mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-26 01:24:26 +00:00
c61d0735e3
* feat(vp): implement gctx in context library Signed-off-by: Khaled Emara <khaled.emara@nirmata.com> * test(cel): add chainsaw test for validating policies gctx Signed-off-by: Khaled Emara <khaled.emara@nirmata.com> --------- Signed-off-by: Khaled Emara <khaled.emara@nirmata.com> Signed-off-by: ShutingZhao <shuting@nirmata.com> Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com> Co-authored-by: shuting <shuting@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
103 lines
3.8 KiB
Go
103 lines
3.8 KiB
Go
package context
|
|
|
|
import (
|
|
"github.com/google/cel-go/common/types"
|
|
"github.com/google/cel-go/common/types/ref"
|
|
"github.com/kyverno/kyverno/pkg/cel/utils"
|
|
)
|
|
|
|
type impl struct {
|
|
types.Adapter
|
|
}
|
|
|
|
func (c *impl) get_configmap_string_string(args ...ref.Val) ref.Val {
|
|
if self, err := utils.ConvertToNative[Context](args[0]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if namespace, err := utils.ConvertToNative[string](args[1]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if name, err := utils.ConvertToNative[string](args[2]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else {
|
|
cm, err := self.GetConfigMap(namespace, name)
|
|
if err != nil {
|
|
// Errors are not expected here since Parse is a more lenient parser than ParseRequestURI.
|
|
return types.NewErr("failed to get configmap: %v", err)
|
|
}
|
|
return c.NativeToValue(cm.UnstructuredContent())
|
|
}
|
|
}
|
|
|
|
func (c *impl) get_globalreference_string(args ...ref.Val) ref.Val {
|
|
if len(args) != 3 {
|
|
return types.NewErr("expected 3 arguments, got %d", len(args))
|
|
}
|
|
if self, err := utils.ConvertToNative[Context](args[0]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if name, err := utils.ConvertToNative[string](args[1]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if projection, err := utils.ConvertToNative[string](args[2]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else {
|
|
globalRef, err := self.GetGlobalReference(name, projection)
|
|
if err != nil {
|
|
// Errors are not expected here since Parse is a more lenient parser than ParseRequestURI.
|
|
return types.NewErr("failed to get global reference: %v", err)
|
|
}
|
|
return c.NativeToValue(globalRef)
|
|
}
|
|
}
|
|
|
|
func (c *impl) get_imagedata_string(ctx ref.Val, image ref.Val) ref.Val {
|
|
if self, err := utils.ConvertToNative[Context](ctx); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if image, err := utils.ConvertToNative[string](image); err != nil {
|
|
return types.WrapErr(err)
|
|
} else {
|
|
globalRef, err := self.GetImageData(image)
|
|
if err != nil {
|
|
// Errors are not expected here since Parse is a more lenient parser than ParseRequestURI.
|
|
return types.NewErr("failed to get image data: %v", err)
|
|
}
|
|
return c.NativeToValue(globalRef)
|
|
}
|
|
}
|
|
|
|
func (c *impl) list_resource_string(args ...ref.Val) ref.Val {
|
|
if self, err := utils.ConvertToNative[Context](args[0]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if apiVersion, err := utils.ConvertToNative[string](args[1]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if resource, err := utils.ConvertToNative[string](args[2]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if namespace, err := utils.ConvertToNative[string](args[3]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else {
|
|
list, err := self.ListResource(apiVersion, resource, namespace)
|
|
if err != nil {
|
|
// Errors are not expected here since Parse is a more lenient parser than ParseRequestURI.
|
|
return types.NewErr("failed to list resource: %v", err)
|
|
}
|
|
return c.NativeToValue(list.UnstructuredContent())
|
|
}
|
|
}
|
|
|
|
func (c *impl) get_resource_string(args ...ref.Val) ref.Val {
|
|
if self, err := utils.ConvertToNative[Context](args[0]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if apiVersion, err := utils.ConvertToNative[string](args[1]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if resource, err := utils.ConvertToNative[string](args[2]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if namespace, err := utils.ConvertToNative[string](args[3]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else if name, err := utils.ConvertToNative[string](args[4]); err != nil {
|
|
return types.WrapErr(err)
|
|
} else {
|
|
res, err := self.GetResource(apiVersion, resource, namespace, name)
|
|
if err != nil {
|
|
// Errors are not expected here since Parse is a more lenient parser than ParseRequestURI.
|
|
return types.NewErr("failed to get resource: %v", err)
|
|
}
|
|
return c.NativeToValue(res.UnstructuredContent())
|
|
}
|
|
}
|