mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
56aae9f505
* fix: admission reports stacking up Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * utils Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * warmup Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * cleanup Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix logger Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * nits Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
69 lines
2.6 KiB
Go
69 lines
2.6 KiB
Go
package report
|
|
|
|
import (
|
|
kyvernov1alpha2 "github.com/kyverno/kyverno/api/kyverno/v1alpha2"
|
|
policyreportv1alpha2 "github.com/kyverno/kyverno/api/policyreport/v1alpha2"
|
|
"github.com/kyverno/kyverno/pkg/engine/response"
|
|
controllerutils "github.com/kyverno/kyverno/pkg/utils/controller"
|
|
admissionv1 "k8s.io/api/admission/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
)
|
|
|
|
func NewAdmissionReport(namespace, name, owner string, uid types.UID, gvk metav1.GroupVersionKind) kyvernov1alpha2.ReportInterface {
|
|
ownerRef := metav1.OwnerReference{
|
|
APIVersion: metav1.GroupVersion{Group: gvk.Group, Version: gvk.Version}.String(),
|
|
Kind: gvk.Kind,
|
|
Name: owner,
|
|
UID: uid,
|
|
}
|
|
var report kyvernov1alpha2.ReportInterface
|
|
if namespace == "" {
|
|
report = &kyvernov1alpha2.ClusterAdmissionReport{Spec: kyvernov1alpha2.AdmissionReportSpec{Owner: ownerRef}}
|
|
} else {
|
|
report = &kyvernov1alpha2.AdmissionReport{Spec: kyvernov1alpha2.AdmissionReportSpec{Owner: ownerRef}}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
SetResourceLabels(report, uid)
|
|
SetManagedByKyvernoLabel(report)
|
|
return report
|
|
}
|
|
|
|
func BuildAdmissionReport(resource unstructured.Unstructured, request *admissionv1.AdmissionRequest, gvk metav1.GroupVersionKind, responses ...*response.EngineResponse) kyvernov1alpha2.ReportInterface {
|
|
report := NewAdmissionReport(resource.GetNamespace(), string(request.UID), resource.GetName(), resource.GetUID(), gvk)
|
|
SetResourceVersionLabels(report, &resource)
|
|
SetResponses(report, responses...)
|
|
return report
|
|
}
|
|
|
|
func NewBackgroundScanReport(namespace, name string, gvk schema.GroupVersionKind, owner string, uid types.UID) kyvernov1alpha2.ReportInterface {
|
|
var report kyvernov1alpha2.ReportInterface
|
|
if namespace == "" {
|
|
report = &kyvernov1alpha2.ClusterBackgroundScanReport{}
|
|
} else {
|
|
report = &kyvernov1alpha2.BackgroundScanReport{}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
controllerutils.SetOwner(report, gvk.GroupVersion().String(), gvk.Kind, owner, uid)
|
|
SetResourceLabels(report, uid)
|
|
SetManagedByKyvernoLabel(report)
|
|
return report
|
|
}
|
|
|
|
func NewPolicyReport(namespace, name string, results ...policyreportv1alpha2.PolicyReportResult) kyvernov1alpha2.ReportInterface {
|
|
var report kyvernov1alpha2.ReportInterface
|
|
if namespace == "" {
|
|
report = &policyreportv1alpha2.ClusterPolicyReport{}
|
|
} else {
|
|
report = &policyreportv1alpha2.PolicyReport{}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
SetManagedByKyvernoLabel(report)
|
|
SetResults(report, results...)
|
|
return report
|
|
}
|