Mohd Kamaal
19b816ba70
solves the cronjob autogen nested path issue ( #12383 )
...
* solves the cronjob autogen nested path issue
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
* format the file using linter
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
* autogen path change in validating-polcies
Signed-off-by: Mohd Kamaal <mohdcode@MBA.local>
---------
Signed-off-by: Mohd Kamaal <mohdkamaal2019@gmail.com>
Signed-off-by: Mohd Kamaal <mohdcode@MBA.local>
Co-authored-by: Mohd Kamaal <mohdcode@MBA.local>
2025-03-13 14:22:51 +00:00
Vishal Choudhary
d56e6037a4
fix: image parse func and add chainsaw tests ( #12396 )
...
* fix: image parse func and add chainsaw tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-13 07:01:40 +00:00
Frank Jogeleit
6fdbdbce28
Fix: data access in audit annotations ( #12394 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 16:44:50 +00:00
Vishal Choudhary
98ecf30a62
fix: add missing context type and http type in ivpols ( #12393 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-12 14:47:21 +00:00
shuting
91e6ae14fe
feat: register webhook for ivpol ( #12391 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-12 16:04:11 +05:30
Frank Jogeleit
f59cae97f2
Fix: data access in message expressions ( #12390 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 09:32:29 +00:00
Charles-Edouard Brétéché
9f70209361
feat: mock list resources in context ( #12380 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 17:21:30 +00:00
Frank Jogeleit
1a7c581220
fix: providing the http provider in the compiler ( #12379 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-11 15:00:20 +00:00
Charles-Edouard Brétéché
0d43a2d997
feat: make image ref parsing a static function ( #12374 )
...
* feat: make image ref parsing a static function
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 14:19:36 +00:00
shuting
b5b1287282
chore: improve error handling ( #12376 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-11 13:52:04 +01:00
Vishal Choudhary
d812982b2e
feat: webhook handlers for image verification ( #12318 )
...
* feat: webhook support for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add validation
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: codegen
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: trim prefix
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: only use matched policies
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: conflicts
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove commented code
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-11 07:38:11 +00:00
Charles-Edouard Brétéché
c655ba72c2
fix: use pointer in context config map getter ( #12365 )
2025-03-10 14:31:34 +00:00
Charles-Edouard Brétéché
1c3bddf8ca
feat: support mock in CLI for VPs ( #12344 )
...
* feat: support mock in CLI for VPs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* implement get cm mock
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* move into cel package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-10 13:28:44 +00:00
Charles-Edouard Brétéché
a9ac540ddc
fix: nits in cel context lib ( #12333 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-09 17:47:11 +00:00
Frank Jogeleit
1ac2dd9fa6
Add CEL context.Lib to the imageverification compiler ( #12337 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-09 17:06:53 +00:00
Javier Solana
b00b2c96c8
chore: add dryrun as label ( #11962 )
...
* chore: add dryrun as label
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* check request.Dryrun to avoif SIGSEGV
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: add dryrun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: add dryrun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: update doc to add DryRun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: update to add DryRun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Javier Solana <javier.solana@cabify.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Javier Solana <javier.solana@cabify.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-07 23:30:22 +08:00
Frank Jogeleit
29849e196f
Add CEL HTTP Lib to the imageverification compiler ( #12335 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-07 13:31:38 +00:00
Charles-Edouard Brétéché
c55354d5a1
chore: remove unused code ( #12325 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 10:21:49 +00:00
shuting
d7a37924a9
feat: skip applying a VP which is converted to VAP ( #12312 )
...
* feat: skip vpol application if it's converted to vap
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add missing error checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-07 08:07:50 +00:00
Vishal Choudhary
4b4e6cc415
feat: add parse image reference function ( #12317 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 07:34:08 +00:00
Frank Jogeleit
da1fbd9475
Cel HTTP Lib ( #12241 )
...
* Implement HTTP CEL lib for external API calls
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* fix lint errors
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
---------
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-06 15:13:13 +00:00
Frank Jogeleit
1cc5b7a3ab
Skip reporting for vpol when vap generation is enabled ( #12311 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-06 14:35:34 +00:00
Khaled Emara
c61d0735e3
feat(vp): implement gctx in context library ( #12055 )
...
* feat(vp): implement gctx in context library
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(cel): add chainsaw test for validating policies gctx
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-06 09:27:03 +00:00
shuting
637f756994
feat: support json payload via CLI apply command ( #12296 )
...
* chore: remove unused code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: support json in CLI apply command
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: remove not used validation expressions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-06 08:48:26 +00:00
Vishal Choudhary
32f13d5894
fix: use object key in json image verification ( #12298 )
2025-03-05 19:53:19 +00:00
Frank Jogeleit
6967533d9d
feat: support CELPolicyException in the report-controller ( #12287 )
...
* feat: support CELPolicyException in the report-controller
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* feat: support CELPolicyException in the report-controller
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
---------
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-05 12:54:35 +00:00
Vishal Choudhary
c47b48bda6
feat: autogenerate image verification policies for pod controllers ( #12290 )
...
* feat: autogen for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-04 21:30:23 +00:00
shuting
84e9517bad
feat: add cel evaluator for json payload ( #12288 )
...
* feat: add cel evaluator for json payload
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: linter fixes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
2025-03-04 15:20:26 +00:00
Vishal Choudhary
0dda60bf12
fix: autogen refactor ( #12286 )
...
* fix: autogen refactor
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: more refactor
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-04 18:55:45 +08:00
Vishal Choudhary
70dc8cb81a
feat: image verify performance fix and tests ( #12282 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-04 06:34:31 +00:00
Vishal Choudhary
00f3e2f775
feat: add evaluation config to image verification policies ( #12279 )
...
* feat: add evaluation config to image verification policies
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-03 21:27:07 +05:30
刘旭
608b9fd5b7
fix(gctx): add event handler before informer start ( #12263 )
...
Signed-off-by: liuxu <liuxu623@gmail.com>
2025-03-03 13:46:49 +00:00
Rohan Raj
1202eef054
Indicate in report result the origin, admission, or background ( #12056 )
...
* Indicate in report result the origin, admission or background
Signed-off-by: Rohanraj123 <rajrohan88293@gmail.com>
* Add Null check on AsKyvernoPolicy() method
Signed-off-by: Rohanraj123 <rajrohan88293@gmail.com>
---------
Signed-off-by: Rohanraj123 <rajrohan88293@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-03 07:04:24 +00:00
shuting
f2f724469d
chore: remove mutatingpolicies ( #12261 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-02-28 14:22:09 +00:00
Mariam Fahmy
2ea7e7ce76
feat: add new field to control VAP generation per policy ( #12242 )
...
* feat: add new field to control VAP generation per policy
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* chore: remove 1.28 and 1.29 from tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-28 13:35:13 +00:00
Vishal Choudhary
7439fcc733
feat(test): image verification on any payload ( #12266 )
2025-02-28 09:09:25 +00:00
Mohd Kamaal
8777672fb1
changes if condition to check for RegExp field ( #12237 )
2025-02-28 06:43:32 +00:00
Frank Jogeleit
5f42a0bad8
feat: context function to request resources from api server ( #12181 )
...
* feat: context function to request resources from api server
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* add chainsaw test
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* replace dclient with dynamic client
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* update test case
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
---------
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-27 13:31:03 +00:00
Mariam Fahmy
b8a1731d49
feat: generate VAPs given celexceptions ( #12255 )
...
* feat: generate VAPs given celexceptions
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* chore: modify chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix linter
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-27 13:08:35 +00:00
刘旭
d96f40072f
fix(gctx): remove unnecessary json Marshal/Unmarshal operations to reduce memory usage ( #12201 )
...
Signed-off-by: liuxu <liuxu623@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-27 17:03:36 +08:00
刘旭
8b4f222860
fix(gctx): fix gctx projection cache ( #12226 )
...
Signed-off-by: liuxu <liuxu623@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-27 08:23:23 +00:00
Vishal Choudhary
8d915b52ce
feat: add evaluator for image verification policies ( #12251 )
...
* feat: add variables
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: implement evaluator
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: build
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-02-27 15:19:11 +08:00
Charles-Edouard Brétéché
ebaad6fbb1
feat: improve validating policy api ( #12243 )
...
* feat: improve validating policy api
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-26 15:18:12 +00:00
shuting
7a34b60ed2
feat: create patchers and apply mutations ( #12253 )
...
* feat: create patchers and apply mutations
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: create patchers and apply mutations
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-02-26 13:32:28 +00:00
Vishal Choudhary
f68706cab2
feat: add cel library for image verification ( #12233 )
...
* feat: concurrently add images to context
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add cel library for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: type conv
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-26 00:56:17 +00:00
Mariam Fahmy
75a10ac550
feat: introduce generic exception interface ( #12244 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-25 16:11:19 +00:00
Charles-Edouard Brétéché
9d56f5f2b5
feat: stop reusing admissionregistrationv1.ValidatingAdmissionPolicySpec ( #12246 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-25 14:48:47 +00:00
Mariam Fahmy
6359fd4a1a
feat: generate VAPs from VPs ( #12222 )
...
* feat: generate VAPs from VPs
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix codegen
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-25 20:27:29 +08:00
Ujjwal Sharma
b25455aa63
Adds kyverno_info metric ( #12128 )
...
Signed-off-by: Darkhood148 <ujjwal.sharma9999999@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-24 15:30:50 +00:00
Charles-Edouard Brétéché
61f091ccab
chore: add cel unit tests ( #12232 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-24 14:44:46 +01:00
