kyverno/pkg/controllers/report/aggregate/resource/utils.go

package resource

import (
	"context"
	"errors"

	kyvernov1alpha2 "github.com/kyverno/kyverno/api/kyverno/v1alpha2"
	policyreportv1alpha2 "github.com/kyverno/kyverno/api/policyreport/v1alpha2"
	"github.com/kyverno/kyverno/pkg/client/clientset/versioned"
	controllerutils "github.com/kyverno/kyverno/pkg/utils/controller"
	reportutils "github.com/kyverno/kyverno/pkg/utils/report"
	"k8s.io/apimachinery/pkg/types"
	"k8s.io/apimachinery/pkg/util/sets"
)

func mergeReports(policyMap map[string]policyMapEntry, vapMap sets.Set[string], accumulator map[string]policyreportv1alpha2.PolicyReportResult, uid types.UID, reports ...kyvernov1alpha2.ReportInterface) {
	for _, report := range reports {
		if report != nil {
			for _, result := range report.GetResults() {
				if result.Source == "ValidatingAdmissionPolicy" {
					if vapMap != nil && vapMap.Has(result.Policy) {
						key := result.Source + "/" + result.Policy + "/" + string(uid)
						if rule, exists := accumulator[key]; !exists {
							accumulator[key] = result
						} else if rule.Timestamp.Seconds < result.Timestamp.Seconds {
							accumulator[key] = result
						}
					}
				} else {
					currentPolicy := policyMap[result.Policy]
					if currentPolicy.rules != nil && currentPolicy.rules.Has(result.Rule) {
						key := result.Source + "/" + result.Policy + "/" + result.Rule + "/" + string(uid)
						if rule, exists := accumulator[key]; !exists {
							accumulator[key] = result
						} else if rule.Timestamp.Seconds < result.Timestamp.Seconds {
							accumulator[key] = result
						}
					}
				}
			}
		}
	}
}

func deleteReport(ctx context.Context, report kyvernov1alpha2.ReportInterface, client versioned.Interface) error {
	if !controllerutils.IsManagedByKyverno(report) {
		return errors.New("can't delete report because it is not managed by kyverno")
	}
	return reportutils.DeleteReport(ctx, report, client)
}

func updateReport(ctx context.Context, report kyvernov1alpha2.ReportInterface, client versioned.Interface) (kyvernov1alpha2.ReportInterface, error) {
	if !controllerutils.IsManagedByKyverno(report) {
		return nil, errors.New("can't update report because it is not managed by kyverno")
	}
	return reportutils.UpdateReport(ctx, report, client)
}