mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
6e1def1004
* feat: remove v1alpha2 group Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * codegen Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix tests Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
73 lines
2.7 KiB
Go
73 lines
2.7 KiB
Go
package report
|
|
|
|
import (
|
|
policyreportv1alpha2 "github.com/kyverno/kyverno/api/policyreport/v1alpha2"
|
|
reportsv1 "github.com/kyverno/kyverno/api/reports/v1"
|
|
engineapi "github.com/kyverno/kyverno/pkg/engine/api"
|
|
controllerutils "github.com/kyverno/kyverno/pkg/utils/controller"
|
|
admissionv1 "k8s.io/api/admission/v1"
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
)
|
|
|
|
func NewAdmissionReport(namespace, name string, gvr schema.GroupVersionResource, gvk schema.GroupVersionKind, resource unstructured.Unstructured) reportsv1.ReportInterface {
|
|
var report reportsv1.ReportInterface
|
|
if namespace == "" {
|
|
report = &reportsv1.ClusterEphemeralReport{Spec: reportsv1.EphemeralReportSpec{}}
|
|
} else {
|
|
report = &reportsv1.EphemeralReport{Spec: reportsv1.EphemeralReportSpec{}}
|
|
}
|
|
report.SetGenerateName(name + "-")
|
|
report.SetNamespace(namespace)
|
|
SetResourceUid(report, resource.GetUID())
|
|
SetResourceGVR(report, gvr)
|
|
SetResourceGVK(report, gvk)
|
|
SetResourceNamespaceAndName(report, resource.GetNamespace(), resource.GetName())
|
|
SetManagedByKyvernoLabel(report)
|
|
SetSource(report, "admission")
|
|
return report
|
|
}
|
|
|
|
func BuildAdmissionReport(resource unstructured.Unstructured, request admissionv1.AdmissionRequest, responses ...engineapi.EngineResponse) reportsv1.ReportInterface {
|
|
report := NewAdmissionReport(resource.GetNamespace(), string(request.UID), schema.GroupVersionResource(request.Resource), schema.GroupVersionKind(request.Kind), resource)
|
|
SetResponses(report, responses...)
|
|
return report
|
|
}
|
|
|
|
func NewBackgroundScanReport(namespace, name string, gvk schema.GroupVersionKind, owner string, uid types.UID) reportsv1.ReportInterface {
|
|
var report reportsv1.ReportInterface
|
|
if namespace == "" {
|
|
report = &reportsv1.ClusterEphemeralReport{}
|
|
} else {
|
|
report = &reportsv1.EphemeralReport{}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
controllerutils.SetOwner(report, gvk.GroupVersion().String(), gvk.Kind, owner, uid)
|
|
SetResourceUid(report, uid)
|
|
SetResourceGVK(report, gvk)
|
|
SetResourceNamespaceAndName(report, namespace, owner)
|
|
SetManagedByKyvernoLabel(report)
|
|
SetSource(report, "background-scan")
|
|
return report
|
|
}
|
|
|
|
func NewPolicyReport(namespace, name string, scope *corev1.ObjectReference, results ...policyreportv1alpha2.PolicyReportResult) reportsv1.ReportInterface {
|
|
var report reportsv1.ReportInterface
|
|
if namespace == "" {
|
|
report = &policyreportv1alpha2.ClusterPolicyReport{
|
|
Scope: scope,
|
|
}
|
|
} else {
|
|
report = &policyreportv1alpha2.PolicyReport{
|
|
Scope: scope,
|
|
}
|
|
}
|
|
report.SetName(name)
|
|
report.SetNamespace(namespace)
|
|
SetManagedByKyvernoLabel(report)
|
|
SetResults(report, results...)
|
|
return report
|
|
}
|