From 2ed104b2e559e0bf8a3ee73497c1b45d007ffd79 Mon Sep 17 00:00:00 2001
From: piny940 <83708535+piny940@users.noreply.github.com>
Date: Thu, 22 Aug 2024 13:33:17 +0900
Subject: [PATCH] fix ValidatingAdmissionPolicy's Validate func to return
 decision with valid Evaluation

Kubernetes-commit: 9f7ea45ea0ffc76be7793dbcb4730a98fa03bcf5
---
 pkg/admission/plugin/policy/validating/validator.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/admission/plugin/policy/validating/validator.go b/pkg/admission/plugin/policy/validating/validator.go
index c429ae22f..b11f2e8f4 100644
--- a/pkg/admission/plugin/policy/validating/validator.go
+++ b/pkg/admission/plugin/policy/validating/validator.go
@@ -146,6 +146,7 @@ func (v *validator) Validate(ctx context.Context, matchedResource schema.GroupVe
 			decision.Message = fmt.Sprintf("failed messageExpression: %s", err)
 		} else if evalResult.EvalResult != celtypes.True {
 			decision.Action = ActionDeny
+			decision.Evaluation = EvalDeny
 			if validation.Reason == nil {
 				decision.Reason = metav1.StatusReasonInvalid
 			} else {