* feat: kubesphere 4.0 Signed-off-by: ci-bot <ci-bot@kubesphere.io> * feat: kubesphere 4.0 Signed-off-by: ci-bot <ci-bot@kubesphere.io> --------- Signed-off-by: ci-bot <ci-bot@kubesphere.io> Co-authored-by: ks-ci-bot <ks-ci-bot@example.com> Co-authored-by: joyceliu <joyceliu@yunify.com>
44 lines
963 B
Go
44 lines
963 B
Go
// Copyright 2023 The OPA Authors. All rights reserved.
|
|
// Use of this source code is governed by an Apache2
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package rego
|
|
|
|
import (
|
|
"context"
|
|
"sync"
|
|
|
|
"github.com/open-policy-agent/opa/ast"
|
|
"github.com/open-policy-agent/opa/ir"
|
|
)
|
|
|
|
var targetPlugins = map[string]TargetPlugin{}
|
|
var pluginMtx sync.Mutex
|
|
|
|
type TargetPlugin interface {
|
|
IsTarget(string) bool
|
|
PrepareForEval(context.Context, *ir.Policy, ...PrepareOption) (TargetPluginEval, error)
|
|
}
|
|
|
|
type TargetPluginEval interface {
|
|
Eval(context.Context, *EvalContext, ast.Value) (ast.Value, error)
|
|
}
|
|
|
|
func (r *Rego) targetPlugin(tgt string) TargetPlugin {
|
|
for _, p := range targetPlugins {
|
|
if p.IsTarget(tgt) {
|
|
return p
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func RegisterPlugin(name string, p TargetPlugin) {
|
|
pluginMtx.Lock()
|
|
defer pluginMtx.Unlock()
|
|
if _, ok := targetPlugins[name]; ok {
|
|
panic("plugin already registered " + name)
|
|
}
|
|
targetPlugins[name] = p
|
|
}
|