apiVersion: v2
name: bp-coraza
description: |
  Catalyst Blueprint scratch chart for Coraza WAF (SPOA mode).

  No upstream Helm chart is published for coraza-spoa
  (https://corazawaf.github.io/coraza-spoa returns 404 as of 2026-04-29).
  This chart hand-wires the official `ghcr.io/corazawaf/coraza-spoa`
  container as a Deployment + Service. Coraza speaks the HAProxy SPOE
  protocol; an HAProxy front (or a per-Sovereign Cilium L7 policy) calls
  this Service to evaluate ModSecurity-style rules on inbound traffic.

  Pairs with bp-cilium (L7 policy enforcement), bp-keycloak (auth-front),
  and bp-stalwart (mail-front).
type: application
version: 1.0.0
appVersion: "0.7.0"
keywords: [catalyst, blueprint, coraza, waf, modsecurity, security]
maintainers:
  - name: OpenOva Catalyst
    email: catalyst@openova.io

# Scratch chart — the upstream Coraza project does not publish a Helm
# chart, so the Catalyst overlay templates (Deployment + Service) are
# entirely in templates/ in this chart. The `sigstore/common` library
# subchart below is included ONLY to satisfy the platform-wide
# blueprint-release.yaml hollow-chart gate (issue #181) — every umbrella
# MUST declare at least one dependency. `common` is a tiny library chart
# (helper templates only, zero runtime resources) and contributes nothing
# to the rendered manifests of bp-coraza.
dependencies:
  - name: common
    version: "0.1.3"
    repository: "https://sigstore.github.io/helm-charts"
