mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

adding support for policies.kyverno.io/scored annotation (#1976)

Browse source 
* initial commit

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added debug statements

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed report

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed code for debugging

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* newline fix

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fix default case

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
This commit is contained in:
Arsh Sharma 2021-06-22 07:07:20 +05:30 • committed by GitHub
parent 431b36f34e
commit 86045fc02c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
pkg/policyreport/builder.go
View file

@ -145,7 +145,7 @@ func (builder *requestBuilder) buildRCRResult(policy string, resource response.R
UID: types.UID(resource.UID),
},
},
Scored: true,
Scored: av.scored,
Category: av.category,
Severity: av.severity,
}
@ -153,6 +153,9 @@ func (builder *requestBuilder) buildRCRResult(policy string, resource response.R
result.Rule = rule.Name
result.Message = rule.Message
result.Status = report.PolicyStatus(rule.Check)
if result.Status == "fail" && !av.scored {
result.Status = "warn"
}
return result
}
@ -258,10 +261,12 @@ func buildViolatedRules(er *response.EngineResponse) []kyverno.ViolatedRule {
const categoryLabel string = "policies.kyverno.io/category"
const severityLabel string = "policies.kyverno.io/severity"
const scoredLabel string = "policies.kyverno.io/scored"
type annotationValues struct {
category string
severity report.PolicySeverity
scored bool
}
func (av *annotationValues) setSeverityFromString(severity string) {
@ -285,6 +290,15 @@ func (builder *requestBuilder) fetchAnnotationValues(policy, ns string) annotati
if severity, ok := ann[severityLabel]; ok {
av.setSeverityFromString(severity)
}
if scored, ok := ann[scoredLabel]; ok {
if scored == "false" {
av.scored = false
} else {
av.scored = true
}
} else {
av.scored = true
}
return av
}