Vishal Choudhary
|
86b8a6d0f3
|
feat: show violations and mutations as warning (#10214)
* feat: add audit warning to policy spec
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: emit warning when audit warning is set
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add audit warn to policy cache
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add warnings for validation
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add warnings for mutation
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add chainsaw test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add more chainsaw test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: fix ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: rename field to emit warning
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: validate tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: cleanup
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove validation action failure fro mutation unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-09-05 10:02:00 +00:00 |
|
Vishal Choudhary
|
903ece34bf
|
feat: add support for signature algorithm in cosign cert and kms verification (#10086)
* feat: add support for signature algorithm in cosign cert and kms verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add signature algo at attestor level
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Khaled Emara <khaled.emara@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-05 06:57:44 +00:00 |
|
D N Siva Sathyaseelan
|
cc966bf7af
|
feat:support default value into apiCall context variables (#10594)
* initial changes
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
* test changes
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
* logical changes
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
* added Check for default in transformAndStore
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
* codegen applied
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
* considered an edge case
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
* fix: remove error when jsondata and default is nil
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* codegen done
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
---------
Signed-off-by: sivasathyaseeelan <dnsiva.sathyaseelan.chy21@iitbhu.ac.in>
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-09-05 13:57:44 +08:00 |
|
Charles-Edouard Brétéché
|
8a0795fa8f
|
feat: make deprecated ready status a pointer and set it to null (#10999)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-04 19:08:34 +00:00 |
|
Charles-Edouard Brétéché
|
fd5cfac9b4
|
feat: more openapi validation in v2 api (#11013)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-04 18:00:50 +00:00 |
|
Charles-Edouard Brétéché
|
d9c676b62b
|
feat: add resource description openapi validation (#10997)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-04 09:02:57 +00:00 |
|
Charles-Edouard Brétéché
|
9fb6f3d529
|
fix: context entry name should be required (#10995)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-03 19:58:11 +00:00 |
|
Vishal Choudhary
|
95f54a1cb6
|
feat: enable custom data in policy reports using properties (#10933)
* feat: enable custom data in policy reports using properties
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: dont throw error in variable substitution for properties
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-09-03 17:36:07 +00:00 |
|
Charles-Edouard Brétéché
|
86fa32af7f
|
feat: add context entry openapi validation (#10993)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-03 16:51:28 +00:00 |
|
Charles-Edouard Brétéché
|
fb90636776
|
feat: add rule openapi validation (#10990)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-09-03 15:20:37 +00:00 |
|
Mariam Fahmy
|
bde90340a6
|
chore: remove v1alpha1 of VAPs and use v1beta1 (#10955)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-08-29 15:31:25 +00:00 |
|
Charles-Edouard Brétéché
|
f87fa52cb7
|
feat: bump to k8s 1.31 (#10938)
* feat: bump to k8s 1.31
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* tidy
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* mod
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix otel
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix otel schema
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: fix image verification tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* linter issues
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cel change
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-08-28 17:09:58 +00:00 |
|
Charles-Edouard Brétéché
|
ad4f0ab038
|
feat: bump controller gen package (#10927)
* feat: bump controller gen package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix chainsaw test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* bump annotation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-08-28 14:23:19 +08:00 |
|
Mariam Fahmy
|
2140a0239b
|
chore: rename validationFailureAction to failureAction under the rule (#10893)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
|
2024-08-27 20:07:57 +00:00 |
|
Jim Bugwadia
|
f06399200c
|
remove wildcard permissions (#10785)
* remove wildcard permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update codegen
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* codegen
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix background controller perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove secrets perm
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix reports-controller role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add wildcard check and limit generate policy checks based on `synchronize`
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update manifest
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix wildcard check
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update default QPS and burst for better performance and to prevent test failure
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix merge issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix merge issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-08-20 11:55:32 +03:00 |
|
shuting
|
bd71af3291
|
feat: support foreach for generate.data (#10875)
* chore: refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add foreach for generate.daya to api
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: refactor generator
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update rule validation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update rule validation -2
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: support foreach.data
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: policy validation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: context variables
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add a chainsaw test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: sync on policy deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: enable new chainsaw tests in CI
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update code-gen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: validate targets scope for ns-policies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add missing files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: remove unreasonable test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update install.yaml
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-08-19 06:55:19 +00:00 |
|
Vishal Choudhary
|
06ffd1c961
|
feat: add support for sigstore bundle verification (#10567)
* feat: add support for sigstore bundle verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: missed change
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: another linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add size check in layer
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-08-16 11:36:48 +00:00 |
|
Vishal Choudhary
|
f69ffe12ec
|
feat: add full regexp support to cosign (#10815)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-08-16 07:03:59 +00:00 |
|
shuting
|
481798c836
|
refactor: update updaterequest to be created for each policy (#10793)
* chore: remove v1beta1 updaterequest definitions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update UR to map a policy instead a rule; adapt UR mapping changes for admission review
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update code-gen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: remove unused function
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add missing files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add missing files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update ur in policy controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: adapt ur changes in the background controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: more linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: modify mapping relationship for deletion events
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: remedy missing target for policy application
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: fetching logic for triggers
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: clean up targets upon policy deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* merge main
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* merge main
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: adds delay before assertion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: wrong yaml format
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update error handling logic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable more debug info
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable debug log
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable debug log
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable debug log
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: makefile to update ur crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: generate existing
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: skip empty ur generation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: update install.yaml
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-08-13 17:14:06 +00:00 |
|
Mariam Fahmy
|
c796bb765c
|
fix: return policies with either audit or enforce rules from the cache (#10667)
* fix: return policies with either audit or enforce rules from the cache
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: introduce validationFailureAction under verifyImage rules
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-08-06 18:24:28 +00:00 |
|
Khaled Emara
|
c0cf6c5bf1
|
feat(json): unmarshal at decode time (#10700)
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-08-05 15:46:50 +03:00 |
|
Frank Jogeleit
|
cfef8a089a
|
init controller-gen support for oneOf and not (#10776)
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-08-02 22:19:35 +00:00 |
|
Charles-Edouard Brétéché
|
fc694bc24c
|
feat: add kyverno json support to validation rule (#10763)
* feat: add kyverno json support to validation rule
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* v2beta1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* engine handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* bindings
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* context functions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* better bindings
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-08-02 08:24:30 +00:00 |
|
Mariam Fahmy
|
6d732d28c7
|
fix: get ns labels before creating a policy context (#10773)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-08-02 05:14:36 +03:00 |
|
Mariam Fahmy
|
734f1df059
|
fix: check the resource namespace (#10738)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-07-26 21:45:54 +08:00 |
|
Mariam Fahmy
|
716611b7ea
|
fix: return all the exceptions that match the incoming resource (#10722)
* fix: return all the exceptions that match the incoming resource
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: modify log messages
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-07-25 17:36:19 +00:00 |
|
Mariam Fahmy
|
ff88c4c39a
|
feat: migrate validationFailureAction and validationFailureActionOverrides (#10528)
* feat: migrate validationFailureAction and validationFailureActionOverrides under validate rule
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add unit tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-26 09:13:02 +02:00 |
|
Mariam Fahmy
|
94d9bbe73f
|
chore: use v2 clients for policy exceptions (#10530)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-24 16:36:55 +00:00 |
|
Mariam Fahmy
|
b7bf894fe9
|
chore: use v2 for exceptions in chainsaw tests (#10529)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-24 11:54:57 +00:00 |
|
Mariam Fahmy
|
abe2a2310b
|
feat: migrate webhookTimeoutSeconds and failurePolicy (#10515)
* feat: migrate webhookTimeoutSeconds and failurePolicy
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix lint issue
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-20 13:04:37 +00:00 |
|
Charles-Edouard Brétéché
|
b36a2ecdcc
|
feat: bump update request api version (#10508)
* feat: bump update request api version
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* use v2
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-06-20 09:44:43 +00:00 |
|
Mariam Fahmy
|
9285006f7a
|
feat: add mutateExistingOnPolicyUpdate field under the mutate rule (#10461)
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add mutateExistingOnPolicyUpdate field under the mutate rule
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-19 09:29:19 +00:00 |
|
Vishal Choudhary
|
334594c128
|
feat: add support for cosign experimental OCI 1.1 signatures (#10228)
* feat: add support for cosign experimental OCI 1.1 signatures
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove unrelated changes
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: requested changes
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-06-18 23:03:53 +00:00 |
|
Charles-Edouard Brétéché
|
7f57b9618a
|
feat: cleanup v2alpha1 kyverno api (#10457)
* feat: cleanup v2alpha1 kyverno api
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-06-14 09:39:36 +00:00 |
|
Mariam Fahmy
|
846439b13e
|
feat: add generateExisting field under the generate rule (#10441)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-13 13:41:46 +00:00 |
|
Marc Brugger
|
be06bff665
|
support inline exceptions in cli apply (#10133)
* support inline exceptions in cli apply
Signed-off-by: bakito <github@bakito.ch>
* rename flag
Signed-off-by: bakito <github@bakito.ch>
* Update cmd/cli/kubectl-kyverno/commands/apply/command.go
Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Signed-off-by: Marc Brugger <github@bakito.ch>
* Update docs/user/cli/commands/kyverno_apply.md
Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Signed-off-by: Marc Brugger <github@bakito.ch>
* Restore missed sections from merge
Signed-off-by: Marc Brugger <github@bakito.ch>
---------
Signed-off-by: bakito <github@bakito.ch>
Signed-off-by: Marc Brugger <github@bakito.ch>
Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-06-06 06:33:28 +00:00 |
|
Mariam Fahmy
|
c391fba64c
|
fix: get ns labels in the cluster mode when using the CLI (#10348)
* fix: get ns labels in the cluster mode when using the CLI
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* chore: fix chainsaw test
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* Update .vscode/launch.json
Co-authored-by: shuting <shuting@nirmata.com>
Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-06-04 10:44:44 +00:00 |
|
shuting
|
5260b4f7bc
|
chore: bump k8s libs to 0.30 (#10285)
* chore: bump k8s libs to 0.30
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: bump kubectl-validate
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix panic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: bump k8s
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix sum
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: indent
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: bump deps
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-06-04 15:09:44 +08:00 |
|
Mariam Fahmy
|
aa59bbc947
|
fix: remove unused parameters (#10327)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-05-29 13:40:41 +00:00 |
|
Vishal Choudhary
|
386f969f45
|
chore: bump tools and add kubernetes v1.30 to conformance (#10300)
* chore: bump tools and add kubernetes v1.30 to conformance
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: codegen and version fixes
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-05-24 07:37:49 +00:00 |
|
Anushka Mittal
|
68304e4b19
|
chore: make contrinue-on-fail flag available outside package (#10293)
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: anushkamittal20 <anumittal4641@gmail.com>
|
2024-05-23 08:16:33 +00:00 |
|
Jim Bugwadia
|
6d48a185d1
|
Fix cli load policies from fs (#10270)
* skip invalid policy files
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix file-system policy loader
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* propagate policy schema error
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
|
2024-05-21 15:17:49 +08:00 |
|
shuting
|
fb9c66f455
|
feat(perf): add new linter prealloc to enforce slice declarations best practice (#10250)
* feat(perf): add new linter prealloc to enforce slice declarations best practice
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(linter): prealloac slices
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-05-20 14:46:35 +05:30 |
|
Anushka Mittal
|
63ab92417c
|
[Bug] [CLI] Level parameter of the apply and test commands does not work (#10216)
* added verbosity level
Signed-off-by: Suruchi Kumari <suruchikumarimfp4@gmail.com>
* added else statement to handle the error
Signed-off-by: GitHub <noreply@github.com>
* fix: verbosity in cli
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
---------
Signed-off-by: Suruchi Kumari <suruchikumarimfp4@gmail.com>
Signed-off-by: GitHub <noreply@github.com>
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: Suruchi Kumari <suruchikumarimfp4@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: anushkamittal20 <anumittal4641@gmail.com>
|
2024-05-15 13:57:17 +00:00 |
|
Charles-Edouard Brétéché
|
ecce1632f2
|
feat: make cli results count public (#10177)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-05-07 08:58:09 +00:00 |
|
Lanting Chiang
|
f91bf6529d
|
allow kyverno apply command to continue on failure (#10036)
* allow kyverno apply to continue on failure
Signed-off-by: lanting.chiang <lanting.chiang@robinhood.com>
* allow kyverno apply to continue on failure
Signed-off-by: lanting.chiang <lanting.chiang@robinhood.com>
---------
Signed-off-by: lanting.chiang <lanting.chiang@robinhood.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-05-06 09:00:54 +00:00 |
|
shuting
|
0257f060bf
|
chore(deps): bump k8s.io/apimachinery from 0.29.4 to 0.30.0 (#10087)
* chore: bump apimachinary 0.30.0
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-04-24 11:37:59 +05:30 |
|
Khaled Emara
|
c9055ac2ff
|
fix(autogen): only generate rule for request kind (#9984)
* fix(autogen): only generate rule for request kind
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* feat(autogen): use jsoniter instead of std for json
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(atogen): use sets instead of manipulating strings
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(autogen): formatting linter
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(autogen): backwards compatability
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* revert(autogen): old behavior
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix: builds error
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
|
2024-04-04 08:09:30 +00:00 |
|
Anushka Mittal
|
66a2c7283b
|
chore: changes to use latest kyverno-json apis (#9980)
* changes to use latest kyverno-json apis
Signed-off-by: Anushka Mittal <anushka@nirmata.com>
* codegen diffs
Signed-off-by: Anushka Mittal <anushka@nirmata.com>
---------
Signed-off-by: Anushka Mittal <anushka@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-04-02 14:35:26 +00:00 |
|
Vishal Choudhary
|
83f2846572
|
feat: add TSA cert chain support in cosign (#9961)
* feat: add TSA cert chain support in cosign
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add chainsaw test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add unit test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
|
2024-03-30 20:50:07 +00:00 |
|