virtualization/.dmtlint.yaml at 0a0b61b8bafb8de6c42e212bbe9cab9b673c8179 · deckhouse/virtualization · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
global:
  linters-settings:
    documentation:
      impact: error
linters-settings:
  openapi:
    exclude-rules:
      enum:
        - "spec.versions[0].schema.openAPIV3Schema.properties.spec.properties.dataVolumeTemplates.items.properties.spec.properties.contentType"
        - "properties.logLevel"
        - "properties.logFormat"
        - "spec.versions[0].schema.openAPIV3Schema.properties.spec.properties.cloneStrategyOverride"
        - "spec.versions[0].schema.openAPIV3Schema.properties.spec.properties.contentType"
  rbac:
    exclude-rules:
      # We exclude RBAC rules for virt-operator and cdi-operator because they create ClusterRoles and ClusterRoleBindings with wildcards.
      # If we remove wildcard, virt-operator and cdi-operator will be unable to create them, as they do not have wildcard permissions themselves.
      wildcards:
        - kind: ClusterRole
          name: d8:virtualization:kubevirt-operator
        - kind: ClusterRole
          name: d8:containerized-data-importer:cdi-operator

      # We exclude RBAC rules for CDI and Kubevirt resources because they are used by upstream deployments.
      # Changing these rules will require patching upstream code.
      placement:
        - kind: ClusterRoleBinding
          name: d8:containerized-data-importer:cdi-operator
        - kind: ServiceAccount
          name: cdi-operator
        - kind: Role
          name: cdi-operator
        - kind: RoleBinding
          name: cdi-operator
        - kind: ServiceAccount
          name: kubevirt-operator
        - kind: Role
          name: kubevirt-operator
        - kind: RoleBinding
          name: kubevirt-operator
        - kind: RoleBinding
          name: virt-operator
        - kind: ClusterRole
          name: d8:containerized-data-importer:cdi-operator
      binding-subject:
        - cdi-sa
        - kubevirt-internal-virtualization-controller
        - kubevirt-internal-virtualization-handler
  module:
    exclude-rules:
      license:
        directories:
          - tools/addlicense/testdata
          - test/performance/ssh
          - test/e2e/legacy/testdata/sshkeys
  container:
    exclude-rules:
      seccomp-profile:
        - kind: Deployment
          name: virt-operator
          container: kube-rbac-proxy
        - kind: Deployment
          name: virt-operator
          container: virt-operator
        - kind: Deployment
          name: dvcr
          container: dvcr
        - kind: Deployment
          name: dvcr
          container: kube-rbac-proxy
        - kind: Job
          name: pre-delete-hook
          container: pre-delete-hook
        - kind: Deployment
          name: virtualization-controller
          container: virtualization-controller
        - kind: Deployment
          name: virtualization-controller
          container: kube-rbac-proxy
        - kind: Deployment
          name: cdi-operator
          container: kube-rbac-proxy
        - kind: Deployment
          name: cdi-operator
          container: cdi-operator
        - kind: Deployment
          name: virtualization-api
          container: virtualization-api