Charles-Edouard Brétéché
0f5a0d492f
test: add unit test for GetResourceName util ( #5752 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-22 05:50:39 +00:00
Charles-Edouard Brétéché
3cce75ae0f
refactor: auth package and add full unit test coverage ( #5749 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-22 13:24:37 +08:00
Charles-Edouard Brétéché
3975323362
chore: bump deps including k8s ones ( #5751 )
...
* chore: bump deps including k8s ones
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 22:33:51 +00:00
Charles-Edouard Brétéché
ad19108d34
refactor: remove common package ( #5750 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 20:30:45 +00:00
Charles-Edouard Brétéché
59dd95b888
refactor: use typed client in auth ( #5743 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 17:12:26 +00:00
Charles-Edouard Brétéché
d6e8efb7f2
refactor: remove a couple of old util funcs ( #5746 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 17:44:02 +01:00
shuting
6dfcac53f2
chore: remove e2e tests ( #5742 )
...
* remove e2e tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix litmuschaos test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-21 17:12:08 +01:00
Chip Zoller
b1ea272567
Issue_templates ( #5741 )
...
* add global-anchor test
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add trusted-images test
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add yaml-signing test
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add x509-decode test
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-12-21 15:09:18 +00:00
Charles-Edouard Brétéché
6267217d59
chore: remove autogen internals tests ( #5740 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 14:19:42 +00:00
Charles-Edouard Brétéché
7aa1bcb31f
fix: cleanup controller image build ( #5739 )
...
* fix: cleanup controller image buil
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* image
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 13:44:22 +00:00
Charles-Edouard Brétéché
9d312d740c
chore: build cleanup controller image ( #5737 )
...
* chore: build cleanup controller image
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* image
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* release
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* reuse
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 12:07:59 +00:00
shuting
4e29ebca86
generate SLSA provenance on releases ( #5735 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-21 11:13:21 +00:00
shuting
18aeb26a1d
run conformance tests on different k8s versions ( #5733 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-21 11:14:53 +01:00
Santosh Kaluskar
646064f3f5
Allows {{image}} var to be used in policies ( #5122 )
...
Signed-off-by: Santosh Kaluskar <dtshbl@gmail.com>
Signed-off-by: Santosh Kaluskar <dtshbl@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-21 07:37:29 +00:00
Charles-Edouard Brétéché
b28c16fe99
refactor: split CLI jp command ( #5566 )
...
* refactor: split CLI jp command
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix sonatype comments
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-12-21 06:06:13 +00:00
Charles-Edouard Brétéché
c6ba1c85b5
chore: update k8s versions test grid ( #5732 )
...
* chore: update k8s versions test grid
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kind version
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-21 13:32:05 +08:00
Eileen
baa41bcf79
feat: add exception logic ( #5712 )
...
Signed-off-by: Eileen Yu <eileenylj@gmail.com>
Signed-off-by: Eileen Yu <eileenylj@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-21 04:35:26 +00:00
Charles-Edouard Brétéché
14445bf417
fix: remove all category from all our CRDs ( #5731 )
2022-12-21 11:44:11 +08:00
Charles-Edouard Brétéché
e211c3c959
feat: force background scan regularly ( #5727 )
...
* feat: force background scan regularly
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-20 16:42:08 +01:00
shuting
004e0feefa
add rule type pkg/metrics/parsers.go ( #5729 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-20 14:43:21 +00:00
shuting
d6c0ea01e3
bump Go 1.19.4 ( #5728 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-20 14:51:55 +01:00
shuting
021975f7fe
Revert "chore(deps): bump ossf/scorecard-action from 2.1.0 to 2.1.1 ( #5724 )" ( #5725 )
...
This reverts commit 2d231d60c4
2022-12-20 10:30:11 +01:00
dependabot[bot]
2d231d60c4
chore(deps): bump ossf/scorecard-action from 2.1.0 to 2.1.1 ( #5724 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](937ffa90d7...15c10fcf1c
2022-12-20 06:54:56 +00:00
Charles-Edouard Brétéché
54b7b65cfe
feat: propagate psa checks results ( #5719 )
...
* feat: propagate psa checks results
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add to report
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-20 05:57:23 +00:00
Charles-Edouard Brétéché
dfa20d6ee7
fix: add back install.yaml manifest ( #5721 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-19 20:49:42 +01:00
Charles-Edouard Brétéché
41fd4fb252
refactor: supress usage of kustomize in build ( #5691 )
...
* refactor: supress usage of kustomize in build (part 1)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* e2e
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* e2e
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* e2e
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* labels
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* simplify templating flags
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-19 16:26:07 +01:00
Jim Bugwadia
14d82cbf6d
Require predicate type ( #5713 )
...
* fix digest and verify logic
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* allow attestations with no attestors
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* require predicateType
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix typo
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-19 10:15:07 +00:00
shuting
b5625f340c
fix logger panic ( #5715 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-19 09:40:17 +00:00
Charles-Edouard Brétéché
dacb465e10
fix: interface conversion panic ( #5708 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-16 18:43:02 +01:00
shuting
4679766879
fix missing assignment ( #5710 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-16 15:58:30 +00:00
shuting
69739f3778
feat: add kuttl tests for #5704 ( #5707 )
...
* add kuttl tests for #5704
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* address comments
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-16 14:18:48 +00:00
Marc Brugger
a80ee683c1
fix: allow policies from stdin in apply again ( #5668 )
...
Signed-off-by: bakito <github@bakito.ch>
Signed-off-by: bakito <github@bakito.ch>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-16 13:50:15 +00:00
shuting
810b1335b6
initialize configmap resolver in background components ( #5705 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-16 10:26:48 +00:00
Eileen
e0f0fdf242
feat: Implement PolicyException ( #5680 )
...
* feat: Handle Exception
Signed-off-by: Eileen Yu <eileenylj@gmail.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Eileen Yu <eileenylj@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-16 09:13:14 +00:00
Jim Bugwadia
85bb5f32be
fix digest and verify logic ( #5703 )
...
* fix digest and verify logic
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* allow attestations with no attestors
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-12-16 08:44:49 +00:00
Charles-Edouard Brétéché
a34bbaa586
fix: block policy admission if kyverno is down ( #5677 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-16 07:05:06 +00:00
cleverhu
8fd841a912
fix info kind error ( #5701 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
2022-12-15 16:00:50 +01:00
Charles-Edouard Brétéché
66ba0fc5ec
fix: exception validation follow up ( #5697 )
...
* fix: exception validation follow up
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-15 17:53:22 +08:00
dependabot[bot]
560c4b7aef
chore(deps): bump github/codeql-action from 2.1.36 to 2.1.37 ( #5696 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.36 to 2.1.37.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](a669cc5936...959cbb7472
2022-12-15 09:05:25 +00:00
Charles-Edouard Brétéché
4618dc39d0
feat: add policy exception validation webhook ( #5679 )
...
* feat: add policy exception validation webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-15 08:34:44 +00:00
dependabot[bot]
8c0325b33b
chore(deps): bump ossf/scorecard-action from 2.0.6 to 2.1.0 ( #5695 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.6 to 2.1.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](99c53751e0...937ffa90d7
2022-12-15 08:03:59 +00:00
Charles-Edouard Brétéché
4832092969
chore: bump a couple of deps ( #5688 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-15 07:32:03 +00:00
dependabot[bot]
4a6e7b4e2f
chore(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 ( #5694 )
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.24.1 to 1.24.2.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.24.1...v1.24.2 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-15 14:58:39 +08:00
dependabot[bot]
0550166193
chore(deps): bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0 ( #5683 )
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 3.2.0 to 4.1.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](b508e2e3ef...8f67e590f2
2022-12-14 18:32:21 +00:00
Charles-Edouard Brétéché
84a5b0d0bc
fix: bump log level for autogen debug logs ( #5687 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-14 13:06:24 +00:00
Charles-Edouard Brétéché
682afc8e0f
chore: remove deprecated flag splitPolicyReport ( #5686 )
...
* chore: remove deprecated flag splitPolicyReport
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-14 13:21:13 +01:00
dependabot[bot]
a4825ce760
chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 ( #5684 )
...
* chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](d0a58c1c4d...6edd4406fa
2022-12-14 08:47:55 +00:00
dependabot[bot]
b6c0325bc6
chore(deps): bump JasonEtco/create-an-issue from 2.8.1 to 2.8.2 ( #5685 )
...
Bumps [JasonEtco/create-an-issue](https://github.com/JasonEtco/create-an-issue ) from 2.8.1 to 2.8.2.
- [Release notes](https://github.com/JasonEtco/create-an-issue/releases )
- [Commits](77399b6110...3a8ba79651
2022-12-14 09:20:59 +01:00
Charles-Edouard Brétéché
d100f4647d
chore: remove secrets client from webhook controller ( #5682 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-14 01:00:29 +00:00
Charles-Edouard Brétéché
fdce9d92dc
chore: rename exclude into match in policy exception ( #5681 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-13 16:18:27 -08:00
