mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-28 02:18:15 +00:00
Code Activity

fix: set operation in context when necessary (#4940)

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2022-10-13 16:03:49 +02:00 • committed by GitHub
parent 38a15a948f
commit 9e933e8d21
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 17 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
pkg/controllers/report/utils/scanner.go
View file

@ -47,17 +47,18 @@ func (s *scanner) ScanResource(resource unstructured.Unstructured, nsLabels map[
func (s *scanner) scan(resource unstructured.Unstructured, nsLabels map[string]string, policy kyvernov1.PolicyInterface) (*response.EngineResponse, error) {
ctx := context.NewContext()
err := ctx.AddResource(resource.Object)
if err != nil {
if err := ctx.AddResource(resource.Object); err != nil {
return nil, err
}
err = ctx.AddNamespace(resource.GetNamespace())
if err != nil {
if err := ctx.AddNamespace(resource.GetNamespace()); err != nil {
return nil, err
}
if err := ctx.AddImageInfos(&resource); err != nil {
return nil, err
}
if err := ctx.AddOperation("CREATE"); err != nil {
return nil, err
}
policyCtx := &engine.PolicyContext{
Policy: policy,
NewResource: resource,

8
pkg/engine/context/context.go
View file

@ -52,6 +52,9 @@ type Interface interface {
// AddTargetResource merges resource json under target
AddTargetResource(data map[string]interface{}) error
// AddOperation merges operation under request.operation
AddOperation(data string) error
// AddUserInfo merges userInfo json under kyverno.userInfo
AddUserInfo(userInfo kyvernov1beta1.RequestInfo) error
@ -173,6 +176,11 @@ func (ctx *context) AddTargetResource(data map[string]interface{}) error {
return addToContext(ctx, data, "target")
}
// AddOperation data at path: request.operation
func (ctx *context) AddOperation(data string) error {
return addToContext(ctx, data, "request", "operation")
}
// AddUserInfo adds userInfo at path request.userInfo
func (ctx *context) AddUserInfo(userRequestInfo kyvernov1beta1.RequestInfo) error {
return addToContext(ctx, userRequestInfo, "request")

4
pkg/policy/apply.go
View file

@ -52,6 +52,10 @@ func applyPolicy(policy kyvernov1.PolicyInterface, resource unstructured.Unstruc
logger.Error(err, "unable to add image info to variables context")
}
if err := ctx.AddOperation("CREATE"); err != nil {
logger.Error(err, "unable to set operation in context")
}
engineResponseMutation, err = mutation(policy, resource, logger, ctx, namespaceLabels)
if err != nil {
logger.Error(err, "failed to process mutation rule")