mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 07:26:55 +00:00
Code Activity

753 final fixes

Browse source
This commit is contained in:
shravan 2020-04-04 17:13:29 +05:30
parent d4baf44fd9
commit 2599b29a09
1 changed files with 15 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
pkg/webhooks/policymutation.go
View file

@ -302,10 +302,10 @@ func generateRuleForControllers(rule kyverno.Rule, controllers string, log logr.
} }
// overwrite Kinds by pod controllers defined in the annotation // overwrite Kinds by pod controllers defined in the annotation
controllerRule.MatchResources.Kinds = strings.Split(controllers, ",") controllerRule.MatchResources.Kinds = replacePodWithPodControllers(controllerRule.MatchResources.Kinds, strings.Split(controllers, ","))
if len(exclude.Kinds) != 0 { if len(exclude.Kinds) != 0 {
controllerRule.ExcludeResources = exclude.DeepCopy() controllerRule.ExcludeResources = exclude.DeepCopy()
controllerRule.ExcludeResources.Kinds = strings.Split(controllers, ",") controllerRule.ExcludeResources.Kinds = replacePodWithPodControllers(controllerRule.ExcludeResources.Kinds, strings.Split(controllers, ","))
} }
if rule.Mutation.Overlay != nil { if rule.Mutation.Overlay != nil {
@ -395,3 +395,16 @@ func defaultPodControllerAnnotation(ann map[string]string) ([]byte, error) {
} }
return patchByte, nil return patchByte, nil
} }
func replacePodWithPodControllers(kinds []string, controllers []string) []string {
var kindsWithoutPod []string
for _, kind := range kinds {
if strings.ToLower(kind) == "pod" {
continue
}
kindsWithoutPod = append(kindsWithoutPod, kind)
}
return append(kindsWithoutPod, controllers...)
}