Chris Bandy
0712022640
Resolve conflict introduced to contributing page ( #4192 )
...
Sections were added and moved in f67f145d90d05a0759ca
2022-07-07 18:02:57 +00:00
vivek kumar sahu
a37901425f
return helpful error message on invalid patched resources. ( #4129 )
...
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-07-06 13:24:28 +05:30
Batuhan Apaydın
d05a0759ca
docs(contributing): add how to cherry-pick section ( #4127 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-07-05 15:55:55 -07:00
Charles-Edouard Brétéché
24e96884c5
refactor: finish refactoring generate e2e tests ( #4090 )
...
* refactor: generate e2e GeneratePolicyDeletionforCloneTests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: generate e2e test GenerateNetworkPolicyOnNamespaceWithoutLabelTests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: cleanup
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* finish refactoring tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: is not found
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor expectations part 1
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: repeat update on conflict
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-07-05 23:34:09 +08:00
Charles-Edouard Brétéché
210a709bb3
feat: policy status for autogen rules ( #4173 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-07-03 15:09:18 -07:00
Charles-Edouard Brétéché
b29207f585
fix: use official controller-gen ( #4171 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-07-01 15:25:59 +00:00
Vyankatesh Kudtarkar
12693e1a9c
fix external.metrics.k8s.io/v1beta1 issue ( #4139 )
...
* fix external.metrics.k8s.io/v1beta1 issue
* update find resource discovery method
* revert validate.go
* revert chnages
* update discovery method
* fix error handler issue
* add logger support
2022-07-01 03:00:05 +00:00
Joe Bowbeer
606b2cb946
fix: add seccompProfile ( #4178 )
...
Signed-off-by: Joe Bowbeer <joe.bowbeer@gmail.com>
2022-07-01 01:47:19 +00:00
Charles-Edouard Brétéché
27e5772986
fix: add more verify images e2e test for bool fields ( #4172 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-30 21:36:28 +02:00
Prateek Pandey
808e6ae8b7
delete policy reports on policy deletion ( #4174 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-06-30 15:45:02 +00:00
Charles-Edouard Brétéché
89c7432069
chore: add myself into owners ( #4170 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-06-29 22:45:16 +02:00
Prateek Pandey
9226873e68
feat: split policy report per policy bases ( #4147 )
...
* feat: split policy report per policy bases
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* add policy name as a handler key
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* update merge change request logic
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* handle the delete resource update on policy report
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* add splitPolicyReport feature gate
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* delete old reports if splitPolicyReport feature enable
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* use trim policyname as label and create name
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* fix change request result
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-06-28 15:27:57 +00:00
shuting
77fb10a430
Clean up RCRs if the count exceeds the threshold ( #4148 )
...
* Clean up RCRs if the count exceeds the limit
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Sets reports to inactive on resourceExhausted error
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Add a container flag changeRequestLimit
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Skip generating RCRs if resourceExhausted error occurs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* set default RCR limit to 1000
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Update log messages and CHANGELOG.md
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Address review comments
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Extract mapper to a separate file
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-28 06:18:57 +00:00
shuting
cd2d89bf55
Wait for informers' cache to be synced before starting controllers ( #4155 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-28 04:55:52 +00:00
shuting
47b1266503
- Disable events generation on DELETE; - Reduce event generation retry from 10 to 3 ( #4159 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-28 11:58:23 +08:00
shuting
1c329ea65f
Use kyverno namespace informer to list pods while processing URs ( #4156 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-27 12:44:42 +08:00
Chip Zoller
fbde1fbcbe
Template updates ( #4150 )
...
* add chipzoller to CODEOWNERS
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add explanation section
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-23 13:33:22 +00:00
Jim Bugwadia
b68f4ba679
release event memory ( #4138 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-23 00:37:46 +08:00
Prateek Pandey
a14cab0947
fix: use dev tag for init container local build target ( #4142 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-06-21 10:30:22 +05:30
Tathagata Paul
16f8620993
added resource lists for test cli ( #4082 )
...
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
2022-06-20 06:38:13 +00:00
Jim Bugwadia
f67f145d90
update contributing guide ( #4119 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-06-20 06:13:39 +00:00
shuting
008b9ab48e
sync release versions ( #4133 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-17 09:30:06 +00:00
Furkan Türkal
af3da5e19a
bump cosign to 1.9.1 to fix fulcio panic ( #4117 )
...
Signed-off-by: Furkan <furkan.turkal@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-06-16 16:03:22 +00:00
Prateek Pandey
02b806deee
fix: use policyName key to get the policy name ( #4114 )
...
In case of namespace policy `ur.spec.policy`
contains namespace/policy-name combinations, hence
can't be used to set the policy name label.
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-16 11:23:37 +00:00
Jim Bugwadia
bc1b051b90
fix imageVerify validation checks and conversion logic ( #4038 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-15 17:13:36 -07:00
Andrew Bulford
11942560c3
fix: Stop incorrect any block condition logging ( #4107 )
...
Previously the "no condition passed for 'any' block" would be logged for
all `any` blocks because the log line always occurs, even if conditions
are found.
Co-authored-by: Samuel Torres <samuel.torres@form3.tech>
Signed-off-by: Andrew Bulford <andrew.bulford@form3.tech>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-06-15 15:39:24 +00:00
vivek kumar sahu
051b0751e0
set test.namespace value implict as resource namespace until and unless explict value is added ( #4100 )
...
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
2022-06-15 17:59:13 +05:30
Jim Bugwadia
c3be689851
remove TUF initialization from main ( #4098 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-06-10 00:52:12 -07:00
treydock
7f4f6d14fd
Update CODEOWNERS to include treydock ( #4097 )
...
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2022-06-09 14:38:50 +00:00
Charles-Edouard Brétéché
e1db7c9814
feat: add e2e framework and verify image new test ( #4094 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-06-09 21:58:07 +08:00
Chip Zoller
91ce9f9abd
add chipzoller to CODEOWNERS ( #4096 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-09 04:08:10 +00:00
Charles-Edouard Brétéché
e3c39f1da1
refactor: generate e2e GeneratePolicyDeletionforCloneTests ( #4071 )
...
* refactor: generate e2e GeneratePolicyDeletionforCloneTests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: unit test
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: remove resourceExpectation type
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-06-07 23:35:44 +08:00
treydock
660e8f34f9
Exclude Kyverno namespace by default ( #4079 )
...
* Exclude Kyverno namespace by default
Fixes #4075
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2022-06-07 12:55:27 +00:00
Batuhan Apaydın
a064a1960e
docs(chart): fix deadlink in NOTES.txt ( #4085 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-06-07 08:03:48 +01:00
vivek kumar sahu
7e79403324
Updated jp command flags and also added URL for help. ( #4084 )
...
* Updated jp command flags and also added URL for help.
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* Update cmd/cli/kubectl-kyverno/jp/jp_command.go
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-06-07 06:19:44 +00:00
Chip Zoller
d1f0671fee
update drop-downs ( #4081 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-06-06 23:54:35 +08:00
Charles-Edouard Brétéché
0b7b2458eb
refactor: generate e2e tests ( #4068 )
...
* refactor: use t.Cleanup in e2e tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: generate e2e tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* helpers
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-06-03 21:08:27 +02:00
Charles-Edouard Brétéché
fe3c12628c
refactor: use t.Cleanup in e2e tests ( #4067 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-06-03 19:08:33 +05:30
shuting
fac190462b
Remove s390X ( #4063 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-03 08:11:12 +00:00
Charles-Edouard Brétéché
24cdc59f78
fix: add missing release notes in helm chart ( #4057 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-03 05:48:28 +00:00
Charles-Edouard Brétéché
1786cb8bc8
fix: bool fields in image verification types ( #4053 )
...
* refactor: add policy event listener in ur controller (#4012 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
(cherry picked from commit cd1fa030ee
2022-06-02 12:05:23 -07:00
Prateek Nandle
70175ae5e8
Print for failed test cases ( #4048 )
...
Signed-off-by: Prateeknandle <prateeknandle@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-02 17:31:46 +00:00
shuting
d30778eab6
Sync v1.7.0 release manifests ( #4051 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-02 11:20:33 +00:00
Prateek Pandey
0d44003386
refactor: bump KIND version to use v1.24.0 k8s release ( #3877 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-01 14:39:55 +00:00
Charles-Edouard Brétéché
9e9e119f83
feat: add aggregated cluster role support ( #3845 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-01 13:05:52 +00:00
Batuhan Apaydın
e756ae522a
chore(dockerfile): use buildx features for cross-compilation ( #4023 )
...
* chore(dockerfile): use buildx features for cross-compilation
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
* feat(kyverno): main container image
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-01 20:35:02 +08:00
treydock
ee46e9ed19
Ensure preconditions are present with default values ( #4046 )
...
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2022-05-31 20:39:06 +00:00
treydock
566eae7d94
Fix handling of kyverno-policies version check when port in image tag ( #4042 )
...
* Fix handling of kyverno-policies version check when port in image tag
Fixes #4031
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Add release notes for chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix release notes and use splitList
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2022-05-31 15:02:19 +00:00
Vyankatesh Kudtarkar
18ae9c7d6d
fix policy typo ( #4039 )
2022-05-31 06:28:02 +00:00
shuting
8260820a16
Fix labels with invalid charrs ( #4034 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-05-30 05:21:08 +00:00
