mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-10 18:06:55 +00:00
* updates for foreach and mutate Signed-off-by: Jim Bugwadia <jim@nirmata.com> * allow tests to pass on Windows Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix linter check Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add elementIndex variable Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fmt Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix jsonResult usage Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add mutate validation and fix error in validate.foreach Signed-off-by: Jim Bugwadia <jim@nirmata.com> * format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update message Signed-off-by: Jim Bugwadia <jim@nirmata.com> * do not skip validation for all array entries when one is skipped Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add foreach tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix fmt Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix format errors Signed-off-by: Jim Bugwadia <jim@nirmata.com> * remove unused declarations Signed-off-by: Jim Bugwadia <jim@nirmata.com> * revert namespaceWithLabelYaml Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix mutate of element list Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update CRDs Signed-off-by: Jim Bugwadia <jim@nirmata.com> * Update api/kyverno/v1/policy_types.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/forceMutate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/forceMutate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/forceMutate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/mutation.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/mutation.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/mutation.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/validate/validate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/validate/validate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update test/cli/test/custom-functions/policy.yaml Co-authored-by: Steven E. Harris <seh@panix.com> * Update test/cli/test/foreach/policies.yaml Co-authored-by: Steven E. Harris <seh@panix.com> * accept review comments and format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add comments to strategicMergePatch buffer Signed-off-by: Jim Bugwadia <jim@nirmata.com> * load context and evaluate preconditions foreach element Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add test for foreach mutate context and precondition * precondition testcase * address review comments Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update message Signed-off-by: Jim Bugwadia <jim@nirmata.com> * format Signed-off-by: Jim Bugwadia <jim@nirmata.com> Co-authored-by: Steven E. Harris <seh@panix.com> Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
70 lines
2.2 KiB
Go
70 lines
2.2 KiB
Go
package patch
|
|
|
|
import (
|
|
"github.com/go-logr/logr"
|
|
"github.com/kyverno/kyverno/pkg/engine/context"
|
|
"github.com/kyverno/kyverno/pkg/engine/response"
|
|
"github.com/kyverno/kyverno/pkg/engine/utils"
|
|
"k8s.io/apiextensions-apiserver/pkg/apis/apiextensions"
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
)
|
|
|
|
// Patcher patches the resource
|
|
type Patcher interface {
|
|
Patch() (resp response.RuleResponse, newPatchedResource unstructured.Unstructured)
|
|
}
|
|
|
|
// patchStrategicMergeHandler
|
|
type patchStrategicMergeHandler struct {
|
|
ruleName string
|
|
patch apiextensions.JSON
|
|
patchedResource unstructured.Unstructured
|
|
evalCtx context.EvalInterface
|
|
logger logr.Logger
|
|
}
|
|
|
|
func NewPatchStrategicMerge(ruleName string, patch apiextensions.JSON, patchedResource unstructured.Unstructured, context context.EvalInterface, logger logr.Logger) Patcher {
|
|
return patchStrategicMergeHandler{
|
|
ruleName: ruleName,
|
|
patch: patch,
|
|
patchedResource: patchedResource,
|
|
evalCtx: context,
|
|
logger: logger,
|
|
}
|
|
}
|
|
|
|
func (h patchStrategicMergeHandler) Patch() (response.RuleResponse, unstructured.Unstructured) {
|
|
return ProcessStrategicMergePatch(h.ruleName, h.patch, h.patchedResource, h.logger)
|
|
}
|
|
|
|
// patchesJSON6902Handler
|
|
type patchesJSON6902Handler struct {
|
|
ruleName string
|
|
patches string
|
|
patchedResource unstructured.Unstructured
|
|
logger logr.Logger
|
|
}
|
|
|
|
func NewPatchesJSON6902(ruleName string, patches string, patchedResource unstructured.Unstructured, logger logr.Logger) Patcher {
|
|
return patchesJSON6902Handler{
|
|
ruleName: ruleName,
|
|
patches: patches,
|
|
patchedResource: patchedResource,
|
|
logger: logger,
|
|
}
|
|
}
|
|
|
|
func (h patchesJSON6902Handler) Patch() (resp response.RuleResponse, patchedResource unstructured.Unstructured) {
|
|
resp.Name = h.ruleName
|
|
resp.Type = utils.Mutation.String()
|
|
|
|
patchesJSON6902, err := ConvertPatchesToJSON(h.patches)
|
|
if err != nil {
|
|
resp.Status = response.RuleStatusFail
|
|
h.logger.Error(err, "error in type conversion")
|
|
resp.Message = err.Error()
|
|
return resp, unstructured.Unstructured{}
|
|
}
|
|
|
|
return ProcessPatchJSON6902(h.ruleName, patchesJSON6902, h.patchedResource, h.logger)
|
|
}
|