mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-09 17:37:12 +00:00
3cf9141f4d
* initial commit * background policy validation * correct message * skip non-background policy process for add/update * add Generate Request CR * generate Request Generator Initial * test generate request CR generation * initial commit gr generator * generate controller initial framework * add crd for generate request * gr cleanup controller initial commit * cleanup controller initial * generate mid-commit * generate rule processing * create PV on generate error * embed resource type * testing phase 1- generate resources with variable substitution * fix tests * comment broken test #586 * add printer column for state * return if existing resource for clone * set resync time to 2 mins & remove resource version check in update handler for gr * generate events for reporting * fix logs * initial commit * fix trailing quote in patch * remove comments * initial condition (equal & notequal) * initial support for conditions * initial support fo conditions in generate * support precondition checks * cleanup * re-evaluate GR on namespace update using dynamic informers * add status for generated resources * display loaded variable SA * support delete cleanup of generate request main resources * fix log * remove namespace from SA username * support multiple variables per statement for scalar values * fix fail variables * add check for userInfo * validation checks for conditions * update policy * refactor logs * code review * add openapispec for clusterpolicy preconditions * Update documentation * CR fixes * documentation * CR fixes * update variable * fix logs * update policy * pre-defined variables (serviceAccountName & serviceAccountNamespace) * update test
66 lines
1.9 KiB
Go
66 lines
1.9 KiB
Go
package cleanup
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/golang/glog"
|
|
kyverno "github.com/nirmata/kyverno/pkg/api/kyverno/v1"
|
|
dclient "github.com/nirmata/kyverno/pkg/dclient"
|
|
"k8s.io/apimachinery/pkg/api/errors"
|
|
)
|
|
|
|
const timoutMins = 2
|
|
const timeout = time.Minute * timoutMins // 2 minutes
|
|
|
|
func (c *Controller) processGR(gr kyverno.GenerateRequest) error {
|
|
// 1-Corresponding policy has been deleted
|
|
_, err := c.pLister.Get(gr.Spec.Policy)
|
|
if errors.IsNotFound(err) {
|
|
glog.V(4).Infof("delete GR %s", gr.Name)
|
|
return c.control.Delete(gr.Name)
|
|
}
|
|
|
|
// 2- Check for elapsed time since update
|
|
if gr.Status.State == kyverno.Completed {
|
|
glog.V(4).Infof("checking if owner exists for gr %s", gr.Name)
|
|
if !ownerResourceExists(c.client, gr) {
|
|
if err := deleteGeneratedResources(c.client, gr); err != nil {
|
|
return err
|
|
}
|
|
glog.V(4).Infof("delete GR %s", gr.Name)
|
|
return c.control.Delete(gr.Name)
|
|
}
|
|
return nil
|
|
}
|
|
createTime := gr.GetCreationTimestamp()
|
|
if time.Since(createTime.UTC()) > timeout {
|
|
// the GR was in state ["",Failed] for more than timeout
|
|
glog.V(4).Infof("GR %s was not processed succesfully in %d minutes", gr.Name, timoutMins)
|
|
glog.V(4).Infof("delete GR %s", gr.Name)
|
|
return c.control.Delete(gr.Name)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func ownerResourceExists(client *dclient.Client, gr kyverno.GenerateRequest) bool {
|
|
_, err := client.GetResource(gr.Spec.Resource.Kind, gr.Spec.Resource.Namespace, gr.Spec.Resource.Name)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
return true
|
|
}
|
|
|
|
func deleteGeneratedResources(client *dclient.Client, gr kyverno.GenerateRequest) error {
|
|
for _, genResource := range gr.Status.GeneratedResources {
|
|
err := client.DeleteResource(genResource.Kind, genResource.Namespace, genResource.Name, false)
|
|
if errors.IsNotFound(err) {
|
|
glog.V(4).Infof("resource %s/%s/%s not found, will no delete", genResource.Kind, genResource.Namespace, genResource.Name)
|
|
continue
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
}
|
|
return nil
|
|
}
|