utils

Documentation

Index

• func BuildKindSet(logger logr.Logger, policies ...kyvernov1.PolicyInterface) sets.Set[string]
• func CanBackgroundProcess(p kyvernov1.PolicyInterface) bool
• func FetchClusterPolicies(cpolLister kyvernov1listers.ClusterPolicyLister) ([]kyvernov1.PolicyInterface, error)
• func FetchPolicies(polLister kyvernov1listers.PolicyLister, namespace string) ([]kyvernov1.PolicyInterface, error)
• func FetchPolicyExceptions(polexLister kyvernov2listers.PolicyExceptionLister, namespace string) ([]kyvernov2.PolicyException, error)
• func FetchValidatingAdmissionPolicies(vapLister admissionregistrationv1beta1listers.ValidatingAdmissionPolicyLister) ([]admissionregistrationv1beta1.ValidatingAdmissionPolicy, error)
• func FetchValidatingAdmissionPolicyBindings(...) ([]admissionregistrationv1beta1.ValidatingAdmissionPolicyBinding, error)
• func GenerateEvents(logger logr.Logger, eventGen event.Interface, config config.Configuration, ...)
• func RemoveNonBackgroundPolicies(policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface
• func RemoveNonValidationPolicies(policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface
• func ReportsAreIdentical(before, after reportsv1.ReportInterface) bool
• type ScanResult
• type Scanner
  • func NewScanner(logger logr.Logger, engine engineapi.Engine, config config.Configuration, ...) Scanner

Functions

func BuildKindSet

func BuildKindSet(logger logr.Logger, policies ...kyvernov1.PolicyInterface) sets.Set[string]

func CanBackgroundProcess

func CanBackgroundProcess(p kyvernov1.PolicyInterface) bool

func FetchClusterPolicies

func FetchClusterPolicies(cpolLister kyvernov1listers.ClusterPolicyLister) ([]kyvernov1.PolicyInterface, error)

func FetchPolicies

func FetchPolicies(polLister kyvernov1listers.PolicyLister, namespace string) ([]kyvernov1.PolicyInterface, error)

func FetchPolicyExceptions

func FetchPolicyExceptions(polexLister kyvernov2listers.PolicyExceptionLister, namespace string) ([]kyvernov2.PolicyException, error)

func FetchValidatingAdmissionPolicies

func FetchValidatingAdmissionPolicies(vapLister admissionregistrationv1beta1listers.ValidatingAdmissionPolicyLister) ([]admissionregistrationv1beta1.ValidatingAdmissionPolicy, error)

func FetchValidatingAdmissionPolicyBindings

func FetchValidatingAdmissionPolicyBindings(vapBindingLister admissionregistrationv1beta1listers.ValidatingAdmissionPolicyBindingLister) ([]admissionregistrationv1beta1.ValidatingAdmissionPolicyBinding, error)

func GenerateEvents

func GenerateEvents(logger logr.Logger, eventGen event.Interface, config config.Configuration, results ...engineapi.EngineResponse)

func RemoveNonBackgroundPolicies

func RemoveNonBackgroundPolicies(policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface

func RemoveNonValidationPolicies

func RemoveNonValidationPolicies(policies ...kyvernov1.PolicyInterface) []kyvernov1.PolicyInterface

func ReportsAreIdentical

func ReportsAreIdentical(before, after reportsv1.ReportInterface) bool

Types

type ScanResult

type ScanResult struct {
	EngineResponse *engineapi.EngineResponse
	Error          error
}

type Scanner

type Scanner interface {
	ScanResource(context.Context, unstructured.Unstructured, map[string]string, []admissionregistrationv1beta1.ValidatingAdmissionPolicyBinding, ...engineapi.GenericPolicy) map[*engineapi.GenericPolicy]ScanResult
}

func NewScanner

func NewScanner(
	logger logr.Logger,
	engine engineapi.Engine,
	config config.Configuration,
	jp jmespath.Interface,
	client dclient.Interface,
	reportingConfig reportutils.ReportingConfiguration,
) Scanner