1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

3504 commits

Author SHA1 Message Date
Pooja Singh
cd9e596e7e
[Improvement] Kyverno should not delete downstream resources when a generate policy using the clone behavior has synchronize: true (#1880)
* debuging issue

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* issue fixed

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* remove policy name in source resource

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* fixed deletion of GR on source updation

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added function in common

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removing comments

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added generated resource list to the log

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small improvement

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-30 12:00:02 -07:00
shuting
2c9e52af98
update podSecurityStandard from default to baseline (#2084)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-29 15:54:17 -07:00
Valentin Velkov
63f4c9a884
Configurable success events on policies & resources. Generating failure events on policies by default. (#1939)
* Remove unused event.Reason const

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Generate failure events on policies

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Generate success events on policy

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Introduce 'generateSuccessEvents' flag

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Unit tests & chart fix

Signed-off-by: Velkov <valentin.velkov@sap.com>
2021-06-29 14:43:11 -07:00
Chip Zoller
436d44050b
Helm chart README fixes (#2062)
* fix link to PR doc

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix description

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* chart README fixes

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Helm chart README clean-up

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Revert "fix description"

This reverts commit e128152cd7.

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-06-29 13:48:26 -07:00
treydock
c479517c53
Fix Helm release during tag (#2081)
Fixes #2057

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-29 13:36:30 -07:00
Pooja Singh
23d1a92b99
Merge pull request #2026 from NoSkillGirl/caching_endpoint
Adding endpoint check for policy creation
2021-06-29 12:11:35 +05:30
NoSkillGirl
a8ab5e74ed added comment
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-29 11:52:24 +05:30
Arsh Sharma
fbc80cdfae
adding support for multiple names in match and exclude blocks (#2010)
* add names in rd struct

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added checking logic

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* updated yamls

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* wip: fix empty set problem

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* working with exclude

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixing name and names

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added error if both name and names are specified

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added tests

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* changed empty set logic, fixed whitespaces and comments

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fix match and exclude bug

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-28 22:31:22 -07:00
Vyankatesh Kudtarkar
8556cf6c91
Merge pull request #2066 from MarcusNoble/fix_helm_deployment_name
fix: set deployment name env var
2021-06-28 15:30:54 +05:30
Nicolas Lamirault
4ca208da25
FIX Custom labels indentation (#2073)
* Fix: custom labels indentation

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: bump chart version

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2021-06-25 13:28:30 -07:00
Shuting Zhao
f9a89c4672 tag v1.4.1
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-24 15:13:15 -07:00
shuting
0a13ce9c73
Revert "Fix Helm deployment name issue" (#2070) 2021-06-24 14:22:34 -07:00
Pooja Singh
54a85c5da1
Merge pull request #2045 from vyankyGH/fix_deployment_name
Fix Helm deployment name issue - install kyverno with helm release name != kyverno
2021-06-24 19:19:19 +05:30
vyankatesh
235038e712 fix deployment issue 2021-06-24 13:07:51 +05:30
vyankatesh
11a05496de fix helm deployment name 2021-06-24 13:03:15 +05:30
Marcus Noble
443d56fd4d fix: set deployment name env var
Signed-off-by: Marcus Noble <m.noble@elsevier.com>
2021-06-24 08:17:14 +01:00
treydock
3b1fd912cb
Move log to debug for wildcard pattern matching (#2064)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-23 16:48:09 -07:00
Mahfuza Humayra Mohona
9e769d1fd0
Integrate LitmusChaos - Pod Memory Hog experiment (#2014)
* updating readme

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Updating GetWithRetry function

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Updating GetWithRetry function

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Updating GetWithRetry function

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* removing update

Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Update utils.go

Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>
2021-06-23 14:16:49 -07:00
Arsh Sharma
9efd58f667
deleted bot (#2059)
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-23 00:23:33 -07:00
shuting
3b06378142
remove selector from Helm chart (#2056)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-22 23:10:04 -07:00
Vyankatesh Kudtarkar
09909a56f2
Merge pull request #2054 from DarthBenro008/fix/2031
add: http/https regex to kyverno CLI
2021-06-23 10:10:25 +05:30
DarthBenro008
e82e7e7596
refactor: fix minor typos
Signed-off-by: DarthBenro008 <hkpdev008@gmail.com>
2021-06-23 00:37:41 +05:30
Pooja Singh
c6c803511c
Merge pull request #1977 from RinkiyaKeDad/1818_default_to_baseline
replacing pod security standard from default to baseline
2021-06-22 23:35:39 +05:30
vivek kumar sahu
faa88699af
fix typo in policy struct (#1992)
* Updates L-30  Signed-off-by: viveksahu26  vivekkumarsahu650@gmail.com

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* compile the code using

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
2021-06-22 10:03:15 -07:00
Retna Ramachandran
5825dfbf4f
feat: splitting envVars for initContainers and containers
Signed-off-by: Retna Ramachandran <retna@gjensidige.no>
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-06-22 15:41:58 +02:00
Retna Ramachandran
c95802bf84
fix: clean up of extra ENV key in manifest
Signed-off-by: Retna Ramachandran <retna@gjensidige.no>
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-06-22 15:41:58 +02:00
Retna
194c99564e
fix: added envVars to containers
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-06-22 15:41:58 +02:00
DarthBenro008
c32526f109
fix: add http/https regex to kyverno CLI
Signed-off-by: DarthBenro008 <hkpdev008@gmail.com>
2021-06-22 18:48:23 +05:30
Vyankatesh Kudtarkar
4765d1ccc9
Merge pull request #2052 from georgekaz/cert-patch-iterate-chart-version
iterate-chart-version
2021-06-22 16:08:34 +05:30
George Kaz
d4180737f5 iterate-chart-version
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-06-22 09:49:06 +01:00
RinkiyaKeDad
a93c46a8e8 psd -> psb
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-22 12:05:19 +05:30
Vyankatesh Kudtarkar
14f401a118
Merge pull request #2048 from georgekaz/cert-patch
Correct ca and cert namespace
2021-06-22 11:25:54 +05:30
Arsh Sharma
86045fc02c
adding support for policies.kyverno.io/scored annotation (#1976)
* initial commit

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added debug statements

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed report

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed code for debugging

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* newline fix

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fix default case

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 18:37:20 -07:00
Arsh Sharma
431b36f34e
updating the bot to auto label issues and PRs (#2042)
* changed labeler bot

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed label for hold

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 12:10:25 -07:00
NoSkillGirl
6361aeae21 removing print statements
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-22 00:29:04 +05:30
NoSkillGirl
c607408098 corrected policy name in config
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 23:44:20 +05:30
NoSkillGirl
aa574ca242 printing metric log for Test_Role_RoleBinding_Sets
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 23:07:18 +05:30
NoSkillGirl
58fcd76c3a fixing reviewdog comments
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 21:50:49 +05:30
NoSkillGirl
aa93ccf4d7 added policy name for mutate policies
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 21:35:43 +05:30
NoSkillGirl
087b4330d4 added metrics check for policy creation
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
a886539899 considering time difference less than 1 sec
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
d45175f5be print metrics for applied policy
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
60a5623b94 print metrics which matches policy name
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
cfa8ae0135 checking metrics in generate e2e
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
28b053e54e debuging metrics
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
fcb792964d calling metrics in generate e2e
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
9bdf6437eb handling error for json encode
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
NoSkillGirl
d6920e1acf added function for get cache
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 20:35:51 +05:30
George Kaz
de409159e3 Correct ca and cert namespace
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-06-21 15:57:51 +01:00
Pooja Singh
e677e91679
Merge pull request #2024 from NoSkillGirl/2023/CLI_should_validate_all_resources
added loop for namespace to validate all the resources
2021-06-19 12:55:13 +05:30