From 3f865d2038d1424b0124921104c8881e5e4c36b8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Charles-Edouard=20Br=C3=A9t=C3=A9ch=C3=A9?= Date: Mon, 18 Dec 2023 16:31:19 +0100 Subject: [PATCH] fix: deep copy resource in cli when operation is update (#9191) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Charles-Edouard Brétéché --- cmd/cli/kubectl-kyverno/processor/policy_processor.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/cmd/cli/kubectl-kyverno/processor/policy_processor.go b/cmd/cli/kubectl-kyverno/processor/policy_processor.go index 5800faefaf..45061d452b 100644 --- a/cmd/cli/kubectl-kyverno/processor/policy_processor.go +++ b/cmd/cli/kubectl-kyverno/processor/policy_processor.go @@ -234,7 +234,8 @@ func (p *PolicyProcessor) makePolicyContext( return nil, fmt.Errorf("failed to create policy context (%w)", err) } if operation == kyvernov1.Update { - policyContext = policyContext.WithOldResource(resource) + resource := resource.DeepCopy() + policyContext = policyContext.WithOldResource(*resource) if err := policyContext.JSONContext().AddOldResource(resource.Object); err != nil { return nil, fmt.Errorf("failed to update old resource in json context (%w)", err) }