ensure path exists when adding mutations (#789)

Author: rbren

checks/cpuLimitsMissing.yaml

@@ -26,12 +26,9 @@ schema:
               not:
                 const: ''
 mutations:
-  - op: add
-    path: /resources/limits
-    value: {}
   - op: add
     path: /resources/limits/cpu
     value: 100m
 comments:
   - find: "cpu: 100m"
-    comment: "TODO: Set this to the amount of CPU you want to reserve for your workload"
+    comment: "TODO: Set this to the maximum amount of CPU you want your workload to use"

checks/cpuRequestsMissing.yaml

@@ -26,12 +26,9 @@ schema:
               not:
                 const: ''
 mutations:
-  - op: add
-    path: /resources/requests
-    value: {}
   - op: add
     path: /resources/requests/cpu
     value: 100m
 comments:
   - find: "cpu: 100m"
-    comment: "TODO: Set this to the amount of CPU you want to reserve for your workload"
+    comment: "TODO: Set this to the amount of CPU you want to reserve for your workload"

checks/memoryLimitsMissing.yaml

@@ -26,12 +26,9 @@ schema:
               not:
                 const: ''
 mutations:
-  - op: add
-    path: /resources/limits
-    value: {}
   - op: add
     path: /resources/limits/memory
     value: "512Mi"
 comments:
   - find: "memory: 512Mi"
-    comment: "TODO: Set this to the amount of Memory you want to reserve for your workload"
+    comment: "TODO: Set this to the maximum amount of memory you want your workload to use"

checks/memoryRequestsMissing.yaml

@@ -26,12 +26,9 @@ schema:
               not:
                 const: ''
 mutations:
-  - op: add
-    path: /resources/requests
-    value: {}
   - op: add
     path: /resources/requests/memory
     value: "512Mi"
 comments:
   - find: "memory: 512Mi"
-    comment: "TODO: Set this to the amount of Memory you want to reserve for your workload"
+    comment: "TODO: Set this to the amount of Memory you want to reserve for your workload"

checks/runAsRootAllowed.yaml

@@ -51,6 +51,6 @@ schema:
             securityContext:
               $ref: "#/definitions/goodSecurityContext"
 mutations:
-  - op: replace
+  - op: add
     path: /securityContext/runAsNonRoot
-    value: true
+    value: true

pkg/mutation/mutate.go

@@ -27,7 +27,10 @@ func ApplyAllSchemaMutations(conf *config.Configuration, resourceProvider *kube.
 	if err != nil {
 		return resource, err
 	}
-	jsonByte, err = patch.Apply(resByte)
+	jsonByte, err = patch.ApplyWithOptions(resByte, &jsonpatchV5.ApplyOptions{
+		AllowMissingPathOnRemove: true,
+		EnsurePathExistsOnAdd: true,
+	})
 	if err != nil {
 		return resource, err
 	}