package policy import ( "context" "time" "github.com/go-logr/logr" "github.com/kyverno/kyverno/pkg/clients/dclient" "github.com/kyverno/kyverno/pkg/openapi" policyvalidate "github.com/kyverno/kyverno/pkg/policy" admissionutils "github.com/kyverno/kyverno/pkg/utils/admission" "github.com/kyverno/kyverno/pkg/webhooks" admissionv1 "k8s.io/api/admission/v1" ) type handlers struct { client dclient.Interface openApiManager openapi.Manager } func NewHandlers(client dclient.Interface, openApiManager openapi.Manager) webhooks.PolicyHandlers { return &handlers{ client: client, openApiManager: openApiManager, } } func (h *handlers) Validate(ctx context.Context, logger logr.Logger, request *admissionv1.AdmissionRequest, _ time.Time) *admissionv1.AdmissionResponse { policy, oldPolicy, err := admissionutils.GetPolicies(request) if err != nil { logger.Error(err, "failed to unmarshal policies from admission request") return admissionutils.Response(request.UID, err) } warnings, err := policyvalidate.Validate(policy, oldPolicy, h.client, false, h.openApiManager) if err != nil { logger.Error(err, "policy validation errors") } return admissionutils.Response(request.UID, err, warnings...) } func (h *handlers) Mutate(_ context.Context, _ logr.Logger, _ *admissionv1.AdmissionRequest, _ time.Time) *admissionv1.AdmissionResponse { return nil }