add environment variable to every container for a multi-container pod using rego

[zhoupoko2000]

Hello Team,
I am also working on it but I think since I am still learning, it is good to also ask the community so we learn from the best practice.

May I ask if any rego snippets that can be provided that to add environment variables to every container and init container in a multiple container pod?

thanks.

[srenatus]

Meta: I've converted this from an issue in OPA to a question here -- hope that's OK, I think this is the better venue. I wasn't sure if the category was correct, though: Did you mean this as a general OPA/Rego question (this category) or a Gatekeeper question?

[zhoupoko2000]

@srenatus this is a opa core question. But I have solved it. no worries. But still thank you for the coordination here.

[srenatus]

Cool, can you post your solution here for everyone's benefit?

[zhoupoko2000]

absolutely. just give me some time. as this is from my work. so I need to extract the basic code snippet/gist and re-type everything here.

[zhoupoko2000]

for mutating webhook framework, @tsandall provided many examples, e.g. open-policy-agent/opa#943
for the patches logic of this case, below is my solution.

`
patches[patch]{

some i
input.request.object.spec.containers[i]
envPath := sprinf("/spec/containers/%s/env", [format_int(i, 10)])
patch := [
	{
    "op": "add",
    "patch": envPath,
    "value": [{
    	"name": "test_env",
            "value": "true"
    }]
    }
]

}
`