Suggestion: support skipping version

[levenleven]

Currently -skip allows providing a kind or version/kind

kubeconform/pkg/validator/validator.go

Lines 107 to 111 in ee7c498

	if _, ok := val.opts.SkipKinds[signature.GroupVersionKind()]; ok {
	return ok
	}
	_, ok := val.opts.SkipKinds[signature.Kind]
	return ok

In some cases it would be handy to be able to skip all resources from the api version altogether e.g.

-skip networking.istio.io/v1alpha3

instead of skipping kinds one by one like

-skip networking.istio.io/v1alpha3/DestinationRule,networking.istio.io/v1alpha3/VirtualService

Would you accept PR introducing such functionality?

[yannh]

Hi, could you maybe provide a diff to the "Usage" documentation to explain how you would see this being used first? Thanks!

[levenleven]

👋 Thanks for looking into this, I've updated the description hopefully it makes sense now. So basically the suggestion is to allow skipping the apiVersion.

Before:

-skip string
      comma-separated list of kinds or GVKs to ignore

After:

-skip string
      comma-separated list of kinds, api versions or GVKs to ignore

[wrdls]

Would like to see support for this as well.

My use case is with Gatekeeper.

This allows you to create OPA policies by first creating a templates.gatekeeper.sh/v1/ConstraintTemplate resource which contains a OpenAPIV3Schema schema and then one or more constraints.gatekeeper.sh/v1beta1/<MY_CUSTOM_CONSTRAINT> resources based on that template.

See https://open-policy-agent.github.io/gatekeeper/website/docs/howto#constraint-templates

I would like to ignore all constraints.gatekeeper.sh/v1beta1 because it's pretty much impossible to keep our schemas up to date with those constraint resources (or the list for -skip).