utils

Documentation

Index

• func AddElementToContext(ctx engineapi.PolicyContext, element interface{}, index, nesting int, ...) error
• func ApplyPatchNew(resource, patch []byte) ([]byte, error)
• func ApplyPatches(resource []byte, patches [][]byte) ([]byte, error)
• func EvaluateList(jmesPath string, ctx enginecontext.EvalInterface) ([]interface{}, error)
• func ExtractMatchingImages(resource unstructured.Unstructured, context enginecontext.Interface, ...) ([]apiutils.ImageInfo, string, error)
• func GetMatchingImages(images map[string]map[string]apiutils.ImageInfo, rule kyvernov1.Rule) ([]apiutils.ImageInfo, string)
• func ImageMatches(image string, imagePatterns []string) bool
• func InvertedElement(elements []interface{})
• func IsDeleteRequest(ctx engineapi.PolicyContext) bool
• func IsEmptyUnstructured(u *unstructured.Unstructured) bool
• func IsImageVerified(resource unstructured.Unstructured, image string, log logr.Logger) (engineapi.ImageVerificationMetadataStatus, error)
• func IsSameRuleResponse(r1 *engineapi.RuleResponse, r2 *engineapi.RuleResponse) bool
• func IsUpdateRequest(ctx engineapi.PolicyContext) bool
• func MatchesException(polexs []kyvernov2beta1.PolicyException, policyContext engineapi.PolicyContext, ...) *kyvernov2beta1.PolicyException
• func MatchesResourceDescription(resource unstructured.Unstructured, rule kyvernov1.Rule, ...) error
• func TransformConditions(original apiextensions.JSON) (interface{}, error)

Functions

func AddElementToContext

func AddElementToContext(ctx engineapi.PolicyContext, element interface{}, index, nesting int, elementScope *bool) error

func ApplyPatchNew

func ApplyPatchNew(resource, patch []byte) ([]byte, error)

ApplyPatchNew patches given resource with given joined patches

func ApplyPatches

func ApplyPatches(resource []byte, patches [][]byte) ([]byte, error)

ApplyPatches patches given resource with given patches and returns patched document return original resource if any error occurs

func EvaluateList

func EvaluateList(jmesPath string, ctx enginecontext.EvalInterface) ([]interface{}, error)

func ExtractMatchingImages

func ExtractMatchingImages(
	resource unstructured.Unstructured,
	context enginecontext.Interface,
	rule kyvernov1.Rule,
	cfg config.Configuration,
) ([]apiutils.ImageInfo, string, error)

func GetMatchingImages

func GetMatchingImages(images map[string]map[string]apiutils.ImageInfo, rule kyvernov1.Rule) ([]apiutils.ImageInfo, string)

func ImageMatches

func ImageMatches(image string, imagePatterns []string) bool

func InvertedElement

func InvertedElement(elements []interface{})

InvertedElement inverted the order of element for patchStrategicMerge policies as kustomize patch revering the order of patch resources.

func IsDeleteRequest

func IsDeleteRequest(ctx engineapi.PolicyContext) bool

func IsEmptyUnstructured

func IsEmptyUnstructured(u *unstructured.Unstructured) bool

func IsImageVerified

func IsImageVerified(resource unstructured.Unstructured, image string, log logr.Logger) (engineapi.ImageVerificationMetadataStatus, error)

func IsSameRuleResponse

func IsSameRuleResponse(r1 *engineapi.RuleResponse, r2 *engineapi.RuleResponse) bool

func IsUpdateRequest

func IsUpdateRequest(ctx engineapi.PolicyContext) bool

func MatchesException

func MatchesException(
	polexs []kyvernov2beta1.PolicyException,
	policyContext engineapi.PolicyContext,
	logger logr.Logger,
) *kyvernov2beta1.PolicyException

MatchesException takes a list of exceptions and checks if there is an exception applies to the incoming resource. It returns the matched policy exception.

func MatchesResourceDescription

func MatchesResourceDescription(
	resource unstructured.Unstructured,
	rule kyvernov1.Rule,
	admissionInfo kyvernov1beta1.RequestInfo,
	namespaceLabels map[string]string,
	policyNamespace string,
	gvk schema.GroupVersionKind,
	subresource string,
	operation kyvernov1.AdmissionOperation,
) error

matchesResourceDescription checks if the resource matches resource description of the rule or not

func TransformConditions

func TransformConditions(original apiextensions.JSON) (interface{}, error)