mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Code Activity
3716 commits 16 branches 550 tags 288 MiB
Commit graph

106 commits

Author SHA1 Message Date
Kumar Mallikarjuna
085e46f7c4
Merge pull request #2560 from AverageMarcus/compare_quantities 
Added support for comparing resource quantities
 2021-10-21 12:17:08 +05:30
Kumar Mallikarjuna
b1c40e172d
Escape variables (#2563) 
* Escape variables

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Escape variables test - nested

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Fixed missing changes

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-10-20 17:10:24 -07:00
Marcus Noble
509f561d67
Added support for comparing resource quantities 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-19 15:22:26 +01:00
Kumar Mallikarjuna
d0a36b6dcc
element variable lifecycle (#2535) 
* Foreach element with background false

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Tests for foreach element

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Update Test_Validation_invalid_backgroundPolicy

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* CLI: Print invalid policies

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Remove redundant Sprintf() calls

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Updated tests for foreach list

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-10-14 10:14:11 -07:00
Bricktop
d62234d776
Fix remaining static check findings (#2541) 
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-10-13 16:00:41 -07:00
Bricktop
3f15ec5a1e
Remove dead code and unused variables (#2537) 
* Remove dead code and unused variables

Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>

* Remove unnecessary definitions

Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-10-13 22:45:23 +02:00
Bricktop
2d0df77963
Format error messages correctly (#2519) 
* Format error messages correctly

Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>

* No punctuation at the end or errors

Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>

* Replace loop with simple if

Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>

* Fix more errors

Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-10-12 14:29:20 -07:00
Bricktop
23864d89c8
Ensure make invocations pass linter (#2518) 
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-10-11 14:43:09 -07:00
Sachin
e16d773957
Remove unused function (#2517) 2021-10-11 12:46:28 -07:00
Jim Bugwadia
90edc69dcf merge and update 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-05 22:42:42 -07:00
Jim Bugwadia
731ffde0e7 fix messages and tests 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-03 03:15:22 -07:00
Jim Bugwadia
e0e6074afc add validation; add 'element' to context 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-02 16:53:02 -07:00
Jim Bugwadia
f015c16f08 fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-02 14:24:23 -07:00
Jim Bugwadia
2bd5bca721 merge foreach and add attestation checks 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-02 14:24:06 -07:00
Jim Bugwadia
6ae3063038 merge main 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-09-30 11:53:33 -07:00
Jim Bugwadia
3957a1400e fix deny check and fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-09-27 23:40:05 -07:00
Jim Bugwadia
a905a61581 fix deny rules 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-09-27 14:28:55 -07:00
Kumar Mallikarjuna
6a81bb7cc3
Escape references (#2433) 
* Escape references

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Additional tests

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-09-27 11:44:56 -07:00
Jim Bugwadia
39061d91c4 implement validate.foreach 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-09-26 02:12:31 -07:00
Max Goncharenko
c2e298a1f6
Substitute vars in map keys (#2344) 
* substitute vars in map keys

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* add test for 2316 issue case

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
 2021-09-10 14:08:47 -07:00
Max Goncharenko
ab24da9707
Added 2241 test case (#2255) 
* added 2241 test case

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* update the log level for not resolved variables

Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-08-20 14:44:19 -07:00
treydock
8204028009
Add DurationOperator to handle duration comparison operations (#2214) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-07-30 13:11:52 -07:00
Max Goncharenko
903963c26d
add special variable substitution logic for preconditions (#1930) 
* add special variable substitution logic for preconditions

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* handle NotFoundVariable error in proper way

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* remove excess log; fix grammar

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* removed isPrecondition flag; added test case for empty deny string; fixed related issue

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix test case

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix go lint

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>

* fix tests

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
 2021-07-28 09:54:50 -07:00
Vineeth Reddy
eeb4e4ff0f
turn preconditions error to info log (#1926) 
* turn preconditions error to info log

Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>

* minor change

Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>

* further changes

Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>

* resolve conflicts

Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>

* add precondition flag

Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>

* NotFoundError -> Info

Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
 2021-07-07 17:37:44 +05:30
Max Goncharenko
fdaa73b175
Forbid variables in match/exclude/patchesJson6902.path sections (#1940) 
* forbid variables in match/exclude/patchesJson6902.path sections

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* fix e2e test

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* edits related to the PR comments

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
 2021-07-02 19:17:40 +05:30
Max Goncharenko
6d0ad5598e
Jmespath notfound error (#1907) 
* return err, if variable path could not be resolved

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* fixed {{@}} behavior

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* fix json merge logic

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* add e2e tests for Flux use case

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
 2021-07-01 22:56:50 -07:00
Arsh Sharma
7e9be24d90
updating minio verison (#1956) 2021-06-09 19:16:26 -07:00
Max Goncharenko
158b58f819
Fix {{@}} behavior (#1908) 
* fixed {{@}} behavior

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* removed white space from test

Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-05-13 12:27:45 -07:00
Max Goncharenko
6a0305674a
JMESPath custom functions (#1772) 
* JMESPath: Support regex expressions

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* JMESPath: Add string functions

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* Removed {{$}} variable handling logic

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* Name all functions in snake case; Update error message; Fix {{@}} behavior

Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-04-16 16:17:00 -07:00
shuting
f515bc5dbf
skip rule application if referred path not exist (#1806) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-15 17:33:34 -07:00
shuting
081244a102
Fix array variables substitution (#1800) 
* fix array variables substitution

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* Add ability to marshal complex vars to string

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* Added tests for variable substitution

Signed-off-by: Max Goncharenko <kacejot@fex.net>

Co-authored-by: Max Goncharenko <kacejot@fex.net>
 2021-04-14 13:09:00 -07:00
Max Goncharenko
01004e1db0
Fix #1754 Invalid variable validation (#1770) 
Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-04-06 10:56:06 -07:00
Shuting Zhao
4d01f76797 - fix variable validation; - update log level 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-31 13:24:36 -07:00
Jim Bugwadia
908950c47a address comments 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-03-25 21:27:16 -07:00
Jim Bugwadia
72cdbafbae fix tests 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-03-25 18:11:32 -07:00
Jim Bugwadia
8d03f8c59e merge main 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-03-25 18:00:02 -07:00
Jim Bugwadia
6dff9e0ab9 merge and resolve conflicts 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-03-25 16:43:12 -07:00
Jim Bugwadia
4d70013e22
Merge pull request #1724 from MarcelMue/fix-apipath-validation 
Make validateAPICall work with special characters in variables
 2021-03-24 22:28:09 -07:00
Max Goncharenko
3373a79f26
Bug Fix: #1585 issue; validate on DELETE the oldResource (#1710) 
* fix #1585 issue; validate on DELETE the oldResource

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* apply PR edits for #1585 issue fix; add test with nested var

Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-03-19 14:43:26 -07:00
Marcel Mueller
4f96232e62 Make validateAPICall work with special characters in variables 
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-03-19 20:29:55 +01:00
Shuting Zhao
7502e5da98 fix variable substitution in NumericOperatorHandler 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-18 13:40:14 -07:00
Joshua Snider
6699bfab8c Fix tests 
Signed-off-by: Joshua Snider <jsnider@mtu.edu>
 2021-03-16 15:00:42 -04:00
Joshua Snider
9377f70840 Change isNotIn 
Signed-off-by: Joshua Snider <jsnider@mtu.edu>
 2021-03-16 14:26:41 -04:00
Max Goncharenko
24c4f06ecd Fix #1506; Resolve path reference in entire rule instead of just pattern/overlay 
Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-03-16 13:45:40 +02:00
Arsh Sharma
1dfcef1cc8
fix: changed logic for In and NotIn for sets (#1704) 
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
 2021-03-15 12:59:24 -07:00
Yashvardhan Kukreja
10c714d5ba
feat: [preconditions, conditions] added backwards-compatible support for logical operators (#1604) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-03-01 20:31:06 -08:00
Arsh Sharma
86879bd267
feat(operators): supporting subset checking (#1613) 
* fix(operators): supporting subset checking

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* fix(operators): removed print statement

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* test(operators): added test file for in

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* fix(operators): fixed switching

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* tests(operators): completed tests for In and NotIn

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* chore(operators): code cleanup

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* chore(operators): added comments for tests

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* fix(operators): changed logic based on new definitions

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* test: updated NotIn tests

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
 2021-02-26 10:53:54 -08:00
shuting
267be0815f
Bug fixes - policy validation, auto-generated rules, apiCall support in mutate and generate (#1629) 
* Fix invalid policy reports generated for blocked resource

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix 1464 - copy context and preconditions to auto-gen rules

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix 1628 - add policy validations

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix 1593 - support apiCall in mutate and generate

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix test

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-22 12:08:26 -08:00
Arsh Sharma
596bc9ba6f
feat(operators): support subset checking for in and notin (#1555) 
* feat(operators): support subset checking for in and notin

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* feat(operators): fixed NotIn function

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
 2021-02-10 13:05:36 -08:00
Yashvardhan Kukreja
6b3ab3fe23
added: generic NumericOperator to handle numeric operations for kyverno policies (#1536) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-02-05 19:49:23 -08:00