mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
2444b7c670
* refactor: add per resource reports aggregation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * added controller implementation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * clean Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix kuttl tests Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix kuttl tests Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * vaps Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
68 lines
2.5 KiB
Go
68 lines
2.5 KiB
Go
package report
|
|
|
|
import (
|
|
kyvernov1alpha2 "github.com/kyverno/kyverno/api/kyverno/v1alpha2"
|
|
policyreportv1alpha2 "github.com/kyverno/kyverno/api/policyreport/v1alpha2"
|
|
engineapi "github.com/kyverno/kyverno/pkg/engine/api"
|
|
controllerutils "github.com/kyverno/kyverno/pkg/utils/controller"
|
|
admissionv1 "k8s.io/api/admission/v1"
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
)
|
|
|
|
func NewAdmissionReport(namespace, name string, gvr schema.GroupVersionResource, resource unstructured.Unstructured) kyvernov1alpha2.ReportInterface {
|
|
var report kyvernov1alpha2.ReportInterface
|
|
if namespace == "" {
|
|
report = &kyvernov1alpha2.ClusterAdmissionReport{Spec: kyvernov1alpha2.AdmissionReportSpec{}}
|
|
} else {
|
|
report = &kyvernov1alpha2.AdmissionReport{Spec: kyvernov1alpha2.AdmissionReportSpec{}}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
SetResourceUid(report, resource.GetUID())
|
|
SetResourceGVR(report, gvr)
|
|
SetResourceNamespaceAndName(report, resource.GetNamespace(), resource.GetName())
|
|
SetManagedByKyvernoLabel(report)
|
|
return report
|
|
}
|
|
|
|
func BuildAdmissionReport(resource unstructured.Unstructured, request admissionv1.AdmissionRequest, responses ...engineapi.EngineResponse) kyvernov1alpha2.ReportInterface {
|
|
report := NewAdmissionReport(resource.GetNamespace(), string(request.UID), schema.GroupVersionResource(request.Resource), resource)
|
|
SetResponses(report, responses...)
|
|
return report
|
|
}
|
|
|
|
func NewBackgroundScanReport(namespace, name string, gvk schema.GroupVersionKind, owner string, uid types.UID) kyvernov1alpha2.ReportInterface {
|
|
var report kyvernov1alpha2.ReportInterface
|
|
if namespace == "" {
|
|
report = &kyvernov1alpha2.ClusterBackgroundScanReport{}
|
|
} else {
|
|
report = &kyvernov1alpha2.BackgroundScanReport{}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
controllerutils.SetOwner(report, gvk.GroupVersion().String(), gvk.Kind, owner, uid)
|
|
SetResourceUid(report, uid)
|
|
SetManagedByKyvernoLabel(report)
|
|
return report
|
|
}
|
|
|
|
func NewPolicyReport(namespace, name string, scope *corev1.ObjectReference, results ...policyreportv1alpha2.PolicyReportResult) kyvernov1alpha2.ReportInterface {
|
|
var report kyvernov1alpha2.ReportInterface
|
|
if namespace == "" {
|
|
report = &policyreportv1alpha2.ClusterPolicyReport{
|
|
Scope: scope,
|
|
}
|
|
} else {
|
|
report = &policyreportv1alpha2.PolicyReport{
|
|
Scope: scope,
|
|
}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
SetManagedByKyvernoLabel(report)
|
|
SetResults(report, results...)
|
|
return report
|
|
}
|