added repo

2026-08-26 03:39:42 +05:30
parent 45c25a95af
commit b8575bb8b9
6889 changed files with 1217125 additions and 0 deletions
@@ -0,0 +1,174 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* Validate OpenReports configuration */}}
+{{- define "kyverno.validateOpenReports" -}}
+{{- if and (not .Values.openreports.enabled) .Values.openreports.installCrds -}}
+{{- fail "OpenReports CRD installation (openreports.installCrds) cannot be enabled when the feature (openreports.enabled) is disabled" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "kyverno.chartVersion" -}}
+{{- if .Values.global.templating.enabled -}}
+  {{- required "templating.version is required when templating.enabled is true" .Values.global.templating.version | replace "+" "_" -}}
+{{- else -}}
+  {{- .Chart.Version | replace "+" "_" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "kyverno.features.flags" -}}
+{{- $flags := list -}}
+{{- with .admissionReports -}}
+  {{- $flags = append $flags (print "--admissionReports=" .enabled) -}}
+  {{- with .backPressureThreshold -}}
+    {{- $flags = append $flags (print "--maxAdmissionReports=" .) -}}
+  {{- end -}}
+{{- end -}}
+{{- with .aggregateReports -}}
+  {{- $flags = append $flags (print "--aggregateReports=" .enabled) -}}
+{{- end -}}
+{{- with .policyReports -}}
+  {{- $flags = append $flags (print "--policyReports=" .enabled) -}}
+{{- end -}}
+{{- with .validatingAdmissionPolicyReports -}}
+  {{- $flags = append $flags (print "--validatingAdmissionPolicyReports=" .enabled) -}}
+{{- end -}}
+{{- with .mutatingAdmissionPolicyReports -}}
+  {{- $flags = append $flags (print "--mutatingAdmissionPolicyReports=" .enabled) -}}
+{{- end -}}
+{{- with .autoUpdateWebhooks -}}
+  {{- $flags = append $flags (print "--autoUpdateWebhooks=" .enabled) -}}
+{{- end -}}
+{{- with .backgroundScan -}}
+  {{- $flags = append $flags (print "--backgroundScan=" .enabled) -}}
+  {{- $flags = append $flags (print "--backgroundScanWorkers=" .backgroundScanWorkers) -}}
+  {{- $flags = append $flags (print "--backgroundScanInterval=" .backgroundScanInterval) -}}
+  {{- $flags = append $flags (print "--skipResourceFilters=" .skipResourceFilters) -}}
+{{- end -}}
+{{- with .configMapCaching -}}
+  {{- $flags = append $flags (print "--enableConfigMapCaching=" .enabled) -}}
+{{- end -}}
+{{- with .controllerRuntimeMetrics -}}
+  {{- $flags = append $flags (print "--controllerRuntimeMetricsAddress=" .bindAddress) -}}
+{{- end -}}
+{{- with .deferredLoading -}}
+  {{- $flags = append $flags (print "--enableDeferredLoading=" .enabled) -}}
+{{- end -}}
+{{- with .dumpPayload -}}
+  {{- $flags = append $flags (print "--dumpPayload=" .enabled) -}}
+{{- end -}}
+{{- with .forceFailurePolicyIgnore -}}
+  {{- $flags = append $flags (print "--forceFailurePolicyIgnore=" .enabled) -}}
+{{- end -}}
+{{- with .generateValidatingAdmissionPolicy -}}
+  {{- $flags = append $flags (print "--generateValidatingAdmissionPolicy=" .enabled) -}}
+{{- end -}}
+{{- with .generateMutatingAdmissionPolicy -}}
+  {{- $flags = append $flags (print "--generateMutatingAdmissionPolicy=" .enabled) -}}
+{{- end -}}
+{{- with .dumpPatches -}}
+  {{- $flags = append $flags (print "--dumpPatches=" .enabled) -}}
+{{- end -}}
+{{- with .globalContext -}}
+  {{- $flags = append $flags (print "--maxAPICallResponseLength=" (int .maxApiCallResponseLength)) -}}
+  {{- $flags = append $flags (print "--apiCallTimeout=" .apiCallTimeout) -}}
+{{- end -}}
+{{- with .logging -}}
+  {{- $flags = append $flags (print "--loggingFormat=" .format) -}}
+  {{- $flags = append $flags (print "--v=" .verbosity) -}}
+{{- end -}}
+{{- with .omitEvents -}}
+  {{- with .eventTypes -}}
+    {{- $flags = append $flags (print "--omitEvents=" (join "," .)) -}}
+  {{- end -}}
+{{- end -}}
+{{- with .policyExceptions -}}
+  {{- $flags = append $flags (print "--enablePolicyException=" .enabled) -}}
+  {{- with .namespace -}}
+    {{- $flags = append $flags (print "--exceptionNamespace=" .) -}}
+  {{- end -}}
+{{- end -}}
+{{- with .protectManagedResources -}}
+  {{- $flags = append $flags (print "--protectManagedResources=" .enabled) -}}
+{{- end -}}
+{{- with .registryClient -}}
+  {{- $flags = append $flags (print "--allowInsecureRegistry=" .allowInsecure) -}}
+  {{- $flags = append $flags (print "--registryCredentialHelpers=" (join "," .credentialHelpers)) -}}
+{{- end -}}
+{{- with .ttlController -}}
+  {{- $flags = append $flags (print "--ttlReconciliationInterval=" .reconciliationInterval) -}}
+{{- end -}}
+{{- with .tuf -}}
+  {{- with .enabled -}}
+    {{- $flags = append $flags (print "--enableTuf=" .) -}}
+  {{- end -}}
+  {{- with .mirror -}}
+    {{- $flags = append $flags (print "--tufMirror=" .) -}}
+  {{- end -}}
+  {{- with .root -}}
+    {{- $flags = append $flags (print "--tufRoot=" .) -}}
+  {{- end -}}
+  {{- with .rootRaw -}}
+    {{- $flags = append $flags (print "--tufRootRaw=" .) -}}
+  {{- end -}}
+{{- end -}}
+{{- with .reporting }}
+  {{- $reportingConfig := list }}
+  {{- with .validate }}
+    {{- $reportingConfig = append $reportingConfig "validate" }}
+  {{- end }}
+  {{- with .mutate }}
+    {{- $reportingConfig = append $reportingConfig "mutate" }}
+  {{- end }}
+  {{- with .mutateExisting }}
+    {{- $reportingConfig = append $reportingConfig "mutateExisting" }}
+  {{- end }}
+  {{- with .imageVerify }}
+    {{- $reportingConfig = append $reportingConfig "imageVerify" }}
+  {{- end }}
+  {{- with .generate }}
+    {{- $reportingConfig = append $reportingConfig "generate" }}
+  {{- end }}
+  {{- $flags = append $flags (print "--enableReporting=" (join "," $reportingConfig)) }}
+  {{- with .allowedResults }}
+    {{- $resultsConfig := list }}
+    {{- with .pass }}
+      {{- $resultsConfig = append $resultsConfig "pass" }}
+    {{- end }}
+    {{- with .fail }}
+      {{- $resultsConfig = append $resultsConfig "fail" }}
+    {{- end }}
+    {{- with .error }}
+      {{- $resultsConfig = append $resultsConfig "error" }}
+    {{- end }}
+    {{- with .skip }}
+      {{- $resultsConfig = append $resultsConfig "skip" }}
+    {{- end }}
+    {{- with .warn }}
+      {{- $resultsConfig = append $resultsConfig "warn" }}
+    {{- end }}
+    {{- $flags = append $flags (print "--allowedResults=" (join "," $resultsConfig)) }}
+  {{- end }}
+{{- end -}}
+{{- with $flags -}}
+  {{- toYaml . -}}
+{{- end -}}
+{{- end -}}
+
+{{/* Helper function to sort imagePullSecrets by name to ensure consistent ordering */}}
+{{- define "kyverno.sortedImagePullSecrets" -}}
+{{- if . -}}
+{{- $secrets := list -}}
+{{- range . -}}
+{{- $secrets = append $secrets .name -}}
+{{- end -}}
+{{- $sortedSecrets := list -}}
+{{- if $secrets -}}
+{{- $sortedSecrets = sortAlpha $secrets -}}
+{{- end -}}
+{{- $sortedRefs := list -}}
+{{- range $sortedSecrets -}}
+{{- $sortedRefs = append $sortedRefs (dict "name" .) -}}
+{{- end -}}
+{{- toYaml $sortedRefs -}}
+{{- end -}}
+{{- end -}}