apiVersion: policies.kubewarden.io/v1
kind: AdmissionPolicy
metadata:
  name: block-policy-reports
  namespace: tenant-a
spec:
  module: registry://ghcr.io/kubewarden/policies/cel-policy:latest
  settings:
    validations:
      - expression: "false"
        message: "policy reports are blocked"
  rules:
    - apiGroups: ["wgpolicyk8s.io"]
      apiVersions: ["v1alpha2"]
      operations: ["CREATE", "UPDATE"]
      resources: ["policyreports"]
  mutating: false
  backgroundAudit: false