1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-01-20 18:52:16 +00:00
Commit graph

5929 commits

Author SHA1 Message Date
Charles-Edouard Brétéché
194bfacc71
fix: permission validation message (#7362)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-31 19:14:32 +00:00
Justin Seiser
2521c63b86
feat(cronjobs): Enable podAnnotations on CronJobs (#7366)
Signed-off-by: Justin S <justinseiser@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-31 18:48:07 +00:00
Charles-Edouard Brétéché
408c00ae93
fix: protect managed resource not considering other components (#7363)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-31 14:05:49 +00:00
Vishal Choudhary
f7e57aa117
Added myself to contributors md (#7356)
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
2023-05-31 13:41:20 +00:00
Charles-Edouard Brétéché
5dacdef364
fix: helm migration guide (#7360)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-31 09:14:51 -04:00
Marc Brugger
049992403c
feat: cleanup jobs resources (#7337)
* feat: cleanup jobs resources

Signed-off-by: bakito <github@bakito.ch>

* empty resources by default

Signed-off-by: bakito <github@bakito.ch>

---------

Signed-off-by: bakito <github@bakito.ch>
2023-05-31 10:09:13 +00:00
Adam Johnson
efef465aab
feat: cleanup job tolerations (#7331)
* feat: cleanup job tolerations

Signed-off-by: Adam Johnson <adamjohnson01@gmail.com>

* Update charts/kyverno/templates/cleanup/cleanup-cluster-admission-reports.yaml

Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Adam Johnson <adamjohnson01@gmail.com>

---------

Signed-off-by: Adam Johnson <adamjohnson01@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-31 08:29:38 +00:00
dependabot[bot]
1c71d638a0
chore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#7346)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 07:52:03 +00:00
Charles-Edouard Brétéché
19a51dd294
fix: mutate resource in image verification handler (#7339)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-31 15:27:35 +08:00
Charles-Edouard Brétéché
465982563b
fix: flaky kuttl test add-external-secret-prefix (#7338)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-30 22:18:50 +00:00
Chip Zoller
249d7e3150
update version drop-downs (#7333)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2023-05-30 21:54:35 +00:00
Charles-Edouard Brétéché
1de8b5f0fb
fix: config map name in helm chart (#7341)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-30 17:29:27 -04:00
shuting
47bf1e8612
Add scaling testing instructions (#7295)
* add instructions

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add etcd sizes for pods

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kwok script

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update kwok script

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update node creation script

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add script to calculate size

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fixes

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-30 14:57:32 +00:00
Charles-Edouard Brétéché
8ecf829647
fix: panic in background reports (#7332)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-30 22:15:47 +08:00
Charles-Edouard Brétéché
7a838de4f1
feat: add auth checker interface (#7323)
* feat: add auth checker interface

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-30 18:01:44 +08:00
Jim Bugwadia
5d4e250dfe
remove validation for deprecated field generateExistingOnPolicyUpdate (#7324) 2023-05-30 05:53:23 +00:00
Marcus Vaal
b1d38ffcbf
feat: [Feature] add podLabels and podAnnotations to background clean and reports controllers (#7312)
* feat: [Feature] add podLabels and podAnnotations to background clean and reports controllers

Signed-off-by: mvaal <mvaal@expediagroup.com>

* Fixed spacing issue

Signed-off-by: mvaal <mvaal@expediagroup.com>

* make codegen-helm-docs

Signed-off-by: mvaal <mvaal@expediagroup.com>

* Fixed copy/paste variable

Signed-off-by: mvaal <mvaal@expediagroup.com>

* Fix linting

Signed-off-by: mvaal <mvaal@expediagroup.com>

---------

Signed-off-by: mvaal <mvaal@expediagroup.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-29 09:03:26 +00:00
Mathew Wicks
35e378358d
fix: chart app.kubernetes.io/instance label value (#7315)
Signed-off-by: Mathew Wicks <thesuperzapper@users.noreply.github.com>
2023-05-27 00:33:29 +02:00
Alok Naushad
ad1c2d6bca
test: pod restart on configmap/secret update (#7306)
* test: pod restart on secret update

Signed-off-by: Alok N <alokme123@gmail.com>

* fix: requested changes

Signed-off-by: Alok N <alokme123@gmail.com>

* fix: debug remove, secret

Signed-off-by: Alok N <alokme123@gmail.com>

---------

Signed-off-by: Alok N <alokme123@gmail.com>
2023-05-26 11:06:13 -04:00
Charles-Edouard Brétéché
f74eac4e52
fix: tls cipher suites (#7308)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-26 13:15:12 +00:00
Charles-Edouard Brétéché
cb56913364
fix: do not use release name in chart (#7303)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-26 11:01:48 +00:00
Chip Zoller
303e3fd76f
update note (#7298)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2023-05-26 10:37:59 +00:00
dependabot[bot]
fd7a25d0e3
chore(deps): bump github/codeql-action from 2.3.4 to 2.3.5 (#7302)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f0e3dfb303...0225834cc5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 15:53:56 +08:00
dependabot[bot]
e636eb99c5
chore(deps): bump github.com/notaryproject/notation-core-go (#7292)
Bumps [github.com/notaryproject/notation-core-go](https://github.com/notaryproject/notation-core-go) from 1.0.0-rc.3 to 1.0.0-rc.4.
- [Release notes](https://github.com/notaryproject/notation-core-go/releases)
- [Commits](https://github.com/notaryproject/notation-core-go/compare/v1.0.0-rc.3...v1.0.0-rc.4)

---
updated-dependencies:
- dependency-name: github.com/notaryproject/notation-core-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 01:47:34 +00:00
shuting
0938003aee
add kuttl tests (#7283)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-26 01:16:50 +00:00
Chip Zoller
64e3dde6ff
update versions (#7297)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2023-05-26 08:53:28 +08:00
Marcus Vaal
a29582af2a
Fix: [Bug] registry is not defaulted to ghcr.io for backgroundController (#7286)
Signed-off-by: mvaal <mvaal@expediagroup.com>
2023-05-25 16:50:50 +00:00
dependabot[bot]
6133f4fbc3
chore(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 (#7290)
Bumps [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](https://github.com/oras-project/oras-go/compare/v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: oras.land/oras-go/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-25 16:17:14 +00:00
dependabot[bot]
580e01e625
chore(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (#7288)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](29b1f65c5e...f0e3dfb303)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 15:36:22 +00:00
dependabot[bot]
c2045a1496
chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 (#7289)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](57ded4d7d5...bd6b4b6205)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 23:02:47 +08:00
dependabot[bot]
22e9dd8a82
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#7274)
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 12:18:39 +00:00
Charles-Edouard Brétéché
492a6761f8
feat: add yaml util to check empty document (#7276)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-24 09:58:43 +00:00
dependabot[bot]
44a53d3bd7
chore(deps): bump sigs.k8s.io/controller-runtime from 0.14.6 to 0.15.0 (#7272)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.14.6 to 0.15.0.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.14.6...v0.15.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 08:50:49 +00:00
dependabot[bot]
8160a44400
chore(deps): bump svenstaro/upload-release-action from 2.5.0 to 2.6.0 (#7270)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](7319e4733e...58d5258088)

---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 08:23:24 +00:00
shuting
67cf3e1c96
fix latest version check (#7263)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-23 15:38:41 +00:00
Charles-Edouard Brétéché
f372adfa1a
fix: auto update webhooks not configuring fail endpoint (#7261)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-23 15:13:26 +00:00
Marc Brugger
2031134a28
quote image in error (#7259)
Signed-off-by: bakito <github@bakito.ch>
2023-05-23 16:47:47 +02:00
Jim Bugwadia
07be2d9d72
lazy evaluate vars in conditions (#7238)
* lazy evaluate vars in conditions

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove unnecessary conversion

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* Update test/conformance/kuttl/validate/clusterpolicy/standard/variables/lazyload/conditions/03-manifests.yaml

Signed-off-by: shuting <shutting06@gmail.com>

* Update test/conformance/kuttl/validate/clusterpolicy/standard/variables/lazyload/README.md

Signed-off-by: shuting <shutting06@gmail.com>

* added error check in test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

---------

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2023-05-20 21:06:54 +00:00
dependabot[bot]
ccb6da143a
chore(deps): bump k8s.io/apiextensions-apiserver from 0.27.1 to 0.27.2 (#7242)
Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.27.1 to 0.27.2.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-20 07:24:37 +00:00
dependabot[bot]
05f411ba0d
chore(deps): bump k8s.io/kube-aggregator from 0.27.1 to 0.27.2 (#7241)
Bumps [k8s.io/kube-aggregator](https://github.com/kubernetes/kube-aggregator) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/kube-aggregator/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/kube-aggregator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 10:59:15 +00:00
dependabot[bot]
43f3ba5b84
chore(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#7239)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.27.6 to 1.27.7.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.27.6...v1.27.7)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 10:25:48 +00:00
dependabot[bot]
e2d79abb2d
chore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#7240)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 17:09:28 +08:00
shuting
ecd3d75704
fix: match logic misbehave (#7218)
* add rule name in ur for mutate existing

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix match logic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fixes

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix the match logic to only apply to the new object, unless it's a delete request

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix unit tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-18 21:57:57 +00:00
dependabot[bot]
3ab84a2cb0
chore(deps): bump k8s.io/pod-security-admission from 0.27.1 to 0.27.2 (#7232)
Bumps [k8s.io/pod-security-admission](https://github.com/kubernetes/pod-security-admission) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/pod-security-admission/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/pod-security-admission
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-18 11:45:54 +00:00
dependabot[bot]
addfe22842
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#7229)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](03d0fecf17...dd6b2e2b61)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-18 11:04:23 +00:00
dependabot[bot]
e476e0c051
chore(deps): bump k8s.io/cli-runtime from 0.27.1 to 0.27.2 (#7228)
Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-18 09:41:34 +00:00
dependabot[bot]
80c9613436
chore(deps): bump k8s.io/apimachinery from 0.27.1 to 0.27.2 (#7227)
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-18 09:17:22 +00:00
Charles-Edouard Brétéché
a8aab34986
docs: add reports system design doc (#6949)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-18 07:19:02 +00:00
Charles-Edouard Brétéché
6cf0f36339
fix: do not exclude kube-system service accounts by default (#7225)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-17 22:23:30 +00:00
shuting
d99c000b17
fix: mutate existing auth check (#7219)
* fix auth check when using variables in ns

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-17 18:20:34 +02:00