2022-09-28 13:45:16 +02:00
|
|
|
package report
|
|
|
|
|
|
|
|
import (
|
|
|
|
kyvernov1alpha2 "github.com/kyverno/kyverno/api/kyverno/v1alpha2"
|
|
|
|
policyreportv1alpha2 "github.com/kyverno/kyverno/api/policyreport/v1alpha2"
|
|
|
|
"github.com/kyverno/kyverno/pkg/engine/response"
|
|
|
|
controllerutils "github.com/kyverno/kyverno/pkg/utils/controller"
|
|
|
|
admissionv1 "k8s.io/api/admission/v1"
|
|
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
|
|
"k8s.io/apimachinery/pkg/types"
|
|
|
|
)
|
|
|
|
|
2022-11-24 14:21:08 +01:00
|
|
|
func NewAdmissionReport(namespace, name, owner string, uid types.UID, gvk metav1.GroupVersionKind) kyvernov1alpha2.ReportInterface {
|
|
|
|
ownerRef := metav1.OwnerReference{
|
|
|
|
APIVersion: metav1.GroupVersion{Group: gvk.Group, Version: gvk.Version}.String(),
|
|
|
|
Kind: gvk.Kind,
|
|
|
|
Name: owner,
|
|
|
|
UID: uid,
|
|
|
|
}
|
2022-09-28 13:45:16 +02:00
|
|
|
var report kyvernov1alpha2.ReportInterface
|
|
|
|
if namespace == "" {
|
2022-11-24 14:21:08 +01:00
|
|
|
report = &kyvernov1alpha2.ClusterAdmissionReport{Spec: kyvernov1alpha2.AdmissionReportSpec{Owner: ownerRef}}
|
2022-09-28 13:45:16 +02:00
|
|
|
} else {
|
2022-11-24 14:21:08 +01:00
|
|
|
report = &kyvernov1alpha2.AdmissionReport{Spec: kyvernov1alpha2.AdmissionReportSpec{Owner: ownerRef}}
|
2022-09-28 13:45:16 +02:00
|
|
|
}
|
|
|
|
report.SetName(name)
|
|
|
|
report.SetNamespace(namespace)
|
2022-10-14 15:55:50 +02:00
|
|
|
SetResourceLabels(report, uid)
|
2022-11-24 14:21:08 +01:00
|
|
|
SetManagedByKyvernoLabel(report)
|
|
|
|
return report
|
|
|
|
}
|
|
|
|
|
|
|
|
func BuildAdmissionReport(resource unstructured.Unstructured, request *admissionv1.AdmissionRequest, gvk metav1.GroupVersionKind, responses ...*response.EngineResponse) kyvernov1alpha2.ReportInterface {
|
|
|
|
report := NewAdmissionReport(resource.GetNamespace(), string(request.UID), resource.GetName(), resource.GetUID(), gvk)
|
2022-09-28 13:45:16 +02:00
|
|
|
SetResourceVersionLabels(report, &resource)
|
|
|
|
SetResponses(report, responses...)
|
|
|
|
return report
|
|
|
|
}
|
|
|
|
|
|
|
|
func NewBackgroundScanReport(namespace, name string, gvk schema.GroupVersionKind, owner string, uid types.UID) kyvernov1alpha2.ReportInterface {
|
|
|
|
var report kyvernov1alpha2.ReportInterface
|
|
|
|
if namespace == "" {
|
|
|
|
report = &kyvernov1alpha2.ClusterBackgroundScanReport{}
|
|
|
|
} else {
|
|
|
|
report = &kyvernov1alpha2.BackgroundScanReport{}
|
|
|
|
}
|
|
|
|
report.SetName(name)
|
|
|
|
report.SetNamespace(namespace)
|
|
|
|
controllerutils.SetOwner(report, gvk.GroupVersion().String(), gvk.Kind, owner, uid)
|
2022-10-14 15:55:50 +02:00
|
|
|
SetResourceLabels(report, uid)
|
2022-09-28 13:45:16 +02:00
|
|
|
SetManagedByKyvernoLabel(report)
|
|
|
|
return report
|
|
|
|
}
|
|
|
|
|
|
|
|
func NewPolicyReport(namespace, name string, results ...policyreportv1alpha2.PolicyReportResult) kyvernov1alpha2.ReportInterface {
|
|
|
|
var report kyvernov1alpha2.ReportInterface
|
|
|
|
if namespace == "" {
|
|
|
|
report = &policyreportv1alpha2.ClusterPolicyReport{}
|
|
|
|
} else {
|
|
|
|
report = &policyreportv1alpha2.PolicyReport{}
|
|
|
|
}
|
|
|
|
report.SetName(name)
|
|
|
|
report.SetNamespace(namespace)
|
|
|
|
SetManagedByKyvernoLabel(report)
|
|
|
|
SetResults(report, results...)
|
|
|
|
return report
|
|
|
|
}
|