policy

Documentation

Index

• func UpdateSourceResource(client dclient.Interface, kind, namespace string, policyName string, ...) error
• func Validate(policy kyvernov1.PolicyInterface, client dclient.Interface, mock bool, ...) ([]string, error)
• func ValidateOnPolicyUpdate(p kyvernov1.PolicyInterface, onPolicyUpdate bool) error
• func ValidateVariables(p kyvernov1.PolicyInterface, backgroundMode bool) error
• type Condition
• type PolicyController
  • func NewPolicyController(kyvernoClient versioned.Interface, client dclient.Interface, ...) (*PolicyController, error)
  • func (pc *PolicyController) Run(ctx context.Context, workers int)
• type Validation

Functions

func UpdateSourceResource

func UpdateSourceResource(client dclient.Interface, kind, namespace string, policyName string, obj *unstructured.Unstructured) error

func Validate

func Validate(policy kyvernov1.PolicyInterface, client dclient.Interface, mock bool, openApiManager openapi.Manager) ([]string, error)

Validate checks the policy and rules declarations for required configurations

func ValidateOnPolicyUpdate

func ValidateOnPolicyUpdate(p kyvernov1.PolicyInterface, onPolicyUpdate bool) error

func ValidateVariables

func ValidateVariables(p kyvernov1.PolicyInterface, backgroundMode bool) error

Types

type Condition

type Condition int

Condition defines condition type

const (
	// NotEvaluate to not evaluate condition
	NotEvaluate Condition = 0
	// Process to evaluate condition
	Process Condition = 1
	// Skip to ignore/skip the condition
	Skip Condition = 2
)

type PolicyController

type PolicyController struct {
	// contains filtered or unexported fields
}

PolicyController is responsible for synchronizing Policy objects stored in the system with the corresponding policy violations

func NewPolicyController

func NewPolicyController(
	kyvernoClient versioned.Interface,
	client dclient.Interface,
	rclient registryclient.Client,
	pInformer kyvernov1informers.ClusterPolicyInformer,
	npInformer kyvernov1informers.PolicyInformer,
	urInformer kyvernov1beta1informers.UpdateRequestInformer,
	configHandler config.Configuration,
	eventGen event.Interface,
	namespaces corev1informers.NamespaceInformer,
	informerCacheResolvers resolvers.ConfigmapResolver,
	log logr.Logger,
	reconcilePeriod time.Duration,
	metricsConfig metrics.MetricsConfigManager,
) (*PolicyController, error)

NewPolicyController create a new PolicyController

func (*PolicyController) Run

func (pc *PolicyController) Run(ctx context.Context, workers int)

Run begins watching and syncing.

type Validation

type Validation interface {
	Validate() (string, error)
}

Validation provides methods to validate a rule