mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
6359fd4a1a
* feat: generate VAPs from VPs Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * fix codegen Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> * fix chainsaw tests Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com> --------- Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
72 lines
2.5 KiB
Go
72 lines
2.5 KiB
Go
package v1alpha1
|
|
|
|
import (
|
|
admissionregistrationv1 "k8s.io/api/admissionregistration/v1"
|
|
"k8s.io/apimachinery/pkg/api/meta"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
)
|
|
|
|
type PolicyConditionType string
|
|
|
|
const (
|
|
PolicyConditionTypeWebhookConfigured PolicyConditionType = "WebhookConfigured"
|
|
PolicyConditionTypePolicyCached PolicyConditionType = "PolicyCached"
|
|
PolicyConditionTypeRBACPermissionsGranted PolicyConditionType = "RBACPermissionsGranted"
|
|
)
|
|
|
|
type PolicyStatus struct {
|
|
// The ready of a policy is a high-level summary of where the policy is in its lifecycle.
|
|
// The conditions array, the reason and message fields contain more detail about the policy's status.
|
|
// +optional
|
|
Ready *bool `json:"ready,omitempty"`
|
|
|
|
// +optional
|
|
Conditions []metav1.Condition `json:"conditions,omitempty"`
|
|
|
|
// +optional
|
|
Autogen AutogenStatus `json:"autogen"`
|
|
|
|
// Generated indicates whether a ValidatingAdmissionPolicy/MutatingAdmissionPolicy is generated from the policy or not
|
|
// +optional
|
|
Generated bool `json:"generated"`
|
|
|
|
// Message is a human readable message indicating details about the generation of ValidatingAdmissionPolicy/MutatingAdmissionPolicy
|
|
// It is an empty string when ValidatingAdmissionPolicy/MutatingAdmissionPolicy is successfully generated.
|
|
Message string `json:"message"`
|
|
}
|
|
|
|
// AutogenStatus contains autogen status information.
|
|
type AutogenStatus struct {
|
|
// Rules is a list of Rule instances. It contains auto generated rules added for pod controllers
|
|
Rules []AutogenRule `json:"rules,omitempty"`
|
|
}
|
|
|
|
type AutogenRule struct {
|
|
MatchConstraints *admissionregistrationv1.MatchResources `json:"matchConstraints,omitempty"`
|
|
MatchConditions []admissionregistrationv1.MatchCondition `json:"matchConditions,omitempty"`
|
|
Validations []admissionregistrationv1.Validation `json:"validations,omitempty"`
|
|
AuditAnnotation []admissionregistrationv1.AuditAnnotation `json:"auditAnnotations,omitempty"`
|
|
Variables []admissionregistrationv1.Variable `json:"variables,omitempty"`
|
|
}
|
|
|
|
func (status *PolicyStatus) SetReadyByCondition(c PolicyConditionType, s metav1.ConditionStatus, message string) {
|
|
reason := "Succeeded"
|
|
if s != metav1.ConditionTrue {
|
|
reason = "Failed"
|
|
}
|
|
newCondition := metav1.Condition{
|
|
Type: string(c),
|
|
Reason: reason,
|
|
Status: s,
|
|
Message: message,
|
|
}
|
|
|
|
meta.SetStatusCondition(&status.Conditions, newCondition)
|
|
}
|
|
|
|
func (status *PolicyStatus) IsReady() bool {
|
|
if status.Ready != nil {
|
|
return *status.Ready
|
|
}
|
|
return false
|
|
}
|