kyverno/pkg/utils/conditions/condition.go

package conditions

import (
	"fmt"

	"github.com/go-logr/logr"
	kyvernov1 "github.com/kyverno/kyverno/api/kyverno/v1"
	kyvernov2 "github.com/kyverno/kyverno/api/kyverno/v2"
	enginecontext "github.com/kyverno/kyverno/pkg/engine/context"
	"github.com/kyverno/kyverno/pkg/engine/variables"
	"github.com/kyverno/kyverno/pkg/engine/variables/operator"
)

func CheckAnyAllConditions(logger logr.Logger, ctx enginecontext.Interface, condition kyvernov2.AnyAllConditions) (bool, error) {
	for _, condition := range condition.AllConditions {
		if passed, err := checkCondition(logger, ctx, condition); err != nil {
			return false, err
		} else if !passed {
			return false, nil
		}
	}
	for _, condition := range condition.AnyConditions {
		if passed, err := checkCondition(logger, ctx, condition); err != nil {
			return false, err
		} else if passed {
			return true, nil
		}
	}
	return len(condition.AnyConditions) == 0, nil
}

func checkCondition(logger logr.Logger, ctx enginecontext.Interface, condition kyvernov2.Condition) (bool, error) {
	key, err := variables.SubstituteAllInPreconditions(logger, ctx, condition.GetKey())
	if err != nil {
		return false, fmt.Errorf("failed to substitute variables in condition key: %w", err)
	}
	value, err := variables.SubstituteAllInPreconditions(logger, ctx, condition.GetValue())
	if err != nil {
		return false, fmt.Errorf("failed to substitute variables in condition value: %w", err)
	}
	handler := operator.CreateOperatorHandler(logger, ctx, kyvernov1.ConditionOperator(condition.Operator))
	if handler == nil {
		return false, fmt.Errorf("failed to create handler for condition operator: %w", err)
	}
	return handler.Evaluate(key, value), nil
}