mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
* fix: background scan events Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * remove old code Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * remove old code Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix config Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * cleanup Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * cleanup Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * events Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
59 lines
2.2 KiB
Go
59 lines
2.2 KiB
Go
package utils
|
|
|
|
import (
|
|
"github.com/go-logr/logr"
|
|
"github.com/kyverno/kyverno/pkg/config"
|
|
"github.com/kyverno/kyverno/pkg/engine/response"
|
|
"github.com/kyverno/kyverno/pkg/event"
|
|
)
|
|
|
|
func GenerateEvents(logger logr.Logger, eventGen event.Interface, config config.Configuration, results ...*response.EngineResponse) {
|
|
for _, result := range results {
|
|
eventInfos := generateFailEvents(logger, result)
|
|
if config.GetGenerateSuccessEvents() {
|
|
eventInfos = append(eventInfos, generateSuccessEvents(logger, result)...)
|
|
}
|
|
eventGen.Add(eventInfos...)
|
|
}
|
|
}
|
|
|
|
func generateSuccessEvents(log logr.Logger, ers ...*response.EngineResponse) (eventInfos []event.Info) {
|
|
for _, er := range ers {
|
|
logger := log.WithValues("policy", er.PolicyResponse.Policy, "kind", er.PolicyResponse.Resource.Kind, "namespace", er.PolicyResponse.Resource.Namespace, "name", er.PolicyResponse.Resource.Name)
|
|
if !er.IsFailed() {
|
|
logger.V(4).Info("generating event on policy for success rules")
|
|
e := event.NewPolicyAppliedEvent(event.PolicyController, er)
|
|
eventInfos = append(eventInfos, e)
|
|
}
|
|
}
|
|
return eventInfos
|
|
}
|
|
|
|
func generateFailEvents(log logr.Logger, ers ...*response.EngineResponse) (eventInfos []event.Info) {
|
|
for _, er := range ers {
|
|
eventInfos = append(eventInfos, generateFailEventsPerEr(log, er)...)
|
|
}
|
|
return eventInfos
|
|
}
|
|
|
|
func generateFailEventsPerEr(log logr.Logger, er *response.EngineResponse) []event.Info {
|
|
var eventInfos []event.Info
|
|
logger := log.WithValues(
|
|
"policy", er.PolicyResponse.Policy.Name,
|
|
"kind", er.PolicyResponse.Resource.Kind,
|
|
"namespace", er.PolicyResponse.Resource.Namespace,
|
|
"name", er.PolicyResponse.Resource.Name,
|
|
)
|
|
for i, rule := range er.PolicyResponse.Rules {
|
|
if rule.Status != response.RuleStatusPass && rule.Status != response.RuleStatusSkip {
|
|
eventResource := event.NewResourceViolationEvent(event.PolicyController, event.PolicyViolation, er, &er.PolicyResponse.Rules[i])
|
|
eventInfos = append(eventInfos, eventResource)
|
|
eventPolicy := event.NewPolicyFailEvent(event.PolicyController, event.PolicyViolation, er, &er.PolicyResponse.Rules[i], false)
|
|
eventInfos = append(eventInfos, eventPolicy)
|
|
}
|
|
}
|
|
if len(eventInfos) > 0 {
|
|
logger.V(4).Info("generating events for policy", "events", eventInfos)
|
|
}
|
|
return eventInfos
|
|
}
|