autogen

Documentation

Index

• Constants
• func CanAutoGen(spec *kyvernov1.Spec) (applyAutoGen bool, controllers string)
• func ComputeRules(p kyvernov1.PolicyInterface) []kyvernov1.Rule
• func GenerateRulePatches(spec *kyvernov1.Spec, controllers string) (rulePatches [][]byte, errs []error)
• func GetControllers(meta *metav1.ObjectMeta, spec *kyvernov1.Spec) ([]string, []string, []string)
• func GetRequestedControllers(meta *metav1.ObjectMeta) []string
• func GetSupportedControllers(spec *kyvernov1.Spec) []string

Constants

const (
	// PodControllerCronJob represent CronJob string
	PodControllerCronJob = "CronJob"
	// PodControllers stores the list of Pod-controllers in csv string
	PodControllers = "DaemonSet,Deployment,Job,StatefulSet,ReplicaSet,ReplicationController,CronJob"
)

Functions

func CanAutoGen

func CanAutoGen(spec *kyvernov1.Spec) (applyAutoGen bool, controllers string)

CanAutoGen checks whether the rule(s) (in policy) can be applied to Pod controllers returns controllers as: - "" if:

• name or selector is defined
• mixed kinds (Pod + pod controller) is defined
• Pod and PodControllers are not defined
• mutate.Patches/mutate.PatchesJSON6902/validate.deny/generate rule is defined

- otherwise it returns all pod controllers

func ComputeRules

func ComputeRules(p kyvernov1.PolicyInterface) []kyvernov1.Rule

func GenerateRulePatches

func GenerateRulePatches(spec *kyvernov1.Spec, controllers string) (rulePatches [][]byte, errs []error)

GenerateRulePatches generates rule for podControllers based on scenario A and C

func GetControllers

func GetControllers(meta *metav1.ObjectMeta, spec *kyvernov1.Spec) ([]string, []string, []string)

GetControllers computes the autogen controllers that should be applied to a policy. It returns the requested, supported and effective controllers (intersection of requested and supported ones).

func GetRequestedControllers

func GetRequestedControllers(meta *metav1.ObjectMeta) []string

GetRequestedControllers returns the requested autogen controllers based on object annotations.

func GetSupportedControllers

func GetSupportedControllers(spec *kyvernov1.Spec) []string

GetSupportedControllers returns the supported autogen controllers for a given spec.