Control: Ingress definition should not allow any usage of NGINX ingress annotation snippets

powerpipe control run kubernetes_compliance.control.ingress_nginx_annotations_all_snippets_not_used

powerpipe login
powerpipe control run kubernetes_compliance.control.ingress_nginx_annotations_all_snippets_not_used --share

select
  coalesce(uid, concat(path, ':', start_line)) as resource,
  case when a.key like '%snippet%' then 'alarm'
    else 'ok'
  end as status,
  case
    when a.key like '%snippet%' then a.key || ' annotation snippet used.'
    else a.key || ' annotation snippet not used.'
  end as reason,
  name as ingress_name
  
  , coalesce(context_name, '') as context_name, namespace, source_type, coalesce(path || ':' || start_line || '-' || end_line, '') as path
from
  kubernetes_ingress,
  jsonb_each_text(annotations) as a;