mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-30 19:35:06 +00:00
Code Activity

fix: don't process non background policies in background scan (#5008)

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2022-10-17 13:01:41 +02:00 • committed by GitHub
parent 02e832a771
commit a89fbac333
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pkg/controllers/report/background/controller.go
View file

@ -203,7 +203,7 @@ func (c *controller) updateReport(ctx context.Context, meta metav1.Object, gvk s
policies = append(policies, pols...) policies = append(policies, pols...)
} }
// load background policies // load background policies
backgroundPolicies := utils.RemoveNonValidationPolicies(logger, policies...) backgroundPolicies := utils.RemoveNonBackgroundPolicies(logger, policies...)
if err != nil { if err != nil {
return err return err
} }

10
pkg/controllers/report/utils/utils.go
View file

@ -30,6 +30,16 @@ func BuildKindSet(logger logr.Logger, policies ...kyvernov1.PolicyInterface) set
return kinds return kinds
} }
func RemoveNonBackgroundPolicies(logger logr.Logger, policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface {
var backgroundPolicies []kyvernov1.PolicyInterface
for _, pol := range policies {
if CanBackgroundProcess(logger, pol) {
backgroundPolicies = append(backgroundPolicies, pol)
}
}
return backgroundPolicies
}
func RemoveNonValidationPolicies(logger logr.Logger, policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface { func RemoveNonValidationPolicies(logger logr.Logger, policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface {
var validationPolicies []kyvernov1.PolicyInterface var validationPolicies []kyvernov1.PolicyInterface
for _, pol := range policies { for _, pol := range policies {