93 commits

Author	SHA1	Message	Date
Jim Bugwadia	1323a9a81e	add policy and test case	2019-11-01 15:19:26 -07:00
Jim Bugwadia	8ddd9f036f	Merge branch 'master' into 410_no_new_capabilities	2019-11-01 14:53:56 -07:00
Jim Bugwadia	4fbc57bfed	update policy and test case	2019-11-01 14:37:17 -07:00
Jim Bugwadia	aa6b65480a	updated policy	2019-11-01 11:47:29 -07:00
Jim Bugwadia	eebfab87e5	add YAML and description	2019-10-31 18:40:54 -07:00
shivkumar dudhani	ea9bfe32cb	update the policy	2019-10-31 13:29:16 -07:00
Shivkumar Dudhani	92c96aaf1f	Revert "use validatepattern in generate rule to check for subset existance"	2019-10-31 13:21:38 -07:00
shivkumar dudhani	61c1ea5a49	use validatepattern in generate rule to check for subset existance	2019-10-31 13:04:56 -07:00
shuting	a0f5419430	Merge pull request #416 from nirmata/158_array_validation ... update link to import policies	2019-10-30 13:20:39 -07:00
Jim Bugwadia	3438e84013	fix YAML syntax	2019-10-30 13:12:29 -07:00
Jim Bugwadia	3783ae0495	update policy	2019-10-30 12:59:51 -07:00
Shuting Zhao	f25a336eeb	- update doc; -remove duplicate policy	2019-10-30 12:29:57 -07:00
shivkumar dudhani	90575e1067	update policy	2019-10-24 18:48:48 -05:00
shivkumar dudhani	6b7b50f7af	fix generate format	2019-10-24 12:37:52 -05:00
Shuting Zhao	c6d5ec7575	Merge commit '82647670a54ead965c8cb964f3063409d0826070' into 337_policy_description ... # Conflicts: # pkg/testrunner/testrunner_test.go # samples/README.md # samples/best_practices/policy_validate_deny_runasrootuser.yaml # test/scenarios/samples/best_practices/scenario_validate_nonRootUser.yaml	2019-10-15 12:27:22 -07:00
Shuting Zhao	da57501dcd	update description format	2019-10-14 16:33:19 -07:00
shivkumar dudhani	d98ba1ab1a	remove audit flag, as its default behavior	2019-10-14 14:17:07 -07:00
Shuting Zhao	61808837fb	update description	2019-10-14 13:58:47 -07:00
Shuting Zhao	4d2bcef411	remove duplicate	2019-10-14 13:50:00 -07:00
Shuting Zhao	75806146c6	Merge branch 'best_practice_policies' into 337_policy_description ... # Conflicts: # samples/README.md	2019-10-14 13:21:10 -07:00
shivkumar dudhani	4abdec337d	documentation updates	2019-10-14 10:47:54 -07:00
Shuting Zhao	46f72cb424	Provide descriptions for policies	2019-10-11 18:57:16 -07:00
Shuting Zhao	38bf4d6055	add 'deny-use-of-host-fs'	2019-10-10 18:42:54 -07:00
Shuting Zhao	24f3b8ac96	disallow automountServiceAccountToken	2019-10-10 12:29:48 -07:00
Shuting Zhao	f1ed0720c4	update default network policy to deny all ingress traffic	2019-10-10 11:08:20 -07:00
Shuting Zhao	7fcc6bbd33	require default namespace resource quota	2019-10-10 10:46:11 -07:00
Shuting Zhao	3087257b46	disallow use of default namespace	2019-10-10 10:34:49 -07:00
Shuting Zhao	012360ae3a	allow trusted registries	2019-10-10 10:29:10 -07:00
Shuting Zhao	995efc4e63	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies ... # Conflicts: # samples/README.md	2019-10-09 23:50:49 -07:00
Shuting Zhao	c51c28bdd2	update readme	2019-10-09 23:46:18 -07:00
shivkumar dudhani	3f33e925f3	handle default and omitempty with condition anchor	2019-10-09 21:07:45 -07:00
Shuting Zhao	48c2c39da7	add samples/best_practices/require_default_network_policy.yaml	2019-10-09 18:52:48 -07:00
Shuting Zhao	4d29b461ff	add require_image_tag_not_latest.yaml	2019-10-09 18:35:07 -07:00
Shuting Zhao	3e1ef320a8	add require_probes.yaml	2019-10-09 17:49:00 -07:00
Shuting Zhao	ea25ed8460	add check-pod-request-limit.yaml	2019-10-09 17:37:31 -07:00
Shuting Zhao	381210e977	add disallow_node_port.yaml	2019-10-08 22:13:34 -07:00
Shuting Zhao	18c190447f	update require-readonly-rootfilesystem.yaml	2019-10-08 22:09:58 -07:00
Shuting Zhao	cb44585d70	add disallow_readonly_rootfilesystem.yaml	2019-10-08 22:05:15 -07:00
Shuting Zhao	c755df6b70	add scenario_validate_disallow_hostpid_hostipc.yaml	2019-10-08 21:58:05 -07:00
Shuting Zhao	ce41e4a99d	add disallow_host_network_hostport.yaml	2019-10-08 21:51:35 -07:00
Shuting Zhao	0c0a9a69a6	add disallow_priviledged_privelegesecalation.yaml	2019-10-08 21:42:49 -07:00
Shuting Zhao	8f8bd05106	add samples/best_practices/deny_runasrootuser.yaml	2019-10-08 21:30:19 -07:00
Shuting Zhao	42f0bf8e0e	inital commit, add samples folder	2019-10-08 18:40:15 -07:00