policyviolation

Documentation

Index

• func GetOwner(dclient *client.Client, ownerMap map[kyverno.ResourceSpec]interface{}, ...)
• func NewDataStore() *dataStore
• type Generator
  • func NewPVGenerator(client *kyvernoclient.Clientset, dclient *client.Client, ...) *Generator
  • func (gen *Generator) Add(infos ...Info)
  • func (gen *Generator) Run(workers int, stopCh <-chan struct{})
• type GeneratorInterface
• type Info
• type NamespacedPVControlInterface
• type NamespacedPolicyViolationController
  • func NewNamespacedPolicyViolationController(client *client.Client, kyvernoClient *kyvernoclient.Clientset, ...) (*NamespacedPolicyViolationController, error)
  • func (pvc *NamespacedPolicyViolationController) Run(workers int, stopCh <-chan struct{})
• type PVControlInterface
• type PolicyViolationController
  • func NewPolicyViolationController(client *client.Client, kyvernoClient *kyvernoclient.Clientset, ...) (*PolicyViolationController, error)
  • func (pvc *PolicyViolationController) Run(workers int, stopCh <-chan struct{})
• type RealNamespacedPVControl
  • func (r RealNamespacedPVControl) RemovePolicyViolation(ns, name string) error
  • func (r RealNamespacedPVControl) UpdateStatusPolicyViolation(newPv *kyverno.NamespacedPolicyViolation) error
• type RealPVControl
  • func (r RealPVControl) RemovePolicyViolation(name string) error
  • func (r RealPVControl) UpdateStatusPolicyViolation(newPv *kyverno.ClusterPolicyViolation) error

Functions

func GetOwner

func GetOwner(dclient *client.Client, ownerMap map[kyverno.ResourceSpec]interface{}, resource unstructured.Unstructured)

GetOwner of a resource by iterating over ownerReferences

func NewDataStore

func NewDataStore() *dataStore

Types

type Generator

type Generator struct {
	// contains filtered or unexported fields
}

Generator creates PV

func NewPVGenerator

func NewPVGenerator(client *kyvernoclient.Clientset, dclient *client.Client,
	pvLister kyvernolister.ClusterPolicyViolationLister,
	nspvLister kyvernolister.NamespacedPolicyViolationLister) *Generator

NewPVGenerator returns a new instance of policy violation generator

func (*Generator) Add

func (gen *Generator) Add(infos ...Info)

Add queues a policy violation create request

func (*Generator) Run

func (gen *Generator) Run(workers int, stopCh <-chan struct{})

Run starts the workers

type GeneratorInterface

type GeneratorInterface interface {
	Add(infos ...Info)
}

GeneratorInterface provides API to create PVs

type Info

type Info struct {
	Blocked    bool
	PolicyName string
	Resource   unstructured.Unstructured
	Rules      []kyverno.ViolatedRule
}

Info is a request to create PV

type NamespacedPVControlInterface

type NamespacedPVControlInterface interface {
	UpdateStatusPolicyViolation(newPv *kyverno.NamespacedPolicyViolation) error
	RemovePolicyViolation(ns, name string) error
}

type NamespacedPolicyViolationController

type NamespacedPolicyViolationController struct {
	// contains filtered or unexported fields
}

PolicyViolationController manages the policy violation resource - sync the lastupdate time - check if the resource is active

func NewNamespacedPolicyViolationController

func NewNamespacedPolicyViolationController(client *client.Client, kyvernoClient *kyvernoclient.Clientset, pInformer kyvernoinformer.ClusterPolicyInformer, pvInformer kyvernoinformer.NamespacedPolicyViolationInformer) (*NamespacedPolicyViolationController, error)

NewPolicyViolationController creates a new NewPolicyViolationController

func (*NamespacedPolicyViolationController) Run

func (pvc *NamespacedPolicyViolationController) Run(workers int, stopCh <-chan struct{})

Run begins watching and syncing.

type PVControlInterface

type PVControlInterface interface {
	UpdateStatusPolicyViolation(newPv *kyverno.ClusterPolicyViolation) error
	RemovePolicyViolation(name string) error
}

type PolicyViolationController

type PolicyViolationController struct {
	// contains filtered or unexported fields
}

PolicyViolationController manages the policy violation resource - sync the lastupdate time - check if the resource is active

func NewPolicyViolationController

func NewPolicyViolationController(client *client.Client, kyvernoClient *kyvernoclient.Clientset, pInformer kyvernoinformer.ClusterPolicyInformer, pvInformer kyvernoinformer.ClusterPolicyViolationInformer) (*PolicyViolationController, error)

NewPolicyViolationController creates a new NewPolicyViolationController

func (*PolicyViolationController) Run

func (pvc *PolicyViolationController) Run(workers int, stopCh <-chan struct{})

Run begins watching and syncing.

type RealNamespacedPVControl

type RealNamespacedPVControl struct {
	Client   kyvernoclient.Interface
	Recorder record.EventRecorder
}

RealNamespacedPVControl is the default implementation of NamespacedPVControlInterface.

func (RealNamespacedPVControl) RemovePolicyViolation

func (r RealNamespacedPVControl) RemovePolicyViolation(ns, name string) error

RemovePolicyViolation removes the policy violation

func (RealNamespacedPVControl) UpdateStatusPolicyViolation

func (r RealNamespacedPVControl) UpdateStatusPolicyViolation(newPv *kyverno.NamespacedPolicyViolation) error

UpdateStatusPolicyViolation updates the status for policy violation

type RealPVControl

type RealPVControl struct {
	Client   kyvernoclient.Interface
	Recorder record.EventRecorder
}

RealPVControl is the default implementation of PVControlInterface.

func (RealPVControl) RemovePolicyViolation

func (r RealPVControl) RemovePolicyViolation(name string) error

RemovePolicyViolation removes the policy violation

func (RealPVControl) UpdateStatusPolicyViolation

func (r RealPVControl) UpdateStatusPolicyViolation(newPv *kyverno.ClusterPolicyViolation) error

UpdateStatusPolicyViolation updates the status for policy violation