mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
3748 commits 15 branches 540 tags 276 MiB
Commit graph

293 commits

Author SHA1 Message Date
shuting
f9eb85db26
Release 1.5.8 (#3090) 
* Fix CLI test/apply when any/all use namespaceSelector (#3050)

* Fix CLI test/apply when any/all use namespaceSelector
Fixes #3047

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* gofmt fix

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* tag v1.5.8

Signed-off-by: ShutingZhao <shuting@nirmata.com>

Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-01-27 02:08:58 +08:00
shuting
03ba19e985
tag v1.5.7 (#3079) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-25 12:39:46 +08:00
ShutingZhao
c627f15f5d tag v1.5.6 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-24 21:45:47 +08:00
shuting
c2038e658b
tag v1.5.5 (#3030) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-21 02:36:09 +08:00
shuting
cd34e1cd73
Release v1.5.5-rc1 (#3028) 
* tag v1.5.5-rc1

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add CHANGELOG

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-20 11:37:03 +08:00
shuting
de52faea8d
tag v1.5.4 (#2965) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-12 16:43:41 +08:00
shuting
dbdc4f42f5
Cherry-pick and release v1.5.4-rc2 (#2961) 
* Added TLS annotation check in the initContainer (#2956)

* Added TLS annotation check in the initContainer

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>

* Error checks

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>

* Refactor annotation addition code

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>

* Strict error reporting

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>

* Error handling for Secrets

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>

* Updated error conditions

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>

* Update for nil error

Signed-off-by: Kumar Mallikarjuna <kumar@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>

* tag v1.5.4-rc2

Signed-off-by: ShutingZhao <shuting@nirmata.com>

Co-authored-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2022-01-11 18:23:20 +08:00
shuting
30eec81b63
release v1.5.4-rc1 (#2937) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-08 06:13:52 +08:00
shuting
c769c24391
release v1.5.3 (#2926) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-07 15:07:55 +08:00
shuting
3c48fd9c81
release v1.5.3-rc1 (#2919) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-06 18:35:36 +08:00
treydock
f2d37aa467 Ensure Helm chart networkpolicy is valid by default (#2827) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: shuting <shutting06@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-06 17:43:22 +08:00
shuting
c876298c5d
release v1.5.2 (#2815) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2021-12-10 04:02:34 +00:00
ShutingZhao
ad3603b652 release v1.5.2-rc5 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2021-12-09 16:22:01 +08:00
ShutingZhao
83ef767f39 tag v1.5.2-rc4 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-12-07 18:59:52 +08:00
shuting
4d01f3ed96
Release 1.5.2-rc3 (#2785) 
* switched to default serve mux (#2592)

Signed-off-by: Siddharth Lal <siddharthlal25@gmail.com>

* publish image on new tags

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* release v1.5.2-rc3

Signed-off-by: ShutingZhao <shutting06@gmail.com>

Co-authored-by: Siddharth Lal <siddharthlal25@gmail.com>
 2021-12-03 14:28:20 +05:30
shuting
dc2bc73598
release v1.5.2-rc2 (#2770) 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-11-30 08:16:25 +00:00
Vyankatesh Kudtarkar
be4d0cf31c
fix hardcoded clusterrole name issue (#2728) 2021-11-16 19:29:07 +08:00
ShutingZhao
54cb50bc9d release v1.5.2-rc1 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-11-16 10:35:35 +08:00
shuting
b4e136f103 cherry-pick 04189e450c 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-11-11 14:58:14 -08:00
treydock
4a2d3f07e3 cherry-pick 6c46ffffd9 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-11-11 14:55:44 -08:00
ShutingZhao
b5e17ee05f tag v1.5.1 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-25 21:50:54 -07:00
ShutingZhao
3714c9a933 tag v1.5.0 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-20 12:10:34 -07:00
ShutingZhao
d3d9464da1 tag v1.5.0-rc4 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-19 10:40:24 -07:00
ShutingZhao
5df903e34e tag v1.5.0-rc3 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-18 15:59:47 -07:00
ShutingZhao
857842b79d release 1.5.0-rc2 2021-10-15 10:14:04 -07:00
ShutingZhao
eddd258a40 release v1.5.0-rc1 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-07 16:04:08 -07:00
shuting
9dc2c2b4bf
Bugfixes - handle verifyImage rules for webhooks configurations (#2501) 
* dynamic webhooks for verifyImages rule

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add namespace env to the initContainer

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add debug log

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* update operator schema validation tag

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* set policy to ready if auto-update-webhook disabled

Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-07 13:50:30 -07:00
Jim Bugwadia
0bb35aa302 merge main 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 10:51:43 -07:00
Anushka Mittal
3914c513a8
Changing flag names for consistency (#2467) 
* changing flag names for consistency

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* changes for backward compatibility

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* updated the CHANGELOG.md

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-10-06 10:32:48 -07:00
Jim Bugwadia
7c57ac24e6 update CRDs 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 00:58:45 -07:00
shuting
b10947b975
Dynamic webhooks (#2425) 
* support k8s 1.22, update admissionregistration.k8s.io/v1beta1  to admissionregistration.k8s.io/v1

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - add failurePolicy to policy spec; - fix typo

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - add schema validation for failurePolicy; - add a printer column

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* set default failure policy to fail if not defined

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* resolve conflicts

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix missing type for printerColumn

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* refactor policy controller

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add webhook config manager

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - build webhook objects per policy update; - add fail webhook to default webhook configurations

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix panic on policy update

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* build default webhook: match empty if autoUpdateWebhooks is enabled, otherwise match all

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - set default webhook configs rule to empty; - handle policy deletion

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* reset webhook config if policies with a specific failurePolicy are cleaned up

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* handle wildcard pocliy

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* update default webhook timeout to 10s

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* cleanups

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* added webhook informer to re-create it immediately if missing

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* update tag webhookTimeoutSeconds description

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix e2e tests

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix linter issue

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* correct metric endpoint

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add pol.generate.kind to webhooks

Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-05 00:15:09 -07:00
Kumar Mallikarjuna
aba2e58f09
Added PodDisruptionBudget in kustomize & helm (Rebased) (#2463) 
* added pdb in helm & kustomize

Signed-off-by: Christopher Haar <chhaar30@googlemail.com>

* added pdb in helm & kustomize

Signed-off-by: Christopher Haar <chhaar30@googlemail.com>

* changed for comments

Signed-off-by: Christopher Haar <chhaar30@googlemail.com>

* Updating minAvailable

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Removed redundant lines

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Updated README

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Updated README

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

Co-authored-by: Christopher Haar <christopher@DKBs-MBP.localdomain>
Co-authored-by: Christopher Haar <chhaar30@googlemail.com>
 2021-10-04 22:39:24 -07:00
Kumar Mallikarjuna
b7c8368569
Adding deprecation warning for any and all (Rebased) (#2466) 
* added deprecation warning for any and all

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* Updated schemas

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

Co-authored-by: RinkiyaKeDad <arshsharma461@gmail.com>
 2021-10-04 11:57:39 -07:00
Jim Bugwadia
705e029ff0
Merge pull request #2443 from JimBugwadia/feature/foreach_validate 
Feature/foreach validate
 2021-10-04 00:05:36 -07:00
Jim Bugwadia
8b7d404ea2 generate CRDs and validate handling of skip/error 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-02 18:29:25 -07:00
Pooja Singh
c32002837d
supporting request object for generate policies (#2455) 
* supporting request object for generate policies

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated naming for operation

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* run make kustomize-crd

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-01 11:39:29 -07:00
shuting
af944b9cd5
Add new fields webhookTimeoutSeconds and failurePolicy to the policy Spec (#2456) 
* add tag WebhookTimeoutSeconds to policy spec

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add spec.failurePolicy

Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-09-29 20:53:34 -07:00
Anushka Mittal
dc6694029c
Update anti-affinity to the soft limit (#2441) 2021-09-28 14:00:49 -07:00
Naman Lakhwani
63f5c09297
NetworkPolicy: from should be an array of objects (#2423) 2021-09-24 11:22:57 -07:00
ShutingZhao
ee10ab66b0 update policy.status subresource 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-09-23 16:13:27 -07:00
treydock
e1daf2085d
Switch Helm CRDs back to kyverno chart and move Policies to dedicated chart (#2357) 
* Switch Helm CRDs back to kyverno chart and move Policies to dedicate chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix policies chart labels

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Remove README items moved to kyverno-policies chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-09-22 13:56:10 -07:00
Pooja Singh
adb785831f
fix | e2e test cases are failing with busybox image (#2422) 
* removing charts from push and pull ignore

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated tag replace logic

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* linting fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-09-21 13:07:46 -07:00
Ernesto R. C. Pereda
d6a6974a5f
Update README.md (#2419) 2021-09-21 11:41:22 -07:00
Sachin
7bb8d956d8
remove not consistent kyverno ConfigMap name (#2418) 
Signed-off-by: slayer321 <sachin.maurya7666@gmail.com>
 2021-09-21 20:48:48 +05:30
Morgan Hoban
f52ea45331
allows for configuration of test image through chart values (#2410) 
Signed-off-by: Morgan Hoban <morgan.hoban@sage.com>
 2021-09-21 12:30:41 +05:30
Arsh Sharma
42d4948537
adding pod anti-affinity to Kyverno (#1985) 
* added for deployment.yaml

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added for helm

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* to be tested

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed not needed ends

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* made changes to pass the test

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed hard from values.yaml

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added condition to disable pod-affinity

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* changed with to if condition

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small fix for trailing spaces

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

Co-authored-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-09-20 15:52:46 +05:30
Jim Bugwadia
23af42dc92
allow alternate image repositories (#2393) 
* allow alternate image repositories

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* generate CRD YAMLs

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-09-16 16:11:38 -07:00
Shuting Zhao
ec050241fc release v1.4.3 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-09-16 11:56:52 -07:00
Shuting Zhao
0660db94bd release v1.4.3-rc2 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-09-14 20:35:58 -07:00
Shuting Zhao
e6317da597 update kyverno-crds chart version 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-09-13 15:27:43 -07:00