mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-05 23:46:56 +00:00
Code Activity
7830 commits 16 branches 550 tags 287 MiB
Commit graph

901 commits

Author SHA1 Message Date
Charles-Edouard Brétéché
9e49b25484
refactor: makefile build targets (#4418) 
* refactor: makefile

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: makefile build targets

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-26 15:23:04 +08:00
Jason Hall
6055713dfc
Use ko to build images (#4366) 
This updates Makefile targets to build images using `docker buildx
build` to use `ko build` instead.

End-to-end tests are accomplished by building and loading the image
directly into the KinD cluster via ko.

Also:
- use GitHub Actions token to push to ghcr.io (setup-ko sets this up for us)
- allow forks to push to their forked repo's packages (useful for testing)

Signed-off-by: Jason Hall <jason@chainguard.dev>

Signed-off-by: Jason Hall <jason@chainguard.dev>
 2022-08-25 20:32:40 +02:00
Charles-Edouard Brétéché
cf0ee93de8
feat: enable autogen internals by default (#4381) 
* feat: enable autogen internals by default

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* change e2e tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* change e2e tests matrix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-25 23:01:43 +08:00
Prateek Pandey
34fe6c9058
bump cosign deps version to 1.11.1 (#4408) 
* bump cosign deps version to 1.11.1

to accommodate latest attestation verification fixes

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* bump github action go version to 1.18

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-08-25 08:24:49 +00:00
shuting
e2b77641cb
bump cosign version to 1.11.0 (#4398) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-08-24 15:24:44 +00:00
Charles-Edouard Brétéché
91373e1329
fix: goimports check not working in ci job (#4387) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-08-24 13:38:49 +00:00
Charles-Edouard Brétéché
144985ee5a
chore: fix golangcilint timeout (#4388) 
* chore: fix golangcilint timeout

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix commit sha

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* add .gitattributes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-24 21:08:24 +08:00
Charles-Edouard Brétéché
3d9417a58a
chore: add workflow to ensure github actions are pinned to a commit SHA (#4390) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-23 22:02:13 +02:00
Charles-Edouard Brétéché
8fc1754df7
chore: fix fossa ci job (#4382) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-23 13:30:32 +00:00
Tushar Dahiya
71af968eac
Update pr_documentation.md (#4361) 
Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>

Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>
 2022-08-21 22:05:00 +00:00
Chip Zoller
fbde1fbcbe
Template updates (#4150) 
* add chipzoller to CODEOWNERS

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add explanation section

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-23 13:33:22 +00:00
Chip Zoller
d1f0671fee
update drop-downs (#4081) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-06-06 23:54:35 +08:00
Prateek Pandey
0d44003386
refactor: bump KIND version to use v1.24.0 k8s release (#3877) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-06-01 14:39:55 +00:00
Charles-Edouard Brétéché
8175fc15c9
chore: add previous pod logs in case of job failure (#3978) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-05-20 20:34:55 +05:30
shuting
bccce5d9e3
Remove permissions in helm-release workflow (#3901) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-05-12 08:12:17 +00:00
Charles-Edouard Brétéché
4107140a8d
chore: enable golangci-lint in ci (#3852) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-05-10 10:22:34 +00:00
Sambhav Kothari
266bfa1077
Fix PR update flow and allow updates from release branches (#3780) 
Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
 2022-05-03 16:03:43 +08:00
Sambhav Kothari
0a9bcd5407
Auto-update PRs which are enabled for auto-merging (#3766) 2022-05-02 18:04:43 +00:00
treydock
0ae671ca7a
Cherry-pick release-1.6 Helm changes (#3689) 
* Support releasing kyverno and kyverno-policies chart separately (#3672)

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add DELETE precondition back (#3657)

* Add DELETE precondition back

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add another example and test for 'any'

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-04-27 03:52:45 +00:00
Chip Zoller
029b69fa6b
Show warnings in Helm chart installation; update issue templates (#3673) 
* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update PR template with test checklist reminders

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add "other" issue template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add "triage" label to all new issues

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* notes change

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* show warnings

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version numbers in issue templates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add CI file per comments

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* new line for linting

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* stop being smart

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* remove ci file

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-04-27 01:45:22 +00:00
Charles-Edouard Brétéché
2e1534bd9d
fix: api reference docs link (#3664) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-04-25 21:07:42 +08:00
Charles-Edouard Brétéché
201e55fcfb
chore: remove e2e tests for kube 1.20 (#3665) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-04-25 11:43:11 +08:00
shuting
8d24582286
Update GH workflow config (#3588) 2022-04-12 07:37:37 -07:00
Shubham Gupta
f70cd4222f
Update hash of dependencies instead of mutable version (#3582) 
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-04-12 10:22:38 +01:00
Charles-Edouard Brétéché
975f6ba7c8
test: pass lock by value (#3481) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-04-05 15:52:13 +00:00
Abhi Kapoor
18d4dadab6
Do not generate preconditions not met warning for audit policies (#3487) 
* Do not generate preconditions not met warning for audit policies

Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>

* Update PR template to reeference the closing keyword

Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>

* Update pkg/engine/validation.go

Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>

* Update pkg/engine/validation.go

Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>

Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
 2022-04-05 10:08:01 +00:00
Prateek Pandey
1b2a3c1085
fix: use github repo env instead of hardcoded repo name (#3513) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-03-31 17:36:21 +08:00
Charles-Edouard Brétéché
80d1ccb26d
chore: add autogen internals e2e tests (#3492) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-03-29 16:35:27 +00:00
Charles-Edouard Brétéché
20069c13c3
feat: stop mutating rules (#3410) 
* feat: stop adding autogen annotation

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* feat: stop mutating rules

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* feat: stop mutating rules

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: use toggle

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: review comments

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-03-28 22:01:27 +08:00
Chip Zoller
e454c71aa6
PR and issue template updates per contributors' meetings (#3428) 
* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update PR template with test checklist reminders

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add "other" issue template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add "triage" label to all new issues

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-03-19 21:31:54 -04:00
Charles-Edouard Brétéché
33df85cc0c
chore: remove check-helm-docs workflow (#3408) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-03-16 13:55:21 -07:00
Abhinav Sinha
9bb7238a22
Add codecov to CI (#3382) 
* Add `codecov` to CI

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>

* Add `codecov` badge for `main` to `README.md`

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>

* Addressed code review

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
 2022-03-14 16:21:27 +08:00
Charles-Edouard Brétéché
51501cce9d
chore: check helm docs are up to date (#3310) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-03-08 15:10:53 +00:00
Charles-Edouard Brétéché
8187b9331e
fix: invalid path in helm-test workflow (#3344) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Sambhav Kothari <skothari44@bloomberg.net>
 2022-03-08 01:08:46 +00:00
Charles-Edouard Brétéché
51db68ba20
chore: verify codegen in CI (#3343) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-03-07 15:13:36 +05:30
Prateek Pandey
4846bd0293
fetch tag across all branches instead of current branch (#3324) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-03-01 11:59:28 -08:00
Naman Lakhwani
fd7addd2fa
add separate step for digest (#3321) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-03-01 20:05:14 +05:30
Naman Lakhwani
985e2cc158
adding check for digest and update git command 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-03-01 18:36:16 +05:30
Naman Lakhwani
378a1d6b95
Fix workflow using regex in main (#3306) 
* using regex

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* added condition

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-02-25 08:48:11 +00:00
Naman Lakhwani
af98c00724
arranging permissions (#3293) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-02-25 08:11:22 +00:00
Sambhav Kothari
c4075af3d1
Improve CLI test times by instantiating openapi controller once (#3297) 
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-02-24 23:34:12 +08:00
skuethe
bf662b1ed4
fix: add support for other platforms before executing docker buildx (#3296) 2022-02-24 11:36:10 +00:00
Sambhav Kothari
e9e96e7b1c
Run E2E tests on all supported k8s versions (#3256) 2022-02-23 15:52:08 +00:00
Naman Lakhwani
a9c9b25bb5
latest will point to main (#3285) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-02-23 15:30:49 +00:00
Naman Lakhwani
81ab535433
update trivy scanning (#3284) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-02-23 10:40:07 +08:00
treydock
99efd8136f
Fix Helm releasing to preserve creation timestamps (#3268) 2022-02-21 15:50:42 +00:00
Sambhav Kothari
8c7f037c72
Improve E2E test CI timings (#3250) 
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-02-17 17:47:35 -08:00
Chip Zoller
3dcf165d77
Issue forms and PR template adjustment (#3213) 
* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-02-12 16:51:05 +00:00
treydock
4e0d8ca612
Update kyverno-policies chart with latest pod-security policies (#3126) 
* Update kyverno-policies chart with latest pod-security policies
Fixes #3063
Fixes #2277

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update README to have better example

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use chart testing during e2e to test against ci values

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix e2e tests for Helm chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix Kyverno chart testing to actually test values, and fix networkpolicy template

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update README for exclusion

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Allow adding 'other' policies via Helm

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update Chart.yaml for kyverno-policies

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Bump minimum Kubernetes version in charts

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update kyverno-policies chart readme

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use version that should catch all pre-releases

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use version that should catch all pre-releases (part 2)

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use same logic to get git tag by using Makefile target for updating Helm values

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
 2022-02-04 14:47:36 +08:00
shuting
ae4d148318
Update dev image tag in Make targets (#3159) 
* - update dev images tag; - update chart testing

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update to use dev tag when setting up e2e tests infra

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* default chart test image tag for busybox to latest

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* set image tag to latest for chart testing

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* correct tag

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove test tag in e2e.yaml

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-02-03 15:41:58 +08:00