Fix array variables substitution

[realshuting]

Signed-off-by: Shuting Zhao shutting06@gmail.com

Related issue

Fixes #1777.

ConditionOperator In and NotIn operates on a set of values. The variable substation for these types of values is not handled properly in the previous PR.

What type of PR is this

/kind bug

Proposed Changes

Proof Manifests

1. Follow the reproduce steps described in [BUG] JMESPath expressions not being substituted in validate.message field #1777, this is the output:

Error from server: error when creating "resource.yaml": admission webhook "validate.kyverno.svc" denied the request:

resource Deployment/default/busybox was blocked due to the following policies

cm-array-example:
  validate-role-annotation: 'The animal cow is not in the allowed list of animals: ["snake","bear","cat","dog"].'

2. If I change validate.deny.operator to In, the resource creation is allowed:

 ✗ k apply -f resource.yaml
deployment.apps/busybox created

Checklist

• I have read the contributing guidelines.
• I have added tests that prove my fix is effective or that my feature works.
• [] My PR contains new or altered behavior to Kyverno and
  • [] I have added or changed the documentation myself in an existing PR and the link is:
  • [] I have raised an issue in kyverno/website to track the doc update and the link is:
  • [] I have read the PR documentation guide and followed the process including adding proof manifests to this PR.

Further Comments

cc @kacejot