fixed attotaions for empty set

realshuting · Nov 25, 2020 · 40b40fb · 40b40fb
1 parent 9399ade
commit 40b40fb
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pkg/policy/validate.go b/pkg/policy/validate.go
@@ -302,6 +302,17 @@ func doMatchAndExcludeConflict(rule kyverno.Rule) bool {
 		return false
 	}
 
+	if rule.MatchResources.Annotations != nil && rule.ExcludeResources.Annotations != nil {
+		if !(reflect.DeepEqual(rule.MatchResources.Annotations, rule.ExcludeResources.Annotations)) {
+			return false
+		}
+	}
+
+	if (rule.MatchResources.Annotations == nil && rule.ExcludeResources.Annotations != nil) ||
+		(rule.MatchResources.Annotations != nil && rule.ExcludeResources.Annotations == nil) {
+		return false
+	}
+
 	return true
 }