mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-07 00:17:13 +00:00
* updates for foreach and mutate Signed-off-by: Jim Bugwadia <jim@nirmata.com> * allow tests to pass on Windows Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix linter check Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add elementIndex variable Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fmt Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix jsonResult usage Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add mutate validation and fix error in validate.foreach Signed-off-by: Jim Bugwadia <jim@nirmata.com> * format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update message Signed-off-by: Jim Bugwadia <jim@nirmata.com> * do not skip validation for all array entries when one is skipped Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add foreach tests Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix fmt Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix format errors Signed-off-by: Jim Bugwadia <jim@nirmata.com> * remove unused declarations Signed-off-by: Jim Bugwadia <jim@nirmata.com> * revert namespaceWithLabelYaml Signed-off-by: Jim Bugwadia <jim@nirmata.com> * fix mutate of element list Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update CRDs Signed-off-by: Jim Bugwadia <jim@nirmata.com> * Update api/kyverno/v1/policy_types.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/forceMutate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/forceMutate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/forceMutate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/mutation.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/mutation.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/mutation.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/validate/validate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update pkg/engine/validate/validate.go Co-authored-by: Steven E. Harris <seh@panix.com> * Update test/cli/test/custom-functions/policy.yaml Co-authored-by: Steven E. Harris <seh@panix.com> * Update test/cli/test/foreach/policies.yaml Co-authored-by: Steven E. Harris <seh@panix.com> * accept review comments and format Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add comments to strategicMergePatch buffer Signed-off-by: Jim Bugwadia <jim@nirmata.com> * load context and evaluate preconditions foreach element Signed-off-by: Jim Bugwadia <jim@nirmata.com> * add test for foreach mutate context and precondition * precondition testcase * address review comments Signed-off-by: Jim Bugwadia <jim@nirmata.com> * update message Signed-off-by: Jim Bugwadia <jim@nirmata.com> * format Signed-off-by: Jim Bugwadia <jim@nirmata.com> Co-authored-by: Steven E. Harris <seh@panix.com> Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
97 lines
2.4 KiB
Go
97 lines
2.4 KiB
Go
package response
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"strings"
|
|
)
|
|
|
|
// RuleStatus represents the status of rule execution
|
|
type RuleStatus int
|
|
|
|
// RuleStatusPass is used to report the result of processing a rule.
|
|
const (
|
|
// RuleStatusPass indicates that the resources meets the policy rule requirements
|
|
RuleStatusPass RuleStatus = iota
|
|
// RuleStatusFail indicates that the resource does not meet the policy rule requirements
|
|
RuleStatusFail
|
|
// RuleStatusWarn indicates that the resource does not meet the policy rule requirements, but the policy is not scored
|
|
RuleStatusWarn
|
|
// RuleStatusError indicates that the policy rule could not be evaluated due to a processing error, for
|
|
// example when a variable cannot be resolved in the policy rule definition. Note that variables
|
|
// that cannot be resolved in preconditions are replaced with empty values to allow existence
|
|
// checks.
|
|
RuleStatusError
|
|
// RuleStatusSkip indicates that the policy rule was not selected based on user inputs or applicability, for example
|
|
// when preconditions are not met, or when conditional or global anchors are not satistied.
|
|
RuleStatusSkip
|
|
)
|
|
|
|
func (s *RuleStatus) String() string {
|
|
return toString[*s]
|
|
}
|
|
|
|
var toString = map[RuleStatus]string{
|
|
RuleStatusPass: "pass",
|
|
RuleStatusFail: "fail",
|
|
RuleStatusWarn: "warning",
|
|
RuleStatusError: "error",
|
|
RuleStatusSkip: "skip",
|
|
}
|
|
|
|
var toID = map[string]RuleStatus{
|
|
"pass": RuleStatusPass,
|
|
"fail": RuleStatusFail,
|
|
"warning": RuleStatusWarn,
|
|
"error": RuleStatusError,
|
|
"skip": RuleStatusSkip,
|
|
}
|
|
|
|
// MarshalJSON marshals the enum as a quoted json string
|
|
func (s *RuleStatus) MarshalJSON() ([]byte, error) {
|
|
var b strings.Builder
|
|
fmt.Fprintf(&b, "\"%s\"", toString[*s])
|
|
return []byte(b.String()), nil
|
|
}
|
|
|
|
// UnmarshalJSON unmarshals a quoted json string to the enum value
|
|
func (s *RuleStatus) UnmarshalJSON(b []byte) error {
|
|
var strVal string
|
|
err := json.Unmarshal(b, &strVal)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
statusVal, err := getRuleStatus(strVal)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
*s = *statusVal
|
|
return nil
|
|
}
|
|
|
|
func getRuleStatus(s string) (*RuleStatus, error) {
|
|
for k, v := range toID {
|
|
if s == k {
|
|
return &v, nil
|
|
}
|
|
}
|
|
|
|
return nil, fmt.Errorf("invalid status: %s", s)
|
|
}
|
|
|
|
func (s *RuleStatus) UnmarshalYAML(unmarshal func(interface{}) error) error {
|
|
var str string
|
|
if err := unmarshal(&str); err != nil {
|
|
return err
|
|
}
|
|
|
|
statusVal, err := getRuleStatus(str)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
*s = *statusVal
|
|
return nil
|
|
}
|