engine

Jan 11, 2020

Changes in this version

+ const PodControllers

+ const PodControllersAnnotation

+ const PodTemplateAnnotation

type PolicyContext

+ Context context.EvalInterface

Dec 5, 2019

Changes in this version

+ const SaPrefix

+ type PolicyContext struct

+ AdmissionInfo RequestInfo

+ Client *client.Client

+ NewResource unstructured.Unstructured

+ OldResource unstructured.Unstructured

+ Policy kyverno.ClusterPolicy

+ type RequestInfo struct

+ AdmissionUserInfo authenticationv1.UserInfo

+ ClusterRoles []string

+ Roles []string

Oct 28, 2019

Changes in this version

+ type ConditionAnchorHandler struct

+ func (ch ConditionAnchorHandler) Handle(resourceMap map[string]interface{}, originPattern interface{}) (string, error)

+ type DefaultHandler struct

+ func (dh DefaultHandler) Handle(resourceMap map[string]interface{}, originPattern interface{}) (string, error)

type EngineResponse

+ PolicyResponse PolicyResponse

+ func (er EngineResponse) GetFailedRules() []string

+ func (er EngineResponse) GetPatches() [][]byte

+ func (er EngineResponse) GetSuccessRules() []string

+ func (er EngineResponse) IsSuccesful() bool

+ type EqualityHandler struct

+ func (eh EqualityHandler) Handle(resourceMap map[string]interface{}, originPattern interface{}) (string, error)

+ type ExistanceHandler struct

+ func (eh ExistanceHandler) Handle(resourceMap map[string]interface{}, originPattern interface{}) (string, error)

+ type NegationHandler struct

+ func (nh NegationHandler) Handle(resourceMap map[string]interface{}, originPattern interface{}) (string, error)

+ type ValidationHandler interface

+ Handle func(resourceMap map[string]interface{}, originPattenr interface{}) (string, error)

+ func CreateElementHandler(element string, pattern interface{}, path string) ValidationHandler

+ func NewConditionAnchorHandler(anchor string, pattern interface{}, path string) ValidationHandler

+ func NewDefaultHandler(element string, pattern interface{}, path string) ValidationHandler

+ func NewEqualityHandler(anchor string, pattern interface{}, path string) ValidationHandler

+ func NewExistanceHandler(anchor string, pattern interface{}, path string) ValidationHandler

+ func NewNegationHandler(anchor string, pattern interface{}, path string) ValidationHandler

Sep 4, 2019

Changes in this version

+ type Condition int

+ const NotEvaluate

+ const Process

+ const Skip

Aug 30, 2019

Changes in this version

+ func ApplyPatchNew(resource, patch []byte) ([]byte, error)

+ type EngineResponseNew struct

+ PatchedResource unstructured.Unstructured

+ PolicyResponse PolicyResponse

+ func MutateNew(policy kyverno.Policy, resource unstructured.Unstructured) (response EngineResponseNew)

+ func ValidateNew(policy kyverno.Policy, resource unstructured.Unstructured) (response EngineResponseNew)

+ func (er EngineResponseNew) GetFailedRules() []string

+ func (er EngineResponseNew) GetPatches() [][]byte

+ func (er EngineResponseNew) GetSuccessRules() []string

+ func (er EngineResponseNew) IsSuccesful() bool

+ type PolicyResponse struct

+ Policy string

+ Resource ResourceSpec

+ Rules []RuleResponse

+ ValidationFailureAction string

+ type PolicyStats struct

+ ProcessingTime time.Duration

+ RulesAppliedCount int

+ type ResourceSpec struct

+ APIVersion string

+ Kind string

+ Name string

+ Namespace string

+ type RuleResponse struct

+ Message string

+ Name string

+ Patches [][]byte

+ Success bool

+ Type string

+ func (rr RuleResponse) ToString() string

+ type RuleStats struct

+ ProcessingTime time.Duration

+ type RuleType int

+ const All

+ const Generation

+ const Mutation

+ const Validation

+ func (ri RuleType) String() string

Aug 22, 2019

Changes in this version

+ func ConvertToUnstructured(data []byte) (*unstructured.Unstructured, error)

+ func MatchesResourceDescription(resource unstructured.Unstructured, rule kyverno.Rule) bool

+ type EngineResponse struct

+ PatchedResource unstructured.Unstructured

+ Patches [][]byte

+ RuleInfos []info.RuleInfo

+ type EngineStats struct

+ ExecutionTime time.Duration

+ RulesAppliedCount int

Aug 3, 2019

Changes in this version

+ func ListResourcesThatApplyToPolicy(client *client.Client, policy *types.Policy, ...) map[string]resourceInfo

+ func ParseResourceInfoFromObject(rawResource []byte) string

Jul 21, 2019

Changes in this version

+ func GenerateNew(client *client.Client, policy *v1alpha1.Policy, ns *corev1.Namespace) []*info.RuleInfo

Jul 1, 2019

Changes in this version

+ func ParseKindFromObject(bytes []byte) string

Jun 20, 2019

Changes in this version

+ func FormAbsolutePath(referencePath, absolutePath string) string

+ type ConditionAnchorValidationHandler struct

+ func (cavh *ConditionAnchorValidationHandler) Handle(resourcePart []interface{}, patternPart map[string]interface{}, ...) result.RuleApplicationResult

+ type ExistanceAnchorValidationHandler struct

+ func (eavh *ExistanceAnchorValidationHandler) Handle(resourcePart []interface{}, patternPart map[string]interface{}, ...) result.RuleApplicationResult

+ type NoAnchorValidationHandler struct

+ func (navh *NoAnchorValidationHandler) Handle(resourcePart []interface{}, patternPart map[string]interface{}, ...) result.RuleApplicationResult

+ type ValidationAnchorHandler interface

+ Handle func(resourcePart []interface{}, patternPart map[string]interface{}, ...) result.RuleApplicationResult

+ func CreateAnchorHandler(anchor string, pattern interface{}, path string) ValidationAnchorHandler

+ func NewConditionAnchorValidationHandler(anchor string, pattern interface{}, path string) ValidationAnchorHandler

+ func NewExistanceAnchorValidationHandler(anchor string, pattern interface{}, path string) ValidationAnchorHandler

+ func NewNoAnchorValidationHandler(path string) ValidationAnchorHandler

Jun 6, 2019

Changes in this version

+ func ApplyPatches(resource []byte, patches []PatchBytes) ([]byte, error)

+ func Generate(client *client.Client, policy kubepolicy.Policy, rawResource []byte, ...)

+ func ParseNameFromObject(bytes []byte) string

+ func ParseNamespaceFromObject(bytes []byte) string

+ func ParseRegexPolicyResourceName(policyResourceName string) (string, bool)

+ func ProcessExisting(policy types.Policy, rawResource []byte) ([]violation.Info, []event.Info, error)

+ func ResourceMeetsDescription(resourceRaw []byte, description kubepolicy.ResourceDescription, ...) bool

+ func Validate(policy kubepolicy.Policy, rawResource []byte, gvk metav1.GroupVersionKind) result.Result

+ func ValidateValueWithPattern(value, pattern interface{}) bool

+ type Operator string

+ const Equal

+ const Less

+ const LessEqual

+ const More

+ const MoreEqual

+ const NotEqual

+ type PatchBytes []byte

+ func JoinPatches(patches []PatchBytes) PatchBytes

+ func Mutate(policy kubepolicy.Policy, rawResource []byte, gvk metav1.GroupVersionKind) ([]PatchBytes, result.Result)

+ func ProcessOverlay(rule kubepolicy.Rule, rawResource []byte, gvk metav1.GroupVersionKind) ([]PatchBytes, result.RuleApplicationResult)

+ func ProcessPatches(rule kubepolicy.Rule, resource []byte) ([]PatchBytes, result.RuleApplicationResult)