gcp-cherry-pick-bot[bot]
b087eb8f18
refactor: common remote authenticator for notary and cosign ( #8494 ) ( #8605 )
...
* refactor: common remote authenticator for notary and cosign
* fix: add user agent
* refactor: move getGCRRemoteOption out of BuildGCRRemoteOption
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 09:40:06 +00:00
gcp-cherry-pick-bot[bot]
a8cdb5a23b
refactor: use GetKind() from the cleanup policy interface ( #8565 ) ( #8604 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 09:01:58 +00:00
gcp-cherry-pick-bot[bot]
12df4bf32d
fix: use v2beta1 of policy exceptions ( #8587 ) ( #8603 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 08:11:47 +00:00
gcp-cherry-pick-bot[bot]
a848dafe7f
Refactor fuzzing utils and add 3 fuzzers ( #8555 ) ( #8586 )
...
* Refactor fuzzing utils and add 3 fuzzers
* Fix lint issues
* use latest go-jmespath
* Check layer size (#8552 )
* fix excessive logs
* check fetched layer size
* check sig layer size
---------
* fix lint issues
---------
Signed-off-by: AdamKorcz <adam@adalogics.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-10-06 08:00:13 +08:00
gcp-cherry-pick-bot[bot]
65527e2b4e
chore: bump kubectl-validate ( #8548 ) ( #8551 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 22:39:47 +02:00
Charles-Edouard Brétéché
0ac6b0bf61
release: v1.11.0-beta.4 ( #8549 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 19:25:28 +00:00
gcp-cherry-pick-bot[bot]
468692a5b6
chore: enable policy exceptions by default ( #8545 ) ( #8550 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 18:20:04 +00:00
gcp-cherry-pick-bot[bot]
7d3bb309a0
refactor: remove openapi package ( #8538 ) ( #8547 )
...
* refactor: openapi package
* kubectl validate
* rm
* fix
* fix
* go mod
* fix vscode
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 17:25:20 +00:00
gcp-cherry-pick-bot[bot]
44859d9c47
fix: make tuf feature in chart consistent with others ( #8542 ) ( #8546 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:50:31 +00:00
gcp-cherry-pick-bot[bot]
f8d7d622af
fix(helm): skip deployment replicas validation in non-int value ( #8539 ) ( #8543 )
...
* fix(helm): skip deployment replicas validation in non-int value
* fix
---------
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:22:54 +02:00
gcp-cherry-pick-bot[bot]
febc017b52
refactor: get the last execution time from the cleanup policy interface ( #8531 ) ( #8541 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 07:29:39 +00:00
gcp-cherry-pick-bot[bot]
a9f93134d5
fix: remove cronjobs from cleanup controller rbac ( #8529 ) ( #8534 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 17:45:52 +02:00
gcp-cherry-pick-bot[bot]
7dfb538568
fix: creating ClusterAdmissionReports fails for resources with colon in name ( #8530 ) ( #8532 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 12:21:00 +00:00
gcp-cherry-pick-bot[bot]
e788bf0c95
feat: remove the creation of cronjobs in cleanup controller ( #8526 ) ( #8528 )
...
* feat: remove the creation of cronjobs in cleanup controller
* fix: use lastExecutionTime instead of nextExecutionTime
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-26 10:49:33 +00:00
Charles-Edouard Brétéché
ed7b2ec36e
release: v1.11.0-beta.3 ( #8527 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-25 20:04:26 +00:00
gcp-cherry-pick-bot[bot]
1cd5d2d733
fix: only fetch pub keys when tlogs and scts are not ignored (cherry-pick #8521 ) ( #8524 )
...
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-25 09:00:21 +00:00
Charles-Edouard Brétéché
39b8a2f5c2
release: 1.11.0-beta.2 ( #8517 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 14:37:40 +00:00
gcp-cherry-pick-bot[bot]
974f45b43a
fix: image cache panic and cleanup ( #8512 ) ( #8514 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:42:07 +00:00
gcp-cherry-pick-bot[bot]
84d68ee0f1
feat: add cli package to load policy exceptions ( #8508 ) ( #8513 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 10:44:52 +00:00
gcp-cherry-pick-bot[bot]
ff0b118968
fix: disables TUF by default ( #8509 ) ( #8510 )
...
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-22 11:55:50 +02:00
gcp-cherry-pick-bot[bot]
7d71e1af32
fix: make sure we don't modify reports not owned by kyverno ( #8502 ) ( #8504 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:06:35 +08:00
gcp-cherry-pick-bot[bot]
fb9d44e7f4
fix: return gvk when loading resource ( #8501 ) ( #8503 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 03:45:23 +00:00
gcp-cherry-pick-bot[bot]
b08931a071
feat: add resource load funcs in cli ( #8499 ) ( #8500 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 22:06:08 +00:00
gcp-cherry-pick-bot[bot]
81f2646963
fix: webhookTimeout flag not clear ( #8493 ) ( #8497 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 19:54:22 +02:00
gcp-cherry-pick-bot[bot]
c0bc8cf6ff
feat: improve assertion and error messages ( #8489 ) ( #8491 )
...
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-21 13:37:08 +00:00
gcp-cherry-pick-bot[bot]
a3d4c05a8b
feat: add cli resource loader package ( #8488 ) ( #8490 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 12:36:30 +00:00
gcp-cherry-pick-bot[bot]
8439623887
fix: deep copy before validaitng ( #8483 ) ( #8486 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 10:19:56 +00:00
gcp-cherry-pick-bot[bot]
9ce117c21f
feat: add a package to convert unstructured into typed ( #8484 ) ( #8487 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 11:47:49 +02:00
gcp-cherry-pick-bot[bot]
3e597d7ede
chore: fix release ( #8482 ) ( #8485 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 10:25:54 +02:00
gcp-cherry-pick-bot[bot]
3a8f1df20c
fix: check subjects func ( #8470 ) ( #8481 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 03:54:49 +00:00
gcp-cherry-pick-bot[bot]
7a49dc8820
fix: release archive name template ( #8475 ) ( #8477 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 00:18:48 +00:00
gcp-cherry-pick-bot[bot]
1bcacc66a8
fix: make free disk space action configurable ( #8478 ) ( #8479 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:46:57 +00:00
Charles-Edouard Brétéché
10361343c5
release: fix chart versions for 1.11.0-beta.1 ( #8476 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:13:47 +00:00
gcp-cherry-pick-bot[bot]
00ccc2325b
fix: publish images workflow ( #8473 ) ( #8474 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 22:40:20 +00:00
gcp-cherry-pick-bot[bot]
07e75621d4
fix: release workflow ( #8471 ) ( #8472 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 20:20:41 +00:00
gcp-cherry-pick-bot[bot]
31ed587996
chore: free disk space before running jobs ( #8468 ) ( #8469 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 19:41:00 +02:00
Charles-Edouard Brétéché
9ce8d37656
release: v1.11.0-beta.1 ( #8463 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 13:56:34 +00:00
gcp-cherry-pick-bot[bot]
eec78d8f61
fix: image verify cache test ( #8462 ) ( #8467 )
...
* fix: image verify cache test
* feat: print err message
* feat: clear mock
* feat: defer clear mock
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 15:14:31 +02:00
gcp-cherry-pick-bot[bot]
21f1836b49
chore: add a required job to simplify branch protection ( #8464 ) ( #8465 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 11:56:49 +00:00
Charles-Edouard Brétéché
4f0e378a34
fix: custom-sigstore conformance job ( #8459 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 09:12:02 +00:00
Charles-Edouard Brétéché
c1978d97a6
fix: use vap map in report aggregation ( #8458 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 08:32:38 +00:00
dependabot[bot]
8ed197cb51
chore(deps): bump fluxcd/flux2 from 2.1.0 to 2.1.1 ( #8457 )
...
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](22cf986a79...026ab61ba7
2023-09-20 07:33:32 +00:00
Charles-Edouard Brétéché
2444b7c670
refactor: add per resource reports aggregation ( #8426 )
...
* refactor: add per resource reports aggregation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* added controller implementation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* vaps
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 14:51:32 +08:00
Vishal Choudhary
b4861015f0
feat: add check for digest mismatch ( #8443 )
...
* feat: add check for digest mismatch
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add unit test
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-20 05:29:20 +00:00
Charles-Edouard Brétéché
8a9d8f14d0
chore: bump a couple of deps ( #8453 )
...
* fix: use go 1.21 new packages
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* chore: bump a couple of deps
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 16:05:00 +00:00
Charles-Edouard Brétéché
fb90d0935d
fix: use go 1.21 new packages ( #8452 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 12:06:53 +00:00
Charles-Edouard Brétéché
33dbdc9c5b
fix: linter ( #8454 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 11:36:29 +00:00
Charles-Edouard Brétéché
6a43ec4bcf
chore: fix policies ( #8449 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 10:28:58 +00:00
Charles-Edouard Brétéché
f9c85f447d
chore: bump golang to 1.21 ( #8450 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 17:48:11 +08:00
Jim Bugwadia
fb12f7330b
skip other checks if operations do not match ( #8324 )
...
* skip other checks if operations do not match
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* copy resource/rule as match seems to mutate for wildcard checks
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix deepcopy
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 08:01:49 +00:00
