubewarden policies as OCI Artifacts using regular Open Container Initiative (OCI) registries.

Kubewarden policy storage is alongside container images. They don’t require extra setup or maintenance other than that needed for regular container images.

You can add a registry that works with Kubewarden or correct any registry inaccuracies by using the "Edit this page" button at the bottom of the page

Projects implementing OCI registries

Tools that work with OCI registries

The Kubewarden project recommends:

Known issues

Docker Hub

Currently, Docker Hub doesn’t support OCI artifacts so can’t be used to store Kubewarden policies. Docker Inc. has announced that Docker Hub will support OCI artifacts in the future.

JFrog

Although JFrog supports OCI artifacts, it’s only partially possible to push to it, when following their specification. Read more here.