mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
* feat: add policy exception validation webhook Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * handler Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * validation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: Jim Bugwadia <jim@nirmata.com>
29 lines
866 B
Go
29 lines
866 B
Go
package admission
|
|
|
|
import (
|
|
"encoding/json"
|
|
|
|
kyvernov2alpha1 "github.com/kyverno/kyverno/api/kyverno/v2alpha1"
|
|
admissionv1 "k8s.io/api/admission/v1"
|
|
)
|
|
|
|
func UnmarshalPolicyException(raw []byte) (*kyvernov2alpha1.PolicyException, error) {
|
|
var exception *kyvernov2alpha1.PolicyException
|
|
if err := json.Unmarshal(raw, &exception); err != nil {
|
|
return nil, err
|
|
}
|
|
return exception, nil
|
|
}
|
|
|
|
func GetPolicyExceptions(request *admissionv1.AdmissionRequest) (*kyvernov2alpha1.PolicyException, *kyvernov2alpha1.PolicyException, error) {
|
|
var empty *kyvernov2alpha1.PolicyException
|
|
exception, err := UnmarshalPolicyException(request.Object.Raw)
|
|
if err != nil {
|
|
return exception, empty, err
|
|
}
|
|
if request.Operation == admissionv1.Update {
|
|
old, err := UnmarshalPolicyException(request.OldObject.Raw)
|
|
return exception, old, err
|
|
}
|
|
return exception, empty, nil
|
|
}
|