Resolving variables from the resource passed | CLI

[NoSkillGirl]

Signed-off-by: NoSkillGirl singhpooja240393@gmail.com

Related issue

closes #1996
closes #1870

What type of PR is this

/kind bug
/kind feature

Proposed Changes

• added resource in the context to get request.object.* variables
• added check for the variable - user should pass variable other than request.object.* variables
• supporting list variable in cli

Proof Manifests

Example 1:
Apply following policy :

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: mutate-ingress-host
spec:
  rules:
  - name: mutate-rules-host
    match:
      resources:
        kinds:
        - Ingress
    preconditions:
      - key: "{{request.object.spec.rules[0].host}}"
        operator: NotEquals
        value: "*.mycompany.com"
    mutate:
      patchesJson6902: |-
        - op: replace
          path: /spec/rules/0/host
          value: some.mycompany.com
  - name: mutate-tls-hosts
    match:
      resources:
        kinds:
        - Ingress
    preconditions:
      - key: "{{request.object.spec.tls[0].hosts[0]}}"
        operator: NotEquals
        value: "*.mycompany.com"
    mutate:
      patchStrategicMerge:
        spec:
          tls:
          - hosts:
            - "some.mycompany.com"

on following resource:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: kuard
  labels:
    app: kuard
spec:
  rules:
  - host: kuard
    http:
      paths:
      - backend:
          service: 
            name: kuard
            port: 
              number: 8080
        path: /
        pathType: ImplementationSpecific
  tls:
  - hosts:
     - kuard

Command:

kyverno apply policy.yaml -r resource.yaml

Result:

applying 1 policy to 1 resource... 

mutate policy mutate-ingress-host applied to default/Ingress/kuard:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  labels:
    app: kuard
  name: kuard
  namespace: default
spec:
  rules:
  - host: some.mycompany.com
    http:
      paths:
      - backend:
          service:
            name: kuard
            port:
              number: 8080
        path: /
        pathType: ImplementationSpecific
  tls:
  - hosts:
    - some.mycompany.com

---

pass: 1, fail: 0, warn: 0, error: 0, skip: 0 

Example 2:
Apply following policy :

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: set-service-labels-env
spec:
  background: false
  rules:
  - name: set-service-env
    match:
      resources:
        kinds:
        - Deployment
        - DeploymentConfig
        - DaemonSet
        - StatefulSet
    exclude:
      resources:
        namespaces:
          - "kube*"
          - "openshift*"
          - "kube-*"
          - "openshift-*"
    preconditions:
      all:
        - key: "{{ request.operation }}"
          operator: Equals
          value: "CREATE"
        - key: "SERVICE"
          operator: NotIn
          value: "{{ request.object.spec.template.spec.containers[].env[].name }}"
    mutate:
      patchesJson6902: |-
       - op: add
         path: /spec/template/spec/containers/0/env/-1
         value: {"name": "SERVICE","value": "something" }

on following resource:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: my-dep2
  namespace: default
  labels:
    app: hello-openshift
spec:
  selector:
    matchLabels:
      app: hello-openshift
  replicas: 1
  template:
    metadata:
      labels:
        app: hello-openshift
        foo: bar
    spec:
      containers:
        - name: hello-openshift
          image: openshift/hello-openshift
          ports:
          - containerPort: 8080
          env:
          - name: test
            value: some-value

Command:

kyverno apply policy.yaml -r resource.yaml -s request.operation=CREATE  

Result:

applying 1 policy to 1 resource... 

mutate policy set-service-labels-env applied to default/Deployment/my-dep2:
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: hello-openshift
  name: my-dep2
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      app: hello-openshift
  template:
    metadata:
      labels:
        app: hello-openshift
        foo: bar
    spec:
      containers:
      - env:
        - name: test
          value: some-value
        - name: SERVICE
          value: something
        image: openshift/hello-openshift
        name: hello-openshift
        ports:
        - containerPort: 8080

---

pass: 1, fail: 0, warn: 0, error: 0, skip: 0 

Checklist

• I have read the contributing guidelines.
• [] I have added tests that prove my fix is effective or that my feature works.
• My PR contains new or altered behavior to Kyverno and
  • [] I have added or changed the documentation myself in an existing PR and the link is:
  • I have raised an issue in kyverno/website to track the doc update and the link is:
    Change in apply command variables input | CLI website#219
  • [] I have read the PR documentation guide and followed the process including adding proof manifests to this PR.

Further Comments

[vyankyGH]

I have tested it. Looks Good for me