mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-29 10:55:05 +00:00
Code Activity

536 conforming to plugin author guidelines

Browse source
This commit is contained in:
shravan 2020-01-26 19:21:58 +05:30
parent 225bc8c584
commit 5a63b85368
3 changed files with 38 additions and 47 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
go.mod
View file

@ -28,6 +28,7 @@ require (
gotest.tools v2.2.0+incompatible
k8s.io/api v0.0.0-20190409021203-6e4e0e4f393b
k8s.io/apimachinery v0.0.0-20190404173353-6a84e37a896d
k8s.io/cli-runtime v0.0.0-20191004110135-b9eb767d2e1a // indirect
k8s.io/client-go v11.0.1-0.20190516230509-ae8359b20417+incompatible
k8s.io/klog v1.0.0 // indirect
k8s.io/kube-openapi v0.0.0-20191107075043-30be4d16710a

2
go.sum
View file

@ -467,6 +467,8 @@ k8s.io/api v0.0.0-20190409021203-6e4e0e4f393b h1:aBGgKJUM9Hk/3AE8WaZIApnTxG35kbu
k8s.io/api v0.0.0-20190409021203-6e4e0e4f393b/go.mod h1:iuAfoD4hCxJ8Onx9kaTIt30j7jUFS00AXQi6QMi99vA=
k8s.io/apimachinery v0.0.0-20190404173353-6a84e37a896d h1:Jmdtdt1ZnoGfWWIIik61Z7nKYgO3J+swQJtPYsP9wHA=
k8s.io/apimachinery v0.0.0-20190404173353-6a84e37a896d/go.mod h1:ccL7Eh7zubPUSh9A3USN90/OzHNSVN6zxzde07TDCL0=
k8s.io/cli-runtime v0.0.0-20191004110135-b9eb767d2e1a h1:REMzGxu+NpG9dPRsE9my/fw9iYIecz1S8UFFl6hbe18=
k8s.io/cli-runtime v0.0.0-20191004110135-b9eb767d2e1a/go.mod h1:qWnH3/b8sp/l7EvlDh7ulDU3UWA4P4N1NFbEEP791tM=
k8s.io/client-go v11.0.1-0.20190516230509-ae8359b20417+incompatible h1:bK03DJulJi9j05gwnXUufcs2j7h4M85YFvJ0dIlQ9k4=
k8s.io/client-go v11.0.1-0.20190516230509-ae8359b20417+incompatible/go.mod h1:7vJpHMYJwNQCWgzmNV+VYUl1zCObLyodBc8nIyt8L5s=
k8s.io/gengo v0.0.0-20190128074634-0689ccc1d7d6/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=

82
pkg/kyverno/apply/command.go
View file

@ -4,13 +4,9 @@ import (
"encoding/json"
"fmt"
"io/ioutil"
"path"
policy2 "github.com/nirmata/kyverno/pkg/policy"
"k8s.io/client-go/tools/clientcmd"
"k8s.io/client-go/util/homedir"
"k8s.io/apimachinery/pkg/runtime/schema"
"k8s.io/client-go/discovery"
@ -28,13 +24,22 @@ import (
v1 "github.com/nirmata/kyverno/pkg/api/kyverno/v1"
"github.com/spf13/cobra"
yamlv2 "gopkg.in/yaml.v2"
"k8s.io/cli-runtime/pkg/genericclioptions"
"k8s.io/client-go/kubernetes/scheme"
)
func Command() *cobra.Command {
var resourcePath, kubeConfig, clusterName string
var cmd *cobra.Command
var resourcePaths []string
var cluster bool
cmd := &cobra.Command{
cmd.Flags().StringArrayVarP(&resourcePaths, "resource", "r", []string{}, "Path to resource files")
cmd.Flags().BoolVarP(&cluster, "cluster", "c", false, "Checks if path should be applied to cluster in the current context")
kubernetesConfig := genericclioptions.NewConfigFlags(true)
kubernetesConfig.AddFlags(cmd.Flags())
cmd = &cobra.Command{
Use: "apply",
Short: "Applies policies on resources",
Example: fmt.Sprintf("To apply on a resource:\nkyverno apply /path/to/policy1 /path/to/policy2 --resource=/path/to/resource\n\nTo apply on a cluster\nkyverno apply /path/to/policy1 /path/to/policy2 --kubeConfig=/path/to/kubeConfig"),
@ -45,38 +50,24 @@ func Command() *cobra.Command {
}
}()
if resourcePath == "" && clusterName == "" {
if len(resourcePaths) == 0 && !cluster {
fmt.Println("Specify path to resource file or cluster name")
}
if kubeConfig == "" {
kubeConfig = path.Join(homedir.HomeDir(), ".kube", "config")
policies, err := getPolicies(policyPaths)
if err != nil {
return err
}
var policies []*v1.ClusterPolicy
for _, policyPath := range policyPaths {
policy, err := getPolicy(policyPath)
if err != nil {
return err
}
err = policy2.Validate(*policy)
if err != nil {
return fmt.Errorf("Policy %v is not valid: %v", policy.Name, err)
}
policies = append(policies, policy)
}
var dClient *discovery.DiscoveryClient
if clusterName != "" {
dClient, err = getDiscoveryClient(kubeConfig, clusterName)
var dClient discovery.CachedDiscoveryInterface
if cluster {
dClient, err = kubernetesConfig.ToDiscoveryClient()
if err != nil {
return err
}
}
resources, err := getResources(policies, resourcePath, dClient)
resources, err := getResources(policies, resourcePaths, dClient)
if err != nil {
return err
}
@ -98,31 +89,28 @@ func Command() *cobra.Command {
},
}
cmd.Flags().StringVar(&resourcePath, "resource", "", "path to resource file")
cmd.Flags().StringVar(&kubeConfig, "kubeConfig", "", "path to .kube/config file")
cmd.Flags().StringVar(&clusterName, "cluster", "", "Name of the kubernetes cluster to which the policy will apply to")
return cmd
}
func getDiscoveryClient(kubeConfig, clusterName string) (*discovery.DiscoveryClient, error) {
apiConfig, err := clientcmd.LoadFromFile(kubeConfig)
if err != nil {
return nil, err
}
func getPolicies(policyPaths []string) ([]*v1.ClusterPolicy, error) {
var policies []*v1.ClusterPolicy
for _, policyPath := range policyPaths {
policy, err := getPolicy(policyPath)
if err != nil {
return nil, err
}
if apiConfig.Clusters[clusterName] == nil {
return nil, fmt.Errorf("Cluster does not exist in kubeConfig")
}
err = policy2.Validate(*policy)
if err != nil {
return nil, fmt.Errorf("Policy %v is not valid: %v", policy.Name, err)
}
clientConfig, err := clientcmd.BuildConfigFromFlags(apiConfig.Clusters[clusterName].Server, kubeConfig)
if err != nil {
return nil, err
policies = append(policies, policy)
}
return discovery.NewDiscoveryClientForConfig(clientConfig)
return policies, nil
}
func getResources(policies []*v1.ClusterPolicy, resourcePath string, dClient *discovery.DiscoveryClient) ([]*unstructured.Unstructured, error) {
func getResources(policies []*v1.ClusterPolicy, resourcePaths []string, dClient discovery.CachedDiscoveryInterface) ([]*unstructured.Unstructured, error) {
var resources []*unstructured.Unstructured
var err error
@ -147,7 +135,7 @@ func getResources(policies []*v1.ClusterPolicy, resourcePath string, dClient *di
}
}
if resourcePath != "" {
for _, resourcePath := range resourcePaths {
resource, err := getResource(resourcePath)
if err != nil {
return nil, err
@ -159,7 +147,7 @@ func getResources(policies []*v1.ClusterPolicy, resourcePath string, dClient *di
return resources, nil
}
func getResourcesOfTypeFromCluster(resourceTypes []string, dClient *discovery.DiscoveryClient) ([]*unstructured.Unstructured, error) {
func getResourcesOfTypeFromCluster(resourceTypes []string, dClient discovery.CachedDiscoveryInterface) ([]*unstructured.Unstructured, error) {
var resources []*unstructured.Unstructured
for _, kind := range resourceTypes {