nixpkgs/pkgs/applications/networking/cluster/kyverno/default.nix

51 lines
1.6 KiB
Nix

{ lib, buildGoModule, fetchFromGitHub, installShellFiles, testers, kyverno }:
buildGoModule rec {
pname = "kyverno";
version = "1.12.0";
src = fetchFromGitHub {
owner = "kyverno";
repo = "kyverno";
rev = "v${version}";
hash = "sha256-hFRqhw1iV9S13NQ7Y9SPeHHWZ/ls9fiiqlP3vuPeRlY=";
};
ldflags = [
"-s" "-w"
"-X github.com/kyverno/kyverno/pkg/version.BuildVersion=v${version}"
"-X github.com/kyverno/kyverno/pkg/version.BuildHash=${version}"
"-X github.com/kyverno/kyverno/pkg/version.BuildTime=1970-01-01_00:00:00"
];
vendorHash = "sha256-5tBHmHfBHTsAVDk3i0z2R2amTfOvWHJutTNW2ofGZuQ=";
subPackages = [ "cmd/cli/kubectl-kyverno" ];
nativeBuildInputs = [ installShellFiles ];
postInstall = ''
# we have no integration between krew and kubectl
# so better rename binary to kyverno and use as a standalone
mv $out/bin/kubectl-kyverno $out/bin/kyverno
installShellCompletion --cmd kyverno \
--bash <($out/bin/kyverno completion bash) \
--zsh <($out/bin/kyverno completion zsh) \
--fish <($out/bin/kyverno completion fish)
'';
passthru.tests.version = testers.testVersion {
package = kyverno;
command = "kyverno version";
version = "v${version}"; # needed because testVersion uses grep -Fw
};
meta = with lib; {
description = "Kubernetes Native Policy Management";
mainProgram = "kyverno";
homepage = "https://kyverno.io/";
changelog = "https://github.com/kyverno/kyverno/releases/tag/v${version}";
license = licenses.asl20;
maintainers = with maintainers; [ bryanasdev000 ];
};
}