mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

fmt

Browse source 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
This commit is contained in:
Jim Bugwadia 2021-10-02 14:24:23 -07:00
parent 2bd5bca721
commit f015c16f08
2 changed files with 6 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
pkg/engine/imageVerify.go
View file

@ -174,7 +174,7 @@ func (iv *imageVerifier) attestImage(repository, key string, imageInfo *context.
attestations, err := cosign.FetchAttestations(image, []byte(key), repository)
if err != nil {
iv.logger.Info("failed to fetch attestations", "image", image, "error", err, "duration", time.Since(start).Seconds())
return ruleError(iv.rule, fmt.Sprintf("failed to fetch attestations for %s", image), err)
return ruleError(iv.rule, fmt.Sprintf("failed to fetch attestations for %s", image), err)
}
iv.logger.Info("received attestation", "attestations", attestations)
@ -182,22 +182,21 @@ func (iv *imageVerifier) attestImage(repository, key string, imageInfo *context.
iv.policyContext.JSONContext.Checkpoint()
defer iv.policyContext.JSONContext.Restore()
if err := iv.policyContext.JSONContext.AddJSONObject(attestations); err != nil {
return ruleError(iv.rule, fmt.Sprintf("failed to add attestations to the context %v", attestations), err)
return ruleError(iv.rule, fmt.Sprintf("failed to add attestations to the context %v", attestations), err)
}
passed, err := iv.checkConditions(attestationChecks)
if err != nil {
return ruleError(iv.rule, "failed to check attestation", err)
return ruleError(iv.rule, "failed to check attestation", err)
}
if !passed {
return ruleResponse(iv.rule, "attestation checks failed", response.RuleStatusFail)
return ruleResponse(iv.rule, "attestation checks failed", response.RuleStatusFail)
}
return ruleResponse(iv.rule, "attestation checks passed", response.RuleStatusPass)
return ruleResponse(iv.rule, "attestation checks passed", response.RuleStatusPass)
}
func (iv *imageVerifier) checkConditions(attestationChecks []*v1.AnyAllConditions) (bool, error) {
conditions, err := variables.SubstituteAllInConditions(iv.logger, iv.policyContext.JSONContext, attestationChecks)
if err != nil {
@ -207,4 +206,3 @@ func (iv *imageVerifier) checkConditions(attestationChecks []*v1.AnyAllCondition
pass := variables.EvaluateConditions(iv.logger, iv.policyContext.JSONContext, conditions)
return pass, nil
}

2
pkg/engine/variables/vars.go
View file

@ -126,7 +126,7 @@ func SubstituteAllInConditions(log logr.Logger, ctx context.EvalInterface, condi
return JSONObjectToConditions(i)
}
func ConditionsToJSONObject(conditions []*kyverno.AnyAllConditions) ([]map[string]interface{}, error){
func ConditionsToJSONObject(conditions []*kyverno.AnyAllConditions) ([]map[string]interface{}, error) {
bytes, err := json.Marshal(conditions)
if err != nil {
return nil, err