1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

6680 commits

Author SHA1 Message Date
gcp-cherry-pick-bot[bot]
d5c25fcdc2
fix(helm): add values for declaratively enabling PDBs (#8652) (#8658)
* fix(helm): add values for declaratively enabling PDBs



* update codegen docs



---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
2023-10-16 09:22:21 +00:00
gcp-cherry-pick-bot[bot]
456a164a30
fix(helm): add missing policyexceptions RBAC to background-controller (#8648) (#8657)
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-16 08:34:25 +00:00
shuting
6be88f3646
release v1.11.0-rc.2 (#8643)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-13 09:08:32 +00:00
shuting
a4e47ef6df
bump Go 1.21.3 (#8638)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 16:44:36 +00:00
gcp-cherry-pick-bot[bot]
4ba272452c
chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#8626) (#8636)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 15:54:11 +00:00
shuting
762f9396e1
release v1.11.0-rc.1 (#8634)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 13:39:14 +00:00
gcp-cherry-pick-bot[bot]
783b27d032
chore: bump cleanup policies to v2beta1 (#8621) (#8632)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-12 12:42:13 +00:00
gcp-cherry-pick-bot[bot]
26b99ceb82
feat: move crds to a subchart (#8623) (#8630)
* feat: move crds to a subchart



* update codegen



* update crd configs: annotations and install options



* update default crd installation configuration to true



* reset annotations



* update chart readme



* remove subchart crd install option



* update crd chart version



* configure crds labels



* fix chart yaml file



* revert crd subchart version to 0.0.0



* update install.yaml



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 11:19:53 +00:00
gcp-cherry-pick-bot[bot]
63b2376873
fix: allow dropping metrics, labels and configuring histogram bucket boundaries to avoid high cardinality. (#8569) (#8629)
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Co-authored-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-12 10:34:16 +00:00
gcp-cherry-pick-bot[bot]
6594e11caa
feat: move grafana dashboard to a subchart (#8619) (#8620)
* feat: move grafana dashboard to a subchart



* fix codegen



* fix: add dependencies



* fix codegen



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-11 22:35:34 +08:00
gcp-cherry-pick-bot[bot]
52f1452ec6
Revert "chore: bump cleanup policies to v2beta1 (#8594)" (#8609) (#8610)
This reverts commit fff3ad047e.

Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 15:53:22 +00:00
gcp-cherry-pick-bot[bot]
da29e0277a
chore: bump cleanup policies to v2beta1 (#8594) (#8607)
* chore: bump cleanup policies to v2beta1



* chore: remove the support of v2alpha1 cleanup policies



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 12:22:38 +00:00
gcp-cherry-pick-bot[bot]
b087eb8f18
refactor: common remote authenticator for notary and cosign (#8494) (#8605)
* refactor: common remote authenticator for notary and cosign



* fix: add user agent



* refactor: move getGCRRemoteOption out of BuildGCRRemoteOption



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 09:40:06 +00:00
gcp-cherry-pick-bot[bot]
a8cdb5a23b
refactor: use GetKind() from the cleanup policy interface (#8565) (#8604)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 09:01:58 +00:00
gcp-cherry-pick-bot[bot]
12df4bf32d
fix: use v2beta1 of policy exceptions (#8587) (#8603)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 08:11:47 +00:00
gcp-cherry-pick-bot[bot]
a848dafe7f
Refactor fuzzing utils and add 3 fuzzers (#8555) (#8586)
* Refactor fuzzing utils and add 3 fuzzers



* Fix lint issues



* use latest go-jmespath



* Check layer size (#8552)

* fix excessive logs



* check fetched layer size



* check sig layer size



---------




* fix lint issues



---------

Signed-off-by: AdamKorcz <adam@adalogics.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-10-06 08:00:13 +08:00
gcp-cherry-pick-bot[bot]
65527e2b4e
chore: bump kubectl-validate (#8548) (#8551)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 22:39:47 +02:00
Charles-Edouard Brétéché
0ac6b0bf61
release: v1.11.0-beta.4 (#8549)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 19:25:28 +00:00
gcp-cherry-pick-bot[bot]
468692a5b6
chore: enable policy exceptions by default (#8545) (#8550)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 18:20:04 +00:00
gcp-cherry-pick-bot[bot]
7d3bb309a0
refactor: remove openapi package (#8538) (#8547)
* refactor: openapi package



* kubectl validate



* rm



* fix



* fix



* go mod



* fix vscode



---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 17:25:20 +00:00
gcp-cherry-pick-bot[bot]
44859d9c47
fix: make tuf feature in chart consistent with others (#8542) (#8546)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:50:31 +00:00
gcp-cherry-pick-bot[bot]
f8d7d622af
fix(helm): skip deployment replicas validation in non-int value (#8539) (#8543)
* fix(helm): skip deployment replicas validation in non-int value



* fix



---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:22:54 +02:00
gcp-cherry-pick-bot[bot]
febc017b52
refactor: get the last execution time from the cleanup policy interface (#8531) (#8541)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 07:29:39 +00:00
gcp-cherry-pick-bot[bot]
a9f93134d5
fix: remove cronjobs from cleanup controller rbac (#8529) (#8534)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 17:45:52 +02:00
gcp-cherry-pick-bot[bot]
7dfb538568
fix: creating ClusterAdmissionReports fails for resources with colon in name (#8530) (#8532)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 12:21:00 +00:00
gcp-cherry-pick-bot[bot]
e788bf0c95
feat: remove the creation of cronjobs in cleanup controller (#8526) (#8528)
* feat: remove the creation of cronjobs in cleanup controller



* fix: use lastExecutionTime instead of nextExecutionTime



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-26 10:49:33 +00:00
Charles-Edouard Brétéché
ed7b2ec36e
release: v1.11.0-beta.3 (#8527)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-25 20:04:26 +00:00
gcp-cherry-pick-bot[bot]
1cd5d2d733
fix: only fetch pub keys when tlogs and scts are not ignored (cherry-pick #8521) (#8524)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-25 09:00:21 +00:00
Charles-Edouard Brétéché
39b8a2f5c2
release: 1.11.0-beta.2 (#8517)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 14:37:40 +00:00
gcp-cherry-pick-bot[bot]
974f45b43a
fix: image cache panic and cleanup (#8512) (#8514)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:42:07 +00:00
gcp-cherry-pick-bot[bot]
84d68ee0f1
feat: add cli package to load policy exceptions (#8508) (#8513)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 10:44:52 +00:00
gcp-cherry-pick-bot[bot]
ff0b118968
fix: disables TUF by default (#8509) (#8510)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-22 11:55:50 +02:00
gcp-cherry-pick-bot[bot]
7d71e1af32
fix: make sure we don't modify reports not owned by kyverno (#8502) (#8504)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:06:35 +08:00
gcp-cherry-pick-bot[bot]
fb9d44e7f4
fix: return gvk when loading resource (#8501) (#8503)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 03:45:23 +00:00
gcp-cherry-pick-bot[bot]
b08931a071
feat: add resource load funcs in cli (#8499) (#8500)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 22:06:08 +00:00
gcp-cherry-pick-bot[bot]
81f2646963
fix: webhookTimeout flag not clear (#8493) (#8497)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 19:54:22 +02:00
gcp-cherry-pick-bot[bot]
c0bc8cf6ff
feat: improve assertion and error messages (#8489) (#8491)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-21 13:37:08 +00:00
gcp-cherry-pick-bot[bot]
a3d4c05a8b
feat: add cli resource loader package (#8488) (#8490)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 12:36:30 +00:00
gcp-cherry-pick-bot[bot]
8439623887
fix: deep copy before validaitng (#8483) (#8486)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 10:19:56 +00:00
gcp-cherry-pick-bot[bot]
9ce117c21f
feat: add a package to convert unstructured into typed (#8484) (#8487)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 11:47:49 +02:00
gcp-cherry-pick-bot[bot]
3e597d7ede
chore: fix release (#8482) (#8485)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 10:25:54 +02:00
gcp-cherry-pick-bot[bot]
3a8f1df20c
fix: check subjects func (#8470) (#8481)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 03:54:49 +00:00
gcp-cherry-pick-bot[bot]
7a49dc8820
fix: release archive name template (#8475) (#8477)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 00:18:48 +00:00
gcp-cherry-pick-bot[bot]
1bcacc66a8
fix: make free disk space action configurable (#8478) (#8479)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:46:57 +00:00
Charles-Edouard Brétéché
10361343c5
release: fix chart versions for 1.11.0-beta.1 (#8476)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:13:47 +00:00
gcp-cherry-pick-bot[bot]
00ccc2325b
fix: publish images workflow (#8473) (#8474)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 22:40:20 +00:00
gcp-cherry-pick-bot[bot]
07e75621d4
fix: release workflow (#8471) (#8472)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 20:20:41 +00:00
gcp-cherry-pick-bot[bot]
31ed587996
chore: free disk space before running jobs (#8468) (#8469)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 19:41:00 +02:00
Charles-Edouard Brétéché
9ce8d37656
release: v1.11.0-beta.1 (#8463)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 13:56:34 +00:00
gcp-cherry-pick-bot[bot]
eec78d8f61
fix: image verify cache test (#8462) (#8467)
* fix: image verify cache test



* feat: print err message



* feat: clear mock



* feat: defer clear mock



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 15:14:31 +02:00