Policy check

README.md

@@ -42,13 +42,13 @@ CLI can be previously authenticated with `gcloud auth application-default login`
 Parameters for GKE cluster review can be provided as command parameters or via configuration .yaml file.
 
 ```sh
-gke-policy-automation [global options] command [command options] [arguments...]
+gke-policy [global options] command [command options] [arguments...]
 ```
 
 For cluster review with manually provided parameters:
 
 ```sh
-./gke-policy-automation cluster review -p <GCP_PROJECT_ID> -n <CLUSTER_NAME> -l <CLUSTER_LOCATION>
+./gke-policy cluster review -p <GCP_PROJECT_ID> -n <CLUSTER_NAME> -l <CLUSTER_LOCATION>
 ```
 
 and with .yaml file with format:
@@ -73,13 +73,19 @@ Custom policies can be provided via local directory or remote Github repository.
 Example for local directory:
 
 ```sh
-./gke-policy-automation cluster review -p my_project -n my_cluster -l europe-central2-a  --local-policy-dir ./gke-policies/policy
+./gke-policy cluster review -p my_project -n my_cluster -l europe-central2-a  --local-policy-dir ./gke-policies/policy
 ```
 
 and for Github repository:
 
 ```sh
-./gke-policy-automation cluster review -p my_project -n my_cluster -l europe-central2-a  --git-policy-repo "https://github.com/google/gke-policy-automation" --git-policy-branch main --git-policy-dir gka-policies/policy
+./gke-policy cluster review -p my_project -n my_cluster -l europe-central2-a  --git-policy-repo "https://github.com/google/gke-policy-automation" --git-policy-branch main --git-policy-dir gka-policies/policy
+```
+
+Policy definition validation can be done with command:
+
+```sh
+gke-policy policy check [arguments...]
 ```
 
 ## Test

internal/app/app.go

@@ -29,6 +29,7 @@ type PolicyAutomation interface {
 	Close() error
 	ClusterReview() error
 	Version() error
+	PolicyCheck() error
 }
 
 type PolicyAutomationApp struct {
@@ -131,6 +132,24 @@ func (p *PolicyAutomationApp) Version() error {
 	return nil
 }
 
+func (p *PolicyAutomationApp) PolicyCheck() error {
+	files, err := p.loadPolicyFiles()
+	if err != nil {
+		p.out.ErrorPrint("loading policy files failed: ", err)
+		log.Errorf("loading policy files failed: %s", err)
+		return err
+	}
+	pa := policy.NewPolicyAgent(p.ctx)
+	if err := pa.WithFiles(files); err != nil {
+		p.out.ErrorPrint("could not parse policy files", err)
+		log.Errorf("could not parse policy files: %s", err)
+		return err
+	}
+	p.out.ColorPrintf("[bold][green] All policies validated correctly \n")
+	log.Info("All policies validated correctly")
+	return nil
+}
+
 func (p *PolicyAutomationApp) loadPolicyFiles() ([]*policy.PolicyFile, error) {
 	policyFiles := make([]*policy.PolicyFile, 0)
 	for _, policyConfig := range p.config.Policies {

internal/app/cli.go

@@ -36,6 +36,7 @@ func NewPolicyAutomationCli(p PolicyAutomation) *cli.App {
 		Commands: []*cli.Command{
 			CreateClusterCommand(p),
 			CreateVersionCommand(p),
+			CreatePolicyCheckCommand(p),
 		},
 	}
 	return app
@@ -111,6 +112,30 @@ func CreateVersionCommand(p PolicyAutomation) *cli.Command {
 	}
 }
 
+func CreatePolicyCheckCommand(p PolicyAutomation) *cli.Command {
+	config := &CliConfig{}
+	return &cli.Command{
+		Name:  "policy",
+		Usage: "Manages policy files",
+		Subcommands: []*cli.Command{
+			{
+				Name:  "check",
+				Usage: "Validates policy files from defined source",
+				Flags: (getPolicySourceFlags(config)),
+				Action: func(c *cli.Context) error {
+					defer p.Close()
+					if err := p.LoadCliConfig(config); err != nil {
+						cli.ShowSubcommandHelp(c)
+						return err
+					}
+					p.PolicyCheck()
+					return nil
+				},
+			},
+		},
+	}
+}
+
 func getPolicySourceFlags(config *CliConfig) []cli.Flag {
 	return []cli.Flag{
 		&cli.StringFlag{