From 9f7ea45ea0ffc76be7793dbcb4730a98fa03bcf5 Mon Sep 17 00:00:00 2001
From: piny940 <83708535+piny940@users.noreply.github.com>
Date: Thu, 22 Aug 2024 13:33:17 +0900
Subject: [PATCH] fix ValidatingAdmissionPolicy's Validate func to return
 decision with valid Evaluation

---
 .../pkg/admission/plugin/policy/validating/validator.go          | 1 +
 1 file changed, 1 insertion(+)

diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/validating/validator.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/validating/validator.go
index c429ae22fcf..b11f2e8f4eb 100644
--- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/validating/validator.go
+++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/validating/validator.go
@@ -146,6 +146,7 @@ func (v *validator) Validate(ctx context.Context, matchedResource schema.GroupVe
 			decision.Message = fmt.Sprintf("failed messageExpression: %s", err)
 		} else if evalResult.EvalResult != celtypes.True {
 			decision.Action = ActionDeny
+			decision.Evaluation = EvalDeny
 			if validation.Reason == nil {
 				decision.Reason = metav1.StatusReasonInvalid
 			} else {