nixpkgs/pkgs/by-name/ky/kyverno/package.nix
2025-07-01 23:09:19 +00:00

59 lines
1.6 KiB
Nix

{
lib,
buildGoModule,
fetchFromGitHub,
installShellFiles,
testers,
kyverno,
}:
buildGoModule rec {
pname = "kyverno";
version = "1.14.4";
src = fetchFromGitHub {
owner = "kyverno";
repo = "kyverno";
rev = "v${version}";
hash = "sha256-hOYNHJfK3EMe6oC3ucymcK8uyu07asRZjYJxm4fN6x8=";
};
ldflags = [
"-s"
"-w"
"-X github.com/kyverno/kyverno/pkg/version.BuildVersion=v${version}"
"-X github.com/kyverno/kyverno/pkg/version.BuildHash=${version}"
"-X github.com/kyverno/kyverno/pkg/version.BuildTime=1970-01-01_00:00:00"
];
vendorHash = "sha256-HdHK70AELKdeVSyP1S2yHZad3vooRDDdxAOnzN6s0nQ=";
subPackages = [ "cmd/cli/kubectl-kyverno" ];
nativeBuildInputs = [ installShellFiles ];
postInstall = ''
# we have no integration between krew and kubectl
# so better rename binary to kyverno and use as a standalone
mv $out/bin/kubectl-kyverno $out/bin/kyverno
installShellCompletion --cmd kyverno \
--bash <($out/bin/kyverno completion bash) \
--zsh <($out/bin/kyverno completion zsh) \
--fish <($out/bin/kyverno completion fish)
'';
passthru.tests.version = testers.testVersion {
package = kyverno;
command = "kyverno version";
version = "v${version}"; # needed because testVersion uses grep -Fw
};
meta = {
description = "Kubernetes Native Policy Management";
mainProgram = "kyverno";
homepage = "https://kyverno.io/";
changelog = "https://github.com/kyverno/kyverno/releases/tag/v${version}";
license = lib.licenses.asl20;
maintainers = with lib.maintainers; [ bryanasdev000 ];
};
}