mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-08 17:06:57 +00:00
54 lines
2 KiB
Go
54 lines
2 KiB
Go
package generation
|
|
|
|
import (
|
|
kyvernov1 "github.com/kyverno/kyverno/api/kyverno/v1"
|
|
kyvernov1beta1 "github.com/kyverno/kyverno/api/kyverno/v1beta1"
|
|
"github.com/kyverno/kyverno/pkg/background/common"
|
|
"github.com/kyverno/kyverno/pkg/engine"
|
|
datautils "github.com/kyverno/kyverno/pkg/utils/data"
|
|
admissionv1 "k8s.io/api/admission/v1"
|
|
)
|
|
|
|
func buildURSpec(requestType kyvernov1beta1.RequestType, policyKey, ruleName string, resource kyvernov1.ResourceSpec, deleteDownstream bool) kyvernov1beta1.UpdateRequestSpec {
|
|
return kyvernov1beta1.UpdateRequestSpec{
|
|
Type: requestType,
|
|
Policy: policyKey,
|
|
Rule: ruleName,
|
|
Resource: resource,
|
|
DeleteDownstream: deleteDownstream,
|
|
}
|
|
}
|
|
|
|
func buildURContext(request admissionv1.AdmissionRequest, policyContext *engine.PolicyContext) kyvernov1beta1.UpdateRequestSpecContext {
|
|
return kyvernov1beta1.UpdateRequestSpecContext{
|
|
UserRequestInfo: policyContext.AdmissionInfo(),
|
|
AdmissionRequestInfo: kyvernov1beta1.AdmissionRequestInfoObject{
|
|
AdmissionRequest: &request,
|
|
Operation: request.Operation,
|
|
},
|
|
}
|
|
}
|
|
|
|
func matchDeleteOperation(rule kyvernov1.Rule) bool {
|
|
ops := rule.MatchResources.GetOperations()
|
|
for _, rscFilters := range append(rule.MatchResources.All, rule.MatchResources.Any...) {
|
|
ops = append(ops, rscFilters.ResourceDescription.GetOperations()...)
|
|
}
|
|
|
|
return datautils.SliceContains(ops, string(admissionv1.Delete))
|
|
}
|
|
|
|
func compareLabels(new, old map[string]string) bool {
|
|
if new == nil {
|
|
return true
|
|
}
|
|
if new[common.GeneratePolicyLabel] != old[common.GeneratePolicyLabel] ||
|
|
new[common.GeneratePolicyNamespaceLabel] != old[common.GeneratePolicyNamespaceLabel] ||
|
|
new[common.GenerateRuleLabel] != old[common.GenerateRuleLabel] ||
|
|
new[common.GenerateTriggerNameLabel] != old[common.GenerateTriggerNameLabel] ||
|
|
new[common.GenerateTriggerNSLabel] != old[common.GenerateTriggerNSLabel] ||
|
|
new[common.GenerateTriggerKindLabel] != old[common.GenerateTriggerKindLabel] {
|
|
return false
|
|
}
|
|
return true
|
|
}
|