Skip to content

Commit

Permalink
Merge pull request #40 from jvanz/main
Browse files Browse the repository at this point in the history
fix: validate resource kind.
  • Loading branch information
viccuad authored Nov 20, 2023
2 parents b4cb570 + fcb95e2 commit 7dfcb78
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion src/lib.rs
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ use guest::prelude::*;
use kubewarden_policy_sdk::wapc_guest as guest;

use k8s_openapi::api::core::v1 as apicore;
use k8s_openapi::Resource;

extern crate kubewarden_policy_sdk as kubewarden;
use kubewarden::{logging, protocol_version_guest, request::ValidationRequest, validate_settings};
Expand Down Expand Up @@ -31,7 +32,10 @@ fn validate(payload: &[u8]) -> CallResult {
let validation_request: ValidationRequest<Settings> = ValidationRequest::new(payload)?;

info!(LOG_DRAIN, "starting validation");

if validation_request.request.kind.kind != apicore::Pod::KIND {
warn!(LOG_DRAIN, "Policy validates Pods only. Accepting resource"; "kind" => &validation_request.request.kind.kind);
return kubewarden::accept_request();
}
// TODO: you can unmarshal any Kubernetes API type you are interested in
match serde_json::from_value::<apicore::Pod>(validation_request.request.object) {
Ok(pod) => {
Expand Down

0 comments on commit 7dfcb78

Please sign in to comment.