Rego function to define variables

Question

For several rules, we need to define the same set of variables. In the example, these are "ns", "externaldns", "svc", "nssvc". How could we take these definitions away from each rule, maybe into a function, and then just call the function once in every rule?

    violation[{"msg": msg}] {
      ns := input.review.object.metadata.namespace
      externaldns := input.review.object.metadata.annotations["external-dns.alpha.kubernetes.io/hostname"]
      svc := input.review.object.metadata.name
      nssvc := sprintf("%v-%v", [ns,svc])
      not startswith(externaldns, svc)
      startswith(svc, ns)
      not endswith(ns, "-system")
      msg := "some message"
    }

Devoops · Accepted Answer · 2022-04-05 19:17:12Z

1

You could just move the common variables/rules out of the rule body, like:

ns := input.review.object.metadata.namespace
externaldns := input.review.object.metadata.annotations["external-dns.alpha.kubernetes.io/hostname"]
svc := input.review.object.metadata.name
nssvc := sprintf("%v-%v", [ns,svc])

violation[{"msg": msg}] {
    not startswith(externaldns, svc)
    startswith(svc, ns)
    not endswith(ns, "-system")
    msg := "some message"
}

If you'd like to move some of into functions, that would be doable too, i.e:

annotation(key) = value {
    value = input.review.object.metadata.annotations[key]
}

violation[{"msg": msg}] {
    externaldns := annotation("external-dns.alpha.kubernetes.io/hostname")
    # ...
}

answered Apr 5, 2022 at 19:17

Devoops

2,45510 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Rego function to define variables

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related