mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-13 19:28:55 +00:00
Code Activity

feat:support default value into apiCall context variables (#10594)

Browse source 
* initial changes

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

* test changes

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

* logical changes

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

* added Check for default in transformAndStore

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

* codegen applied

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

* considered an edge case

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

* fix: remove error when jsondata and default is nil

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* codegen done

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>

---------

Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
This commit is contained in:
D N Siva Sathyaseelan 2024-09-05 11:27:44 +05:30 • committed by GitHub
parent b78c501b1b
commit cc966bf7af
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
25 changed files with 1044 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
api/kyverno/v1/common_types.go
View file

@ -217,6 +217,11 @@ type APICall struct {
type ContextAPICall struct {
APICall `json:",inline" yaml:",inline"`
// Default is an optional arbitrary JSON object that the context may take if the apiCall
// returns error
// +optional
Default *apiextv1.JSON `json:"default,omitempty" yaml:"default,omitempty"`
// JMESPath is an optional JSON Match Expression that can be used to
// transform the JSON response returned from the server. For example
// a JMESPath of "items | length(@)" applied to the API server response

5
api/kyverno/v1/zz_generated.deepcopy.go
View file

@ -447,6 +447,11 @@ func (in *ConfigMapReference) DeepCopy() *ConfigMapReference {
func (in *ContextAPICall) DeepCopyInto(out *ContextAPICall) {
*out = *in
in.APICall.DeepCopyInto(&out.APICall)
if in.Default != nil {
in, out := &in.Default, &out.Default
*out = new(apiextensionsv1.JSON)
(*in).DeepCopyInto(*out)
}
return
}

10
charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_cleanuppolicies.yaml
View file

@ -192,6 +192,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1455,6 +1460,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

10
charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_clustercleanuppolicies.yaml
View file

@ -192,6 +192,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1455,6 +1460,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

100
charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_clusterpolicies.yaml
View file

@ -222,6 +222,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1235,6 +1240,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2296,6 +2306,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2655,6 +2670,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -3329,6 +3349,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5086,6 +5111,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6109,6 +6139,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7182,6 +7217,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7550,6 +7590,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8237,6 +8282,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10067,6 +10117,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10874,6 +10929,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11729,6 +11789,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12088,6 +12153,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12932,6 +13002,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -14658,6 +14733,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15681,6 +15761,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16754,6 +16839,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17122,6 +17212,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17809,6 +17904,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

100
charts/kyverno/charts/crds/templates/kyverno.io/kyverno.io_policies.yaml
View file

@ -223,6 +223,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1236,6 +1241,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2297,6 +2307,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2656,6 +2671,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -3330,6 +3350,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5088,6 +5113,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6111,6 +6141,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7184,6 +7219,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7552,6 +7592,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8239,6 +8284,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10070,6 +10120,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10877,6 +10932,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11732,6 +11792,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12091,6 +12156,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12935,6 +13005,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -14661,6 +14736,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15684,6 +15764,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16757,6 +16842,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17125,6 +17215,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17812,6 +17907,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

100
cmd/cli/kubectl-kyverno/data/crds/kyverno.io_clusterpolicies.yaml
View file

@ -216,6 +216,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1229,6 +1234,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2290,6 +2300,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2649,6 +2664,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -3323,6 +3343,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5080,6 +5105,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6103,6 +6133,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7176,6 +7211,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7544,6 +7584,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8231,6 +8276,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10061,6 +10111,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10868,6 +10923,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11723,6 +11783,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12082,6 +12147,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12926,6 +12996,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -14652,6 +14727,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15675,6 +15755,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16748,6 +16833,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17116,6 +17206,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17803,6 +17898,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

100
cmd/cli/kubectl-kyverno/data/crds/kyverno.io_policies.yaml
View file

@ -217,6 +217,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1230,6 +1235,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2291,6 +2301,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2650,6 +2665,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -3324,6 +3344,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5082,6 +5107,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6105,6 +6135,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7178,6 +7213,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7546,6 +7586,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8233,6 +8278,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10064,6 +10114,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10871,6 +10926,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11726,6 +11786,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12085,6 +12150,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12929,6 +12999,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -14655,6 +14730,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15678,6 +15758,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16751,6 +16836,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17119,6 +17209,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17806,6 +17901,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

10
config/crds/kyverno/kyverno.io_cleanuppolicies.yaml
View file

@ -186,6 +186,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1449,6 +1454,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

10
config/crds/kyverno/kyverno.io_clustercleanuppolicies.yaml
View file

@ -186,6 +186,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1449,6 +1454,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

100
config/crds/kyverno/kyverno.io_clusterpolicies.yaml
View file

@ -216,6 +216,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1229,6 +1234,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2290,6 +2300,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2649,6 +2664,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -3323,6 +3343,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5080,6 +5105,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6103,6 +6133,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7176,6 +7211,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7544,6 +7584,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8231,6 +8276,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10061,6 +10111,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10868,6 +10923,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11723,6 +11783,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12082,6 +12147,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12926,6 +12996,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -14652,6 +14727,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15675,6 +15755,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16748,6 +16833,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17116,6 +17206,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17803,6 +17898,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

100
config/crds/kyverno/kyverno.io_policies.yaml
View file

@ -217,6 +217,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1230,6 +1235,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2291,6 +2301,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2650,6 +2665,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -3324,6 +3344,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5082,6 +5107,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6105,6 +6135,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7178,6 +7213,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7546,6 +7586,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8233,6 +8278,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10064,6 +10114,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10871,6 +10926,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11726,6 +11786,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12085,6 +12150,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12929,6 +12999,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -14655,6 +14730,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15678,6 +15758,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16751,6 +16836,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17119,6 +17209,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17806,6 +17901,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

220
config/install-latest-testing.yaml
View file

@ -385,6 +385,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -1648,6 +1653,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -2937,6 +2947,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -4200,6 +4215,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -5519,6 +5539,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -6532,6 +6557,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7593,6 +7623,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -7952,6 +7987,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -8626,6 +8666,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -10383,6 +10428,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -11406,6 +11456,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12479,6 +12534,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -12847,6 +12907,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -13534,6 +13599,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -15364,6 +15434,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -16171,6 +16246,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17026,6 +17106,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -17385,6 +17470,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -18229,6 +18319,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -19955,6 +20050,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -20978,6 +21078,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -22051,6 +22156,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -22419,6 +22529,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -23106,6 +23221,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -25213,6 +25333,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -26226,6 +26351,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -27287,6 +27417,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -27646,6 +27781,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -28320,6 +28460,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -30078,6 +30223,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -31101,6 +31251,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -32174,6 +32329,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -32542,6 +32702,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -33229,6 +33394,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -35060,6 +35230,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -35867,6 +36042,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -36722,6 +36902,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -37081,6 +37266,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -37925,6 +38115,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -39651,6 +39846,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -40674,6 +40874,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -41747,6 +41952,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -42115,6 +42325,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to
@ -42802,6 +43017,11 @@ spec:
- value
type: object
type: array
default:
description: |-
Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error
x-kubernetes-preserve-unknown-fields: true
jmesPath:
description: |-
JMESPath is an optional JSON Match Expression that can be used to

15
docs/user/crd/index.html
View file

@ -1434,6 +1434,21 @@ APICall
</tr>
<tr>
<td>
<code>default</code><br/>
<em>
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#json-v1-apiextensions">
Kubernetes apiextensions/v1.JSON
</a>
</em>
</td>
<td>
<em>(Optional)</em>
<p>Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error</p>
</td>
</tr>
<tr>
<td>
<code>jmesPath</code><br/>
<em>
string

28
docs/user/crd/kyverno.v1.html
View file

@ -2929,6 +2929,34 @@ or can be variables declared using JMESPath.</p>
</td>
</tr>
<tr>
<td><code>default</code>
</br>
<span style="font-family: monospace">k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1.JSON</span>
</td>
<td>
<p>Default is an optional arbitrary JSON object that the context may take if the apiCall
returns error</p>
</td>
</tr>

12
pkg/client/applyconfigurations/kyverno/v1/contextapicall.go
View file

@ -20,13 +20,15 @@ package v1
import (
kyvernov1 "github.com/kyverno/kyverno/api/kyverno/v1"
apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
)
// ContextAPICallApplyConfiguration represents an declarative configuration of the ContextAPICall type for use
// with apply.
type ContextAPICallApplyConfiguration struct {
APICallApplyConfiguration `json:",inline"`
JMESPath *string `json:"jmesPath,omitempty"`
Default *apiextensionsv1.JSON `json:"default,omitempty"`
JMESPath *string `json:"jmesPath,omitempty"`
}
// ContextAPICallApplyConfiguration constructs an declarative configuration of the ContextAPICall type for use with
@ -72,6 +74,14 @@ func (b *ContextAPICallApplyConfiguration) WithService(value *ServiceCallApplyCo
return b
}
// WithDefault sets the Default field in the declarative configuration to the given value
// and returns the receiver, so that objects can be built by chaining "With" function invocations.
// If called multiple times, the Default field is set to the value of the last call.
func (b *ContextAPICallApplyConfiguration) WithDefault(value apiextensionsv1.JSON) *ContextAPICallApplyConfiguration {
b.Default = &value
return b
}
// WithJMESPath sets the JMESPath field in the declarative configuration to the given value
// and returns the receiver, so that objects can be built by chaining "With" function invocations.
// If called multiple times, the JMESPath field is set to the value of the last call.

12
pkg/engine/apicall/apiCall.go
View file

@ -82,6 +82,18 @@ func (a *apiCall) Execute(ctx context.Context, call *kyvernov1.APICall) ([]byte,
}
func (a *apiCall) transformAndStore(jsonData []byte) ([]byte, error) {
if jsonData == nil {
if a.entry.APICall.Default.Raw == nil {
return jsonData, nil
}
jsonData = a.entry.APICall.Default.Raw
err := a.jsonCtx.AddContextEntry(a.entry.Name, jsonData)
if err != nil {
return nil, fmt.Errorf("failed to add resource data to context entry %s: %w", a.entry.Name, err)
}
return jsonData, nil
}
if a.entry.APICall.JMESPath == "" {
err := a.jsonCtx.AddContextEntry(a.entry.Name, jsonData)
if err != nil {

5
pkg/engine/context/loaders/apicall.go
View file

@ -54,9 +54,12 @@ func (a *apiLoader) LoadData() error {
}
if a.data == nil {
var err error
if a.data, err = executor.Fetch(a.ctx); err != nil {
if a.data, err = executor.Fetch(a.ctx); err != nil && a.entry.APICall.Default == nil {
return fmt.Errorf("failed to fetch data for APICall: %w", err)
}
if err == nil {
a.entry.APICall.Default = nil
}
}
if _, err := executor.Store(a.data); err != nil {
return fmt.Errorf("failed to store data for APICall: %w", err)

2
test/conformance/chainsaw/e2e-matrix.json
View file

@ -114,7 +114,7 @@
"^validate$/^clusterpolicy$/^cornercases$/^(apply-on-deletion|apply-on-deletion-deprecated|cel-messages-upon-resource-failure|cel-messages-upon-resource-failure-deprecated|check-message-upon-resource-failure|check-message-upon-resource-failure-deprecated|different-configuration-for-actions|ephemeral-containers|ephemeral-containers-deprecated|external-metrics|external-metrics-deprecated|invalid-jmespath-variable-substitution|invalid-jmespath-variable-substitution-deprecated|psa-run-as-non-root|schema-validation-for-mutateExisting|schema-validation-for-mutateExisting-deprecated|two-rules-with-different-action|validate-pattern-should-fail|validate-pattern-should-fail-deprecated|validate-pattern-should-pass)\\[.*\\]$",
"^validate$/^clusterpolicy$/^cornercases$/^(validate-pattern-should-pass-deprecated|validate-pattern-should-skip|validate-pattern-should-skip-deprecated|variable-substitution-failure-messages|variable-substitution-failure-messages-deprecated)\\[.*\\]$",
"^validate$/^clusterpolicy$/^standard$/^(gvk|gvk-deprecated|subresource|subresource-deprecated)\\[.*\\]$",
"^validate$/^clusterpolicy$/^standard$/^apicalls$/^(lazyload|subjectaccessreview)\\[.*\\]$",
"^validate$/^clusterpolicy$/^standard$/^apicalls$/^(default|lazyload|subjectaccessreview)\\[.*\\]$",
"^validate$/^clusterpolicy$/^standard$/^apicalls-deprecated$/^(lazyload|subjectaccessreview)\\[.*\\]$",
"^validate$/^clusterpolicy$/^standard$/^audit$/^(background-match-clusterRoles|background-match-roles|background-vars-roles|background-vars-serviceAccountName|background-vars-userInfo|configmap-context-lookup)\\[.*\\]$",
"^validate$/^clusterpolicy$/^standard$/^audit-deprecated$/^(background-match-clusterRoles|background-match-roles|background-vars-roles|background-vars-serviceAccountName|background-vars-userInfo|configmap-context-lookup)\\[.*\\]$",

11
test/conformance/chainsaw/validate/clusterpolicy/standard/apicalls/default/README.md Normal file
View file

@ -0,0 +1,11 @@
## Description
This test verifies that that APICall return Default when APICall fail to fetch data from given urlPath
## Expected Behavior
The default value is taken in case of failure in APICall
## Reference Issues
https://github.com/kyverno/kyverno/issues/9723

28
test/conformance/chainsaw/validate/clusterpolicy/standard/apicalls/default/chainsaw-test.yaml Normal file
View file

@ -0,0 +1,28 @@
apiVersion: chainsaw.kyverno.io/v1alpha1
kind: Test
metadata:
creationTimestamp: null
name: default
spec:
steps:
- name: step-01
try:
- apply:
file: ns-bad.yaml
- name: step-02
try:
- apply:
file: policy.yaml
- assert:
file: policy.yaml
- name: step-03
try:
- apply:
file: pod.yaml
- name: step-04
try:
- apply:
expect:
- check:
($error != null): true
file: pod-bad.yaml

4
test/conformance/chainsaw/validate/clusterpolicy/standard/apicalls/default/ns-bad.yaml Normal file
View file

@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: not-default

9
test/conformance/chainsaw/validate/clusterpolicy/standard/apicalls/default/pod-bad.yaml Normal file
View file

@ -0,0 +1,9 @@
apiVersion: v1
kind: Pod
metadata:
name: example
namespace: default
spec:
containers:
- image: nginx:latest
name: example

9
test/conformance/chainsaw/validate/clusterpolicy/standard/apicalls/default/pod.yaml Normal file
View file

@ -0,0 +1,9 @@
apiVersion: v1
kind: Pod
metadata:
name: example
namespace: default
spec:
containers:
- image: nginx:latest
name: example

42
test/conformance/chainsaw/validate/clusterpolicy/standard/apicalls/default/policy.yaml Normal file
View file

@ -0,0 +1,42 @@
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
name: default
spec:
rules:
- name: default-apicall
match:
any:
- resources:
kinds:
- Pod
operations:
- CREATE
context:
- name: testString
apiCall:
urlPath: "/api/v1/namespaces/{{ request.namespace }}/invalid"
jmesPath: metadata.name
default: default
- name: testJSON
apiCall:
urlPath: "/api/v1/namespaces/{{ request.namespace }}/invalid"
default: '{"metadata": {"name": "default"}}'
- name: testInteger
apiCall:
urlPath: "/api/v1/namespaces/{{ request.namespace }}/invalid"
jmesPath: metadata.resourceVersion
default: 1
validate:
deny:
conditions:
all:
- key: "{{ testString }}"
operator: Equals
value: "{{ request.namespace }}"
- key: "{{ testJSON.metadata.name }}"
operator: Equals
value: "{{ request.namespace }}"
- key: "{{ testInteger }}"
operator: GreaterThan
value: 2