fix: exclude knative crd from rule constraints (#954)

datreeio · Jul 9, 2023 · 38b1f68 · 38b1f68
1 parent d00c364
commit 38b1f68
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/pkg/defaultRules/defaultRules.yaml b/pkg/defaultRules/defaultRules.yaml
@@ -301,6 +301,12 @@ rules:
           kind:
             enum:
               - Service
+        # knative has a CRD with kind "Service", we want this rule to ignore it
+        not:
+          properties:
+            apiVersion:
+              enum:
+                - serving.knative.dev/v1
       then:
         properties:
           spec:

diff --git a/pkg/policy/tests/7/pass/7-pass-2.yaml b/pkg/policy/tests/7/pass/7-pass-2.yaml
@@ -0,0 +1,22 @@
+apiVersion: serving.knative.dev/v1
+kind: Service
+metadata:
+  creationTimestamp: null
+  name: hadartest
+  namespace: knative-serving-demo-0
+spec:
+  type: NodePort
+  template:
+    metadata:
+      annotations:
+        client.knative.dev/updateTimestamp: "2023-07-06T10:38:55Z"
+        client.knative.dev/user-image: gcr.io/knative-samples/helloworld-go
+      creationTimestamp: null
+    spec:
+      containers:
+        - image: gcr.io/knative-samples/helloworld-go
+          name: ""
+          ports:
+            - containerPort: 8080
+          resources: {}
+status: {}