kyverno/cmd/cli/kubectl-kyverno/utils/common/validating_admission_resources.go

package common

import (
	"io"

	"github.com/kyverno/kyverno/cmd/cli/kubectl-kyverno/apis/v1alpha1"
	"github.com/kyverno/kyverno/pkg/clients/dclient"
	admissionregistrationv1beta1 "k8s.io/api/admissionregistration/v1beta1"
	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
	"k8s.io/apimachinery/pkg/runtime/schema"
)

type ValidatingAdmissionResources struct {
	policies []admissionregistrationv1beta1.ValidatingAdmissionPolicy
}

func (r *ValidatingAdmissionResources) FetchResourcesFromPolicy(out io.Writer, resourcePaths []string, dClient dclient.Interface, namespace string, policyReport bool) ([]*unstructured.Unstructured, error) {
	var resources []*unstructured.Unstructured
	var err error

	resourceTypesMap := make(map[schema.GroupVersionKind]bool)
	var subresourceMap map[schema.GroupVersionKind]v1alpha1.Subresource

	for _, policy := range r.policies {
		var resourceTypesInRule map[schema.GroupVersionKind]bool
		resourceTypesInRule, subresourceMap = getKindsFromValidatingAdmissionPolicy(policy, dClient)
		if err != nil {
			return resources, err
		}
		for resourceKind := range resourceTypesInRule {
			resourceTypesMap[resourceKind] = true
		}
	}

	resourceTypes := make([]schema.GroupVersionKind, 0, len(resourceTypesMap))
	for kind := range resourceTypesMap {
		resourceTypes = append(resourceTypes, kind)
	}

	resources, err = whenClusterIsTrue(out, resourceTypes, subresourceMap, dClient, namespace, resourcePaths, policyReport)
	return resources, err
}