policy

Documentation

Index

• Variables
• func Validate(policy, oldPolicy kyvernov1.PolicyInterface, client dclient.Interface, ...) ([]string, error)
• func ValidateCustomWebhookMatchConditions(wc []admissionregistrationv1.MatchCondition) error
• func ValidateOnPolicyUpdate(p kyvernov1.PolicyInterface, onPolicyUpdate bool) error
• func ValidateVariables(p kyvernov1.PolicyInterface, backgroundMode bool) error
• type Validation

Variables

var ForbiddenUserVariables = []*regexp.Regexp{
	regexp.MustCompile(`[^\.](serviceAccountName)\b`),
	regexp.MustCompile(`[^\.](serviceAccountNamespace)\b`),
	regexp.MustCompile(`[^\.](request.userInfo)\b`),
	regexp.MustCompile(`[^\.](request.roles)\b`),
	regexp.MustCompile(`[^\.](request.clusterRoles)\b`),
}

Functions

func Validate

func Validate(policy, oldPolicy kyvernov1.PolicyInterface, client dclient.Interface, mock bool, backgroundSA, reportsSA string) ([]string, error)

Validate checks the policy and rules declarations for required configurations

func ValidateCustomWebhookMatchConditions

func ValidateCustomWebhookMatchConditions(wc []admissionregistrationv1.MatchCondition) error

func ValidateOnPolicyUpdate

func ValidateOnPolicyUpdate(p kyvernov1.PolicyInterface, onPolicyUpdate bool) error

func ValidateVariables

func ValidateVariables(p kyvernov1.PolicyInterface, backgroundMode bool) error

Types

type Validation

type Validation interface {
	Validate(ctx context.Context, verbs []string) (warnings []string, path string, err error)
}

Validation provides methods to validate a rule