Shuting Zhao
2364ff1407
add reportRequest / clusterReportRequest
2020-10-22 16:15:43 -07:00
Jim Bugwadia
2c9a99b55d
fix mutation.go
2020-10-14 18:21:55 -07:00
Jim Bugwadia
4ea1126fce
remove docs and update README.md
2020-10-14 17:39:45 -07:00
Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
Mohan B E
51ac382c6c
Feature/configmaps var 724 ( #1118 )
...
* added configmap data substitution for foreground mutate and validate
* added configmap data substitution for foreground mutate and validate fmt
* added configmap lookup for background
* added comments to resource cache
* added configmap data lookup in preConditions
* added parse strings in In operator and configmap lookup docs
* added configmap lookup docs
* modified configmap lookup docs
2020-09-22 14:11:49 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen ( #1089 )
...
* add watch policy to clusterrole kyverno:customresources
* - improve auto-gen policy application logic - remove unused code
* move method to common util
* auto-gen rule for cronJob
* update doc
* set CronJob as default auto-gen pod controller
* - update doc; - fix test
* remove unused code
2020-09-01 09:11:20 -07:00
shuting
d6062fdd47
Add go fmt ( #1055 )
...
* remove empty flag
* format code
* revert change in install.yaml
2020-08-14 12:21:06 -07:00
Yuvraj
73840e3c5f
configrable rules added ( #1017 )
...
* configrable rules added
* fix exclude group logic from code
* flag added in yaml
* exclude username added
* exclude username added
* config interface implimented
* configure exclude username
* get role ref
* test case fixed
* panic fix
* move from interface to slice
* exclude added in mutate
* trim strings
* configmap changes added
* kustomize changes for configmap
* k8s resources added
2020-08-07 17:09:24 -07:00
shuting
39de46fe39
983 kustomize support ( #1026 )
...
* prototype - strategic merge patch
* add end to end test
* add engine strategic merge patch support
* set webhook reinvocationPolicy to IfNeeded
* refactor engine mutate code
* support JMESPath in strategic merge patch
* implement patchesJson6902
* update doc
* resolve pr comments
2020-08-05 09:11:23 -07:00
Pooja Singh
47aaf50717
Feature/CLI saving mutate results ( #1007 )
...
* saving mutated policy and resources in yaml
* removed saving mutated policy
* fixed file creation
* updated readme
* changed flags
2020-07-20 12:11:30 -07:00
shuting
87fa77fbcc
965 add validate audit handler ( #967 )
...
* store policy names cache to reduce lookup time
* add validate audit handler
* fix #958 , remove auto-gen annotation on Pod
* formatting code
* update processTime to readable format
* #586 , add back unit test
* update logging info
* remove unused interface
* handle generate policy in a single thread in weboook
* resolve pr comments
2020-07-09 11:48:34 -07:00
Jim Bugwadia
65193feccb
update logging, naming, and event retry ( #959 )
...
* update logging and naming
* check per policy patch count
2020-06-30 11:53:27 -07:00
shuting
abb51348cf
skip inserting auto-gen annotation to podController on UPDATE admission request ( #953 )
2020-06-25 17:24:10 -07:00
shuting
7ffeb6efca
skip generate violation on pre-exist pod ( #952 )
2020-06-25 09:52:54 -07:00
shuting
da943325fe
Ignore auto-gen annotation on Pod when processing DENY rule ( #944 )
...
* ignore auto-gen annotation on Pod when processing DENY rule
* remove unused code
2020-06-24 10:26:04 -07:00
shuting
1c5fc22aa0
Tag release 1.1.6 ( #911 )
...
* tag v1.1.6-rc5
* tag 1.1.6
2020-06-04 17:13:16 -07:00
shuting
b3a1e51a84
bug fix auto-gen annotation reported as violation ( #902 )
...
* fix auto-gen annotation reported as violation
* update log
2020-06-03 17:47:06 -07:00
Shuting Zhao
52d45ec3c5
fix resource schema not found error
2020-06-01 19:36:01 -07:00
Jim Bugwadia
838d02c475
Bugfix/659 support wildcards for namespaces ( #871 )
...
* - support wildcards for namespaces
* do not annotate resource, unless policy is an autogen policy
* close HTTP body
* improve messages
* remove policy store
Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.
We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.
* handle wildcard namespaces in background processing
* fix unit tests 1) remove platform dependent path usage 2) remove policy store
* add test case for mutate with wildcard namespaces
2020-05-26 10:36:56 -07:00
Shuting Zhao
3952aa5550
remove unused code
2020-05-21 08:49:33 -07:00
Shuting Zhao
34d05c58c2
PR fixes
2020-05-19 13:04:06 -07:00
Shuting Zhao
9eb2534d63
- fix pending delete for denying deletion rule - revert timeoutHandler - update log level
2020-05-19 00:14:23 -07:00
shravan
ad3fcb500f
775 circle ci fixes
2020-04-04 22:52:53 +05:30
shravan
ed45dc12c0
775 working prototype
2020-04-04 22:39:21 +05:30
shivkumar dudhani
d327309d72
refactor logging
2020-03-17 16:25:34 -07:00
shivkumar dudhani
1b1ab78f77
logs & access
2020-03-17 11:05:20 -07:00
shravan
bc84413f35
644 resolving merge conflicts
2020-02-19 10:44:14 +05:30
shivkumar dudhani
80c618bf98
Merge branch 'master' into 671_cleanUp_generate
2020-02-18 13:56:01 -08:00
shivkumar dudhani
5cee543755
refactor variable substitution
2020-02-14 11:59:28 -08:00
shravan
819ba3fb1b
644 returning detailed error from function in question, changes currently untested
2020-02-07 14:45:43 +05:30
shivkumar dudhani
f608d4db18
variable substitution on copy and retry generate resource creation
2020-02-04 12:13:41 -08:00
shravan
0d4b256d13
644 updating changes with revised understanding of issue, also removed alot of deadcode to make changes
2020-02-03 18:51:18 +05:30
shravan
3b37a61f5d
Revert "644 untested prototype changes"
...
This reverts commit 4021453760
2020-02-01 20:48:06 +05:30
shravan
4021453760
644 untested prototype changes
2020-01-30 16:12:26 +05:30
shravan
6762207fa7
Merge branch 'master' into 536_extend_cli
2020-01-29 14:26:44 +05:30
shuting
3343d73b76
linter fix ( #657 )
2020-01-27 08:58:53 -08:00
shravan
865eb57812
resolving merge conflicts
2020-01-25 16:38:12 +05:30
Shivkumar Dudhani
8c1d79ab28
linter suggestions ( #655 )
...
* cleanup phase 1
* linter fixes phase 2
2020-01-24 12:05:53 -08:00
shravan
d0da7a8ed4
Merge branch 'master' into 536_extend_cli
2020-01-17 09:50:11 +05:30
Shuting Zhao
5d3d27cafd
report violation for mutation failure only, not block the creation
2020-01-16 14:29:44 -08:00
Shuting Zhao
ba8030bec0
change to use validationFailureAction for the mutation failure action
2020-01-16 11:57:28 -08:00
shravan
f41b7124ac
fixing merge issues
2020-01-17 00:09:39 +05:30
shravan
79999c4948
extended cli
2020-01-17 00:05:15 +05:30
Shuting Zhao
77a6408f30
pass in patchedResource inside the same mutation rule
2020-01-15 18:15:48 -08:00
Shuting Zhao
4c83ab8b52
add more unit tests
2020-01-10 17:15:44 -08:00
Shuting Zhao
434ed20857
report violation in generate when path not present
2020-01-10 11:59:05 -08:00
Shuting Zhao
f78ca61859
generate violation in mutation when substitute path not present
2020-01-09 12:24:37 -08:00
Shuting Zhao
5924bcae40
remove duplicate structure definition
2020-01-08 10:44:41 -08:00
Shuting Zhao
472fa29fce
move mutation to subpackage pkg/engine/mutate
2020-01-07 17:06:17 -08:00
Shivkumar Dudhani
3cf9141f4d
593 feature ( #594 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* initial commit
* fix trailing quote in patch
* remove comments
* initial condition (equal & notequal)
* initial support for conditions
* initial support fo conditions in generate
* support precondition checks
* cleanup
* re-evaluate GR on namespace update using dynamic informers
* add status for generated resources
* display loaded variable SA
* support delete cleanup of generate request main resources
* fix log
* remove namespace from SA username
* support multiple variables per statement for scalar values
* fix fail variables
* add check for userInfo
* validation checks for conditions
* update policy
* refactor logs
* code review
* add openapispec for clusterpolicy preconditions
* Update documentation
* CR fixes
* documentation
* CR fixes
* update variable
* fix logs
* update policy
* pre-defined variables (serviceAccountName & serviceAccountNamespace)
* update test
2020-01-07 15:13:57 -08:00
