Function installPolicy

pkg/gator/policy/client/install.go:146–205

(ctx context.Context, k8sClient Client, fetcher catalog.Fetcher, policy *catalog.Policy, bundleName string, opts *InstallOptions, result *InstallResult)

}

func installPolicy(ctx context.Context, k8sClient Client, fetcher catalog.Fetcher, policy *catalog.Policy, bundleName string, opts *InstallOptions, result *InstallResult) (skipped bool, err error) {
	// Fetch template YAML
	templateData, err := fetcher.FetchContent(ctx, policy.TemplatePath)
	if err != nil {
		return false, fmt.Errorf("fetching template: %w", err)
	}

	// Parse template
	template := &unstructured.Unstructured{}
	if err := yaml.Unmarshal(templateData, &template.Object); err != nil {
		return false, fmt.Errorf("parsing template YAML: %w", err)
	}

	// Check for existing template
	templateAlreadyInstalled := false
	if !opts.DryRun {
		existing, err := k8sClient.GetTemplate(ctx, template.GetName())
		if err == nil {
			// Template exists - check if managed by gator
			if !labels.IsManagedByGator(existing) {
				return false, &ConflictError{
					ResourceKind: "ConstraintTemplate",
					ResourceName: template.GetName(),
				}
			}
			// Check if same version
			existingVersion := labels.GetPolicyVersion(existing)
			if existingVersion == policy.Version {
				templateAlreadyInstalled = true
			}
		} else if !apierrors.IsNotFound(err) {
			return false, fmt.Errorf("checking existing template: %w", err)
		}
	}

	// Add labels and annotations
	labels.AddManagedLabels(template, policy.Version, bundleName, catalog.DefaultRepository)

	// Install or update template if not already at same version
	if !opts.DryRun && !templateAlreadyInstalled {
		if err := k8sClient.InstallTemplate(ctx, template); err != nil {
			return false, fmt.Errorf("installing template: %w", err)
		}
	}

	// Install constraint if bundle has a constraint path defined
	constraintPath := policy.BundleConstraints[bundleName]
	if bundleName != "" && constraintPath != "" {
		if err := installConstraint(ctx, k8sClient, fetcher, policy, constraintPath, bundleName, opts, result, template); err != nil {
			return false, err
		}
	}

	// Return whether this policy was skipped (already at same version)
	if templateAlreadyInstalled && (bundleName == "" || constraintPath == "") {
		return true, nil
	}