Files
kustomize/functions/examples/validator-resource-requests
Kubernetes Prow Robot 445622147f Merge pull request #4889 from fengshunli/vuln
fix: all module net and text dependent package CVE-2022-41717 and CVE-2022-32149 vulnerabilities
2023-01-09 11:45:29 -08:00
..

Validation

This is an example of implementing a validation function.

This example is written in go and uses the kyaml libraries for parsing the input and writing the output. Writing in go is not a requirement.

Function implementation

The function is implemented as an image, and built using make image.

The template is implemented as a go program, which reads a collection of input Resource configuration, and looks for invalid configuration.

Function invocation

The function is invoked by authoring a local Resource with metadata.annotations.[config.kubernetes.io/function] and running:

kustomize fn run local-resource/

This exists non-zero if there is an error.

Running the Example

Run the validator with:

kustomize fn run local-resource/

This will return an error:

cpu-requests missing for container nginx

Now uncomment the resource reservations and run again:

kustomize fn run local-resource/

This will return success