1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 09:26:54 +00:00
kyverno/scripts/config/standard/kyverno.yaml

65 lines
1.1 KiB
YAML
Raw Normal View History

features:
policyExceptions:
enabled: true
namespace: "*"
omitEvents:
eventTypes: []
admissionController:
extraArgs:
v: 4
rbac:
clusterRole:
extraResources:
- apiGroups:
- '*'
resources:
- secrets
verbs:
- create
- update
- patch
- delete
- get
- list
feat: template background controller (#6157) * add make targets for background controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * template background controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix code-gen manifests Signed-off-by: ShutingZhao <shuting@nirmata.com> * remove unused code Signed-off-by: ShutingZhao <shuting@nirmata.com> * trim spaces Signed-off-by: ShutingZhao <shuting@nirmata.com> * Update Makefile Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: shuting <shutting06@gmail.com> * Update Makefile Signed-off-by: shuting <shutting06@gmail.com> * fix Signed-off-by: ShutingZhao <shuting@nirmata.com> * refactor: move resolvers into engine api package (#6162) Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * add rbac Signed-off-by: ShutingZhao <shuting@nirmata.com> * add more rbac Signed-off-by: ShutingZhao <shuting@nirmata.com> * add debug info Signed-off-by: ShutingZhao <shuting@nirmata.com> * add notes to helm install Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix permissions Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com> Signed-off-by: shuting <shutting06@gmail.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com> Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2023-02-01 00:12:34 +08:00
backgroundController:
refactor: update updaterequest to be created for each policy (#10793) * chore: remove v1beta1 updaterequest definitions Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: update UR to map a policy instead a rule; adapt UR mapping changes for admission review Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: update code-gen Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: linter Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: remove unused function Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: add missing files Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: add missing files Signed-off-by: ShutingZhao <shuting@nirmata.com> * chore: update ur in policy controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: update crds Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: adapt ur changes in the background controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: linter Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: more linter Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: modify mapping relationship for deletion events Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: remedy missing target for policy application Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: fetching logic for triggers Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: clean up targets upon policy deletion Signed-off-by: ShutingZhao <shuting@nirmata.com> * chore: update crds Signed-off-by: ShutingZhao <shuting@nirmata.com> * merge main Signed-off-by: ShutingZhao <shuting@nirmata.com> * merge main Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: adds delay before assertion Signed-off-by: ShutingZhao <shuting@nirmata.com> * chore: update docs Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: wrong yaml format Signed-off-by: ShutingZhao <shuting@nirmata.com> * feat: update error handling logic Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix(attempt): enable more debug info Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix(attempt): enable debug log Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix(attempt): enable debug log Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix(attempt): enable debug log Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: makefile to update ur crds Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: generate existing Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: skip empty ur generation Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix: update install.yaml Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-08-14 01:14:06 +08:00
extraArgs:
v: 4
feat: template background controller (#6157) * add make targets for background controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * template background controller Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix code-gen manifests Signed-off-by: ShutingZhao <shuting@nirmata.com> * remove unused code Signed-off-by: ShutingZhao <shuting@nirmata.com> * trim spaces Signed-off-by: ShutingZhao <shuting@nirmata.com> * Update Makefile Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: shuting <shutting06@gmail.com> * Update Makefile Signed-off-by: shuting <shutting06@gmail.com> * fix Signed-off-by: ShutingZhao <shuting@nirmata.com> * refactor: move resolvers into engine api package (#6162) Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * add rbac Signed-off-by: ShutingZhao <shuting@nirmata.com> * add more rbac Signed-off-by: ShutingZhao <shuting@nirmata.com> * add debug info Signed-off-by: ShutingZhao <shuting@nirmata.com> * add notes to helm install Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix permissions Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com> Signed-off-by: shuting <shutting06@gmail.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com> Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2023-02-01 00:12:34 +08:00
rbac:
clusterRole:
extraResources:
- apiGroups:
- '*'
resources:
- configmaps
More kuttl standard generate tests (#6332) * add test cpol-data-sync-delete-downstream Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test cpol-data-sync-modify-downstream Signed-off-by: Chip Zoller <chipzoller@gmail.com> * rename to be more descriptive Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-sync-delete-downstream Signed-off-by: Chip Zoller <chipzoller@gmail.com> * cleanup test Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test cpol-data-nosync-delete-rule Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test cpol-data-nosync-delete-policy Signed-off-by: Chip Zoller <chipzoller@gmail.com> * fix formatting Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add Kyverno kuttl specific snippets to BEST_PRACTICES Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add reminder note Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test cpol-data-nosync-modify-rule Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test cpol-data-nosync-modify-downstream Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-nosync-create-policy-invalid Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-sync-delete-policy Signed-off-by: Chip Zoller <chipzoller@gmail.com> * separate files Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-nosync-delete-downstream Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-nosync-delete-rule Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-nosync-delete-policy Signed-off-by: Chip Zoller <chipzoller@gmail.com> * fix description Signed-off-by: Chip Zoller <chipzoller@gmail.com> * fix description Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-nosync-modify-rule Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test pol-data-nosync-modify-downstream Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test existing-basic-create-data Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test existing-basic-create-preconditions-data Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add basic clone multiple test Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add delays Signed-off-by: ShutingZhao <shuting@nirmata.com> * add generate permissions Signed-off-by: ShutingZhao <shuting@nirmata.com> * reorder source and ClusterPolicy, cleanup removal, README update Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add test for cascading-mutation Signed-off-by: Chip Zoller <chipzoller@gmail.com> * Change creation order, remove cleanup Signed-off-by: Chip Zoller <chipzoller@gmail.com> * increase sleep Signed-off-by: Chip Zoller <chipzoller@gmail.com> * remove unused test files Signed-off-by: Chip Zoller <chipzoller@gmail.com> * remove networkpolicies from perms Signed-off-by: Chip Zoller <chipzoller@gmail.com> * add networkpolicies back Signed-off-by: Chip Zoller <chipzoller@gmail.com> * clarify readme Signed-off-by: Chip Zoller <chipzoller@gmail.com> --------- Signed-off-by: Chip Zoller <chipzoller@gmail.com> Signed-off-by: ShutingZhao <shuting@nirmata.com> Co-authored-by: shuting <shuting@nirmata.com>
2023-02-27 09:39:18 -05:00
- networkpolicies
- resourcequotas
- secrets
- roles
- rolebindings
- limitranges
- namespaces
- nodes
- nodes/status
- pods
Allow setting verbs for clusterrole extraresources on backgroundController (#7380) * fix webhookCleanup enable switch syntax Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de> * chore: cleanup codecov workflow (#5829) * chore: cleanup codecov workflow Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * chore: cleanup codecov workflow Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com> Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de> * updated template file to match with syntax fix Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de> * align definition of clusterRole extraResources for backgroundController with adminissionController Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de> * update test routine clusterRole definition Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de> * Update scripts/config/standard/kyverno.yaml fine for me Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de> * Update charts/kyverno/values.yaml fine for me :+1: Co-authored-by: shuting <shutting06@gmail.com> Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de> --------- Signed-off-by: Raul Garcia Sanchez <info@raulgarcia.de> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Raúl Garcia Sanchez <info@raulgarcia.de> Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com> Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com> Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: shuting <shutting06@gmail.com>
2023-06-02 11:47:38 +02:00
verbs:
- create
- update
- patch
- delete
- get
- list
cleanupController:
rbac:
clusterRole:
extraResources:
- apiGroups:
- ''
resources:
- pods
feat: add ttl controller (#7821) * added the ttl controller Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fixed label and vars Signed-off-by: Ved Ratan <vedratan8@gmail.com> * added logger Signed-off-by: Ved Ratan <vedratan8@gmail.com> * applied fixes Signed-off-by: Ved Ratan <vedratan8@gmail.com> * removed comments Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * more lint fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * applied changes Signed-off-by: Ved Ratan <vedratan8@gmail.com> * minor fixes Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix logger, separate parse logic Signed-off-by: Ved Ratan <vedratan8@gmail.com> * added tests Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * added kuttl tests, validation utilities Signed-off-by: Ved Ratan <vedratan8@gmail.com> * commented code Signed-off-by: Ved Ratan <vedratan8@gmail.com> * renamed tests Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix test Signed-off-by: Ved Ratan <vedratan8@gmail.com> * created log.go Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix log.go Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * added README.md refactor code Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * added validation webhook Signed-off-by: Ved Ratan <vedratan8@gmail.com> * label-validation fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * added flag, updated verbs Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * updated verbs Signed-off-by: Ved Ratan <vedratan8@gmail.com> * updated helm chart Signed-off-by: Ved Ratan <vedratan8@gmail.com> * test fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * linter Signed-off-by: Ved Ratan <vedratan8@gmail.com> * imporoved webhook validation Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * linter fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * lint fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix codegen Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * webhook names and path constants Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * constant label Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix label selector Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * kuttl test fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * helm docs Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix controller logger Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix: manager logger Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix failure policy Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * kuttl tests Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * move kuttl tests in separate job Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * remove rbac steps Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * remove configmaps from core cluster role Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix logger Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * rename flag Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * kuttl Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix error Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix linter Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Ved Ratan <vedratan8@gmail.com> Signed-off-by: Ved Ratan <82467006+VedRatan@users.noreply.github.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-02 20:17:40 +05:30
verbs:
- list
- delete