Merge pull request #74 from Peefy/psp-check-supplemental-groups-modules

feat: add psp-check-supplemental-groups-modules
kcl-lang · Nov 13, 2023 · 0c1128a · 0c1128a
2 parents 6e48ce8 + abff52f
commit 0c1128a
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 0 deletions.
diff --git a/psp-check-supplemental-groups/README.md b/psp-check-supplemental-groups/README.md
@@ -0,0 +1,7 @@
+## Introduction
+
+`psp-check-supplemental-groups` is a KCL PSP validation package. 
+
+## Resource
+
+The Code source and document are [here](https://github.com/kcl-lang/modules/tree/main/psp-check-supplemental-groups)
diff --git a/psp-check-supplemental-groups/kcl.mod b/psp-check-supplemental-groups/kcl.mod
@@ -0,0 +1,5 @@
+[package]
+name = "psp-check-supplemental-groups"
+version = "0.1.0"
+description = "`psp-check-supplemental-groups` is a kcl validation package"
+
diff --git a/psp-check-supplemental-groups/kcl.mod.lock b/psp-check-supplemental-groups/kcl.mod.lock
diff --git a/psp-check-supplemental-groups/main.k b/psp-check-supplemental-groups/main.k
@@ -0,0 +1,8 @@
+# Define the validation function
+validate = lambda item: {str:} {
+    if item.kind == "Pod":
+        assert item.spec?.securityContext?.supplementalGroups in ["100-200", "500-600"]
+    item
+}
+# Validate All resource
+items = [validate(i) for i in option("items") or []]