github.com/argoproj/argo-cd/v3@v3.2.1/applicationset/controllers/template/patch.go (about)

     1  package template
     2  
     3  import (
     4  	"encoding/json"
     5  	"fmt"
     6  
     7  	"k8s.io/apimachinery/pkg/util/strategicpatch"
     8  
     9  	"github.com/argoproj/argo-cd/v3/applicationset/utils"
    10  	appv1 "github.com/argoproj/argo-cd/v3/pkg/apis/application/v1alpha1"
    11  )
    12  
    13  func applyTemplatePatch(app *appv1.Application, templatePatch string) (*appv1.Application, error) {
    14  	appString, err := json.Marshal(app)
    15  	if err != nil {
    16  		return nil, fmt.Errorf("error while marhsalling Application %w", err)
    17  	}
    18  
    19  	convertedTemplatePatch, err := utils.ConvertYAMLToJSON(templatePatch)
    20  	if err != nil {
    21  		return nil, fmt.Errorf("error while converting template to json %q: %w", convertedTemplatePatch, err)
    22  	}
    23  
    24  	if err := json.Unmarshal([]byte(convertedTemplatePatch), &appv1.Application{}); err != nil {
    25  		return nil, fmt.Errorf("invalid templatePatch %q: %w", convertedTemplatePatch, err)
    26  	}
    27  
    28  	data, err := strategicpatch.StrategicMergePatch(appString, []byte(convertedTemplatePatch), appv1.Application{})
    29  	if err != nil {
    30  		return nil, fmt.Errorf("error while applying templatePatch template to json %q: %w", convertedTemplatePatch, err)
    31  	}
    32  
    33  	finalApp := appv1.Application{}
    34  	err = json.Unmarshal(data, &finalApp)
    35  	if err != nil {
    36  		return nil, fmt.Errorf("error while unmarhsalling patched application: %w", err)
    37  	}
    38  
    39  	// Prevent changes to the `project` field. This helps prevent malicious template patches
    40  	finalApp.Spec.Project = app.Spec.Project
    41  
    42  	return &finalApp, nil
    43  }