engine

Documentation

Index

• func NewWrapper(client dclient.Interface) dclient.Interface
• type Client
  • func (c *Client) ApplyResource(_ context.Context, _, _, _, _ string, obj interface{}, _ bool, _ string, ...) (*unstructured.Unstructured, error)
  • func (c *Client) ApplyStatusResource(_ context.Context, _, _, _, _ string, obj interface{}, _ bool, _ string) (*unstructured.Unstructured, error)
  • func (c *Client) CreateResource(_ context.Context, _ string, _ string, _ string, obj interface{}, _ bool) (*unstructured.Unstructured, error)
  • func (c *Client) DeleteResource(_ context.Context, _ string, _ string, _ string, _ string, _ bool) error
  • func (c *Client) Discovery() dclient.IDiscovery
  • func (c *Client) GetDynamicInterface() dynamic.Interface
  • func (c *Client) GetEventsInterface() eventsv1.EventsV1Interface
  • func (c *Client) GetKubeClient() kubernetes.Interface
  • func (c *Client) GetResource(ctx context.Context, apiVersion string, kind string, namespace string, ...) (*unstructured.Unstructured, error)
  • func (c *Client) ListResource(ctx context.Context, apiVersion string, kind string, namespace string, ...) (*unstructured.UnstructuredList, error)
  • func (c *Client) PatchResource(_ context.Context, _ string, _ string, _ string, _ string, _ []byte) (*unstructured.Unstructured, error)
  • func (c *Client) RawAbsPath(ctx context.Context, path string, method string, dataReader io.Reader) ([]byte, error)
  • func (c *Client) SetDiscovery(discoveryClient dclient.IDiscovery)
  • func (c *Client) UpdateResource(_ context.Context, _ string, _ string, _ string, obj interface{}, _ bool, ...) (*unstructured.Unstructured, error)
  • func (c *Client) UpdateStatusResource(_ context.Context, _ string, _ string, _ string, obj interface{}, _ bool) (*unstructured.Unstructured, error)
• type PolicyViolationError
  • func (e PolicyViolationError) Error() string
• type Processor
  • func NewProcessor(params *models.Parameters, cl cluster.Cluster, kyvernoConfig *corev1.ConfigMap, ...) (*Processor, error)
  • func (p *Processor) Run(ctx context.Context, policies []kyvernov1.PolicyInterface, ...) (*models.Results, error)

Functions

func NewWrapper

func NewWrapper(client dclient.Interface) dclient.Interface

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Overwrite write actions to dry run prevents performing actual operations

func (*Client) ApplyResource

func (c *Client) ApplyResource(_ context.Context, _, _, _, _ string, obj interface{}, _ bool, _ string, _ ...string) (*unstructured.Unstructured, error)

func (*Client) ApplyStatusResource

func (c *Client) ApplyStatusResource(_ context.Context, _, _, _, _ string, obj interface{}, _ bool, _ string) (*unstructured.Unstructured, error)

func (*Client) CreateResource

func (c *Client) CreateResource(_ context.Context, _ string, _ string, _ string, obj interface{}, _ bool) (*unstructured.Unstructured, error)

func (*Client) DeleteResource

func (c *Client) DeleteResource(_ context.Context, _ string, _ string, _ string, _ string, _ bool) error

func (*Client) Discovery

func (c *Client) Discovery() dclient.IDiscovery

func (*Client) GetDynamicInterface

func (c *Client) GetDynamicInterface() dynamic.Interface

func (*Client) GetEventsInterface

func (c *Client) GetEventsInterface() eventsv1.EventsV1Interface

func (*Client) GetKubeClient

func (c *Client) GetKubeClient() kubernetes.Interface

func (*Client) GetResource

func (c *Client) GetResource(ctx context.Context, apiVersion string, kind string, namespace string, name string, subresources ...string) (*unstructured.Unstructured, error)

func (*Client) ListResource

func (c *Client) ListResource(ctx context.Context, apiVersion string, kind string, namespace string, lselector *metav1.LabelSelector) (*unstructured.UnstructuredList, error)

func (*Client) PatchResource

func (c *Client) PatchResource(_ context.Context, _ string, _ string, _ string, _ string, _ []byte) (*unstructured.Unstructured, error)

func (*Client) RawAbsPath

func (c *Client) RawAbsPath(ctx context.Context, path string, method string, dataReader io.Reader) ([]byte, error)

func (*Client) SetDiscovery

func (c *Client) SetDiscovery(discoveryClient dclient.IDiscovery)

func (*Client) UpdateResource

func (c *Client) UpdateResource(_ context.Context, _ string, _ string, _ string, obj interface{}, _ bool, _ ...string) (*unstructured.Unstructured, error)

func (*Client) UpdateStatusResource

func (c *Client) UpdateStatusResource(_ context.Context, _ string, _ string, _ string, obj interface{}, _ bool) (*unstructured.Unstructured, error)

type PolicyViolationError

type PolicyViolationError struct {
	Violations []models.PolicyValidation
}

func (PolicyViolationError) Error

func (e PolicyViolationError) Error() string

type Processor

type Processor struct {
	// contains filtered or unexported fields
}

func NewProcessor

func NewProcessor(
	params *models.Parameters,
	cl cluster.Cluster,
	kyvernoConfig *corev1.ConfigMap,
	dClient dclient.Interface,
	cmResolver engineapi.ConfigmapResolver,
	exceptionSelector engineapi.PolicyExceptionSelector,
) (*Processor, error)

func (*Processor) Run

func (p *Processor) Run(
	ctx context.Context,
	policies []kyvernov1.PolicyInterface,
	vaps []v1beta1.ValidatingAdmissionPolicy,
	vapbs []v1beta1.ValidatingAdmissionPolicyBinding,
	resources []unstructured.Unstructured,
	oldResources []unstructured.Unstructured,
) (*models.Results, error)