NoSkillGirl
b1a2ab398b
fixed duplicate name
2020-09-09 20:17:20 +05:30
Mohan B E
c5e9d6db15
added autogen for patch strategic merge ( #1104 )
2020-09-04 16:20:20 -07:00
NoSkillGirl
4f8a765ce1
fixed return
2020-09-04 19:42:29 +05:30
Yuvraj
b7524467a3
Reconcile Generate request on policy update ( #1096 )
...
* policy report crd added
* added namespaced rule
* remove extra field from crd
* revert crd change
* remove policy report chnages
* remove policy report chnages
* remove policy report chnages
* remove policy report chnages
* added logic for gr
* revert changes
* fixed generate rules
* fixed generate rules
* fixed generate rules
* fixed generate rules
* remove extra logs
* remove extra logs
* fixed e2e test
* remove extra logs
* crd issue resolved
* added check for sync
* add labels update
* add label update
* added permission to role
* roles added to helm
* roles added to helm
2020-09-03 14:34:23 -07:00
Pooja Singh
154b1c1eb9
Merge pull request #1095 from NoSkillGirl/feature/support_openapi_v3
...
added validation for openapi_v3
2020-09-03 23:02:17 +05:30
Mohan B E
118b40c644
added invalid field validation for policy ( #1094 )
2020-09-03 22:14:54 +05:30
shuting
931d7cd47c
Set mutating webhhok reinvocationPolicy to IfNeeded ( #1097 )
...
* add watch policy to clusterrole kyverno:customresources
* fix build
* fix nil pointer
* skip json patches if the mutation is re-invoked
* set resource mutating webhook invocation policy to IfNeeded
2020-09-03 08:54:37 -07:00
NoSkillGirl
70108232ec
added return
2020-09-03 09:47:43 +05:30
NoSkillGirl
fcdbc054c9
added validation for openapi_v3
2020-09-02 17:14:29 +05:30
shuting
9a210e24d9
bug fix - nil pointer ( #1093 )
...
* add watch policy to clusterrole kyverno:customresources
* fix build
* fix nil pointer
2020-09-01 17:23:54 -07:00
shuting
b319a816c5
Fix build ( #1092 )
...
* add watch policy to clusterrole kyverno:customresources
* fix build
2020-09-01 09:38:49 -07:00
Mohan B E
3690bf5fff
conditional anchor preprocessing for patch strategic merge ( #1090 )
...
* conditional anchor preprocessing for patch strategic merge
* modified sequence pre processing and added unit test
* merged master
* go fmt
* corrected mistake and added error handling to policy validate
2020-09-01 09:12:05 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen ( #1089 )
...
* add watch policy to clusterrole kyverno:customresources
* - improve auto-gen policy application logic - remove unused code
* move method to common util
* auto-gen rule for cronJob
* update doc
* set CronJob as default auto-gen pod controller
* - update doc; - fix test
* remove unused code
2020-09-01 09:11:20 -07:00
Pooja Singh
2bfb5fffb3
Merge pull request #1080 from NoSkillGirl/feature/crd_validation
...
Supporting CRD validation in CLI
2020-09-01 08:51:02 +05:30
Yuvraj
2641120907
Generate policy does not work on namespace update ( #1085 )
...
* added logic for handling generate request
* generate rules added
* added label condition for generate
* remove extra logs
* remove extra logs
* buf fixed
* bug fixed
* added logic for delete gr
* log fixed
* documentation changed
* remove best practices changes
* bug fix
* added best pratice
2020-08-31 11:25:13 -07:00
NoSkillGirl
d9c3a166cc
updated readme
2020-08-31 19:32:00 +05:30
NoSkillGirl
ccfd4adad3
calling GetCRD's from validate
2020-08-31 18:44:08 +05:30
NoSkillGirl
e5f5ef9db1
split multi yaml in crd
2020-08-31 18:20:25 +05:30
NoSkillGirl
6b6897f6e2
working version of CRD validation for CLI
2020-08-31 18:19:09 +05:30
NoSkillGirl
b61412ca7a
minor validation changes
2020-08-31 18:18:10 +05:30
NoSkillGirl
afb6ad714c
small issue while resolving conflicts
2020-08-31 18:16:53 +05:30
NoSkillGirl
70b13d06dc
validation of policy against crd
2020-08-31 18:15:39 +05:30
Mohan B E
a827f88dc7
resolved conditional anchor issue and added validation to pattern labels ( #1060 )
...
* resolved conditional anchor issue and added validation to pattern labels
* restored IsConditionAnchor
* added annotation and anypattern validation
* added conditional anchor key checker
* reverted docs
* fixed tests
* modified validation
* modified validate condition check
2020-08-28 18:22:22 -07:00
Yuvraj
b648c2edd6
Events take several minutes to show on the resource ( #1083 )
...
* git action added
* changed retry method
* remove time method
* increase worker for event generator
2020-08-26 14:28:34 +05:30
Pooja Singh
8105e4cad8
Allowing only few variables in the policies ( #1063 )
...
* Checking for non whitelisted variables in the policy
* method name change
* small issue while rebasing
2020-08-23 15:11:03 -07:00
Pooja Singh
1b69ca26db
Merge pull request #1030 from NoSkillGirl/feature/add_cli_variables
...
Feature/add cli variables
2020-08-22 01:48:40 +05:30
NoSkillGirl
067d51cb28
resolving issues after rebase
2020-08-22 01:21:29 +05:30
Mohan B E
3feb41e5f3
wildcard for numeric values ( #1074 )
...
* wildcard for numeric values
* changed error message
2020-08-21 12:48:05 -07:00
NoSkillGirl
3a3311835c
added error handling
2020-08-22 01:07:04 +05:30
NoSkillGirl
df154537f1
Added provision to pass cli values from a file
2020-08-22 01:07:04 +05:30
NoSkillGirl
0927e7a732
added validation for set flag
2020-08-22 01:07:03 +05:30
NoSkillGirl
11e73381cf
removed comments
2020-08-22 01:07:03 +05:30
NoSkillGirl
afe98bb93c
Added set flag
2020-08-22 01:07:03 +05:30
Pooja Singh
2717a03ab2
Not checking for cluster resources for CLI in policy validate ( #1076 )
2020-08-21 23:07:54 +05:30
Shuting Zhao
0aeb9f667a
return early in LCI if generated patches from policy mutation is nil
2020-08-19 15:11:21 -07:00
Mohan B E
f60deecdce
Feature/namespaced policy 280 ( #1058 )
...
* namespaced policy crd and cache
* modified main.go
* removed kyverno
* implemented policy violation generator for namespaced policy on audit
* modified cache
* added validation for cluster resource types
* install.yaml
* install.yaml
* removed namespaces from crd and refactored code
* modified NamespacePolicy to Policy
* added ClusterRole aggregate for policies
* modified clusterrole
2020-08-19 09:07:23 -07:00
Yuvraj
3799b52fc8
[BUG] filterK8Resources is not correctly configured using ConfigMap ( #1059 )
...
* configmap issue fixed
* fixed e2e test
* helm template file added
* remove extra check
* string empty check removed
2020-08-19 13:46:08 +05:30
Jim Bugwadia
e6a3aea88a
fix print
2020-08-18 21:56:43 -07:00
Jim Bugwadia
1235e922df
add newline
2020-08-18 21:40:47 -07:00
Jim Bugwadia
fc6da9c9e6
improve CLI validation reports
2020-08-18 21:03:00 -07:00
Pooja Singh
5a68653749
Supporting annotations in match/exclude ( #1045 )
...
* Supporting annotations in match/exclude filters
* updated readme
* small fix
2020-08-17 17:12:27 -07:00
shuting
db342d0ece
Improvements in webhook ( #1057 )
...
* remove empty flag
* format code
* revert change in install.yaml
* - skip mutation for a deleting resource - add debug log
* format code
* revert change in install.yaml
* - skip mutation for a deleting resource - add debug log
2020-08-17 11:17:07 -07:00
shuting
d6062fdd47
Add go fmt ( #1055 )
...
* remove empty flag
* format code
* revert change in install.yaml
2020-08-14 12:21:06 -07:00
Yuvraj
4ee523dccf
default exclude group role ( #1052 )
2020-08-13 14:30:25 -07:00
Yuvraj
4cb0e564d4
delete generate request if policy is deleted ( #1036 )
2020-08-10 10:12:11 -07:00
Yuvraj
73840e3c5f
configrable rules added ( #1017 )
...
* configrable rules added
* fix exclude group logic from code
* flag added in yaml
* exclude username added
* exclude username added
* config interface implimented
* configure exclude username
* get role ref
* test case fixed
* panic fix
* move from interface to slice
* exclude added in mutate
* trim strings
* configmap changes added
* kustomize changes for configmap
* k8s resources added
2020-08-07 17:09:24 -07:00
Mohan B E
a14828246d
Feature/api version 852 ( #1028 )
...
* apiVersion support for generate
* added apiVersion to crds
2020-08-07 09:47:33 +05:30
Mohan B E
6e827f912f
Feature/e2e 575 ( #1018 )
...
* added api templates
* E2E test for generate roles, rolebindings, clusterrole and clusterrolebindings
* table driven e2e tests
* table driven e2e tests and go fmt
* removed unwanted vars
* increased sleep time
* removed role generation clone
* increated sleep time
* added rolebinding clone and retry mechanism for get resources
* modified test for clone
* added namespace to role
* added namespace variable
* added git actions job
* changed build name
* removed docker login
* added role verbs
* removed github actions job and rbac file
* added clusterrole test with clone
* fixed travis issue
2020-08-06 10:46:10 +05:30
shuting
39de46fe39
983 kustomize support ( #1026 )
...
* prototype - strategic merge patch
* add end to end test
* add engine strategic merge patch support
* set webhook reinvocationPolicy to IfNeeded
* refactor engine mutate code
* support JMESPath in strategic merge patch
* implement patchesJson6902
* update doc
* resolve pr comments
2020-08-05 09:11:23 -07:00
Yuvraj
bad0dab175
ci migrated ( #1015 )
...
* ci migrated
* remove travis ci
* typo fix
* delete size labeler
* fix test issues
* test ci added
* rename build workflow
2020-08-05 09:02:45 -07:00
