virtualization/.dmtlint.yaml at main · deckhouse/virtualization · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
global:
  linters-settings:
    documentation:
      impact: error
linters-settings:
  openapi:
    exclude-rules:
      enum:
        - "spec.versions[0].schema.openAPIV3Schema.properties.spec.properties.dataVolumeTemplates.items.properties.spec.properties.contentType"
        - "properties.logLevel"
        - "properties.logFormat"
        - "spec.versions[0].schema.openAPIV3Schema.properties.spec.properties.cloneStrategyOverride"
        - "spec.versions[0].schema.openAPIV3Schema.properties.spec.properties.contentType"
  rbac:
    exclude-rules:
      # We exclude RBAC rules for virt-operator because it creates ClusterRoles and ClusterRoleBindings with wildcards.
      # If we remove wildcard, virt-operator will be unable to create them, as it does not have wildcard permissions itself.
      wildcards:
        - kind: ClusterRole
          name: d8:virtualization:kubevirt-operator

      # We exclude RBAC rules for Kubevirt resources because they are used by upstream deployments.
      # Changing these rules will require patching upstream code.
      placement:
        - kind: ServiceAccount
          name: kubevirt-operator
        - kind: Role
          name: kubevirt-operator
        - kind: RoleBinding
          name: kubevirt-operator
        - kind: RoleBinding
          name: virt-operator
      binding-subject:
        - kubevirt-internal-virtualization-controller
        - kubevirt-internal-virtualization-handler
  module:
    exclude-rules:
      license:
        directories:
          - tools/addlicense/testdata
          - test/performance/ssh
          - images/dvcr-artifact/staging
          - images/pvc-artifact/staging
  container:
    exclude-rules:
      readiness-probe:
        - kind: Deployment
          name: dvcr
          container: dvcr-garbage-collection
      liveness-probe:
        - kind: Deployment
          name: dvcr
          container: dvcr-garbage-collection
  no-cyrillic:
    exclude-rules:
      files:
        - templates/security-events.yaml # Ru information for docs
  templates:
    exclude-rules:
      # These mount-points.yaml directories pre-create mount points for containerd strict mode.
      # They are consumed by pods that are NOT rendered from this module's Helm templates:
      # virt-launcher (created per-VM by KubeVirt at runtime), dvcr importer/uploader (created on
      # demand by the controllers), and the virt-* components deployed by virt-operator.
      # The mount-points linter only inspects Helm pod controllers, so it cannot see these
      # mountPaths and reports false positives.
      mount-points:
        - /auth
        - /certs
        - /data
        - /dev/bus/usb
        - /dvcr-auth
        - /dvcr-src-auth
        - /etc/docker/registry
        - /etc/libvirt
        - /etc/podinfo
        - /etc/ssl/docker
        - /etc/virt-api/certificates
        - /etc/virt-controller/certificates
        - /etc/virt-controller/exportca
        - /etc/virt-handler/clientcertificates
        - /etc/virt-handler/servercertificates
        - /etc/virt-operator/certificates
        - /etc/virtualization-api-proxy/certificates
        - /etc/virtualization-api/certificates
        - /etc/virtualization-audit/certificates
        - /init/usr/bin
        - /kubeconfig.local
        - /opt
        - /path
        - /pods
        - /profile-data
        - /proxycerts
        - /run/cilium
        - /run/kubevirt
        - /run/kubevirt-libvirt-runtimes
        - /run/kubevirt-private
        - /scratch
        - /shared
        - /tmp/k8s-webhook-server/serving-certs
        - /usr/lib/modules
        - /var/cache/libvirt
        - /var/lib/kubelet/device-plugins
        - /var/lib/kubelet/plugins
        - /var/lib/kubelet/plugins_registry
        - /var/lib/kubelet/pods
        - /var/lib/kubevirt
        - /var/lib/kubevirt-node-labeller
        - /var/lib/libvirt
        - /var/lib/libvirt/qemu
        - /var/lib/libvirt/qemu/nvram
        - /var/lib/libvirt/swtpm
        - /var/lib/registry
        - /var/lib/swtpm-localca
        - /var/log/libvirt
        - /var/run/cdi