651 commits

Author	SHA1	Message	Date
Shuting Zhao	f820cb4c83	implement #387 Generate clusterpolicyviolation when policy action set to "enforce"	2019-10-21 15:55:20 -07:00
shivkumar dudhani	3fa8834b4a	policy validation: refactoring	2019-10-21 14:22:31 -07:00
Shuting Zhao	68c87a09ec	add unit test for negationanchor on mutation	2019-10-18 18:17:11 -07:00
Shuting Zhao	2e1b731e35	fix test error	2019-10-18 17:50:26 -07:00
Shuting Zhao	32f94bca27	manage policy validation inside engine pkg	2019-10-18 17:45:24 -07:00
shivkumar dudhani	64eab3d1d6	initial commit	2019-10-18 17:38:46 -07:00
Shuting Zhao	7239b4d9b7	Merge commit '37c25daa17ad046f739e74d803cb78d887805bb4' into 346_validate_policy ... # Conflicts: # pkg/api/kyverno/v1alpha1/utils.go	2019-10-18 10:09:44 -07:00
Shuting Zhao	01dae46580	remove unused code	2019-10-16 10:33:28 -07:00
Shuting Zhao	2ff6eb6e78	implement #387 Generate clusterpolicyviolation when policy action set to "enforce"	2019-10-15 20:56:41 -07:00
shuting	81f202752c	Merge pull request #379 from nirmata/337_policy_description ... 337 policy description	2019-10-15 14:34:14 -07:00
shuting	3232fadbe5	Merge pull request #389 from nirmata/388_bug ... delete PV if the P it refers to is stale	2019-10-15 12:27:40 -07:00
Shuting Zhao	c6d5ec7575	Merge commit '82647670a54ead965c8cb964f3063409d0826070' into 337_policy_description ... # Conflicts: # pkg/testrunner/testrunner_test.go # samples/README.md # samples/best_practices/policy_validate_deny_runasrootuser.yaml # test/scenarios/samples/best_practices/scenario_validate_nonRootUser.yaml	2019-10-15 12:27:22 -07:00
shivkumar dudhani	5d228d9586	fix error param	2019-10-15 11:30:06 -07:00
shivkumar dudhani	1a7b92f001	delete PV if the P it refers to is state	2019-10-15 11:07:22 -07:00
shivkumar dudhani	9b9f6686cb	remove comments	2019-10-14 14:17:16 -07:00
Shuting Zhao	a384c263f4	remove duplicate test scenario	2019-10-14 14:14:18 -07:00
shivkumar dudhani	4e5f551fa7	clean up	2019-10-14 14:10:34 -07:00
Shuting Zhao	75806146c6	Merge branch 'best_practice_policies' into 337_policy_description ... # Conflicts: # samples/README.md	2019-10-14 13:21:10 -07:00
shivkumar dudhani	530ac6962c	initial clean up	2019-10-14 12:36:19 -07:00
Shuting Zhao	bdb3f40f15	rename mutate annotation to "policies.kyverno.io/patches"	2019-10-11 17:59:50 -07:00
Shuting Zhao	eb8bd71ac2	add test scenario - missing image tag	2019-10-10 19:13:04 -07:00
Shuting Zhao	38bf4d6055	add 'deny-use-of-host-fs'	2019-10-10 18:42:54 -07:00
Shuting Zhao	17f7eb6213	Merge branch 'master' into best_practice_policies	2019-10-10 18:15:55 -07:00
shivkumar dudhani	fd72ee3178	add unit tests	2019-10-10 17:34:20 -07:00
shivkumar dudhani	f6367cfe4a	add negation anchor	2019-10-10 16:59:08 -07:00
Shuting Zhao	300665b22b	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies	2019-10-10 12:30:14 -07:00
Shuting Zhao	24f3b8ac96	disallow automountServiceAccountToken	2019-10-10 12:29:48 -07:00
shivkumar dudhani	dbc35eb8f4	enable disabled tests	2019-10-10 12:22:07 -07:00
Shuting Zhao	7fcc6bbd33	require default namespace resource quota	2019-10-10 10:46:11 -07:00
Shuting Zhao	3087257b46	disallow use of default namespace	2019-10-10 10:34:49 -07:00
Shuting Zhao	012360ae3a	allow trusted registries	2019-10-10 10:29:10 -07:00
Shuting Zhao	4d29b461ff	add require_image_tag_not_latest.yaml	2019-10-09 18:35:07 -07:00
Shuting Zhao	b5475fda5d	comment out failed testscenarios	2019-10-09 18:31:09 -07:00
Shuting Zhao	3e1ef320a8	add require_probes.yaml	2019-10-09 17:49:00 -07:00
Shuting Zhao	ea25ed8460	add check-pod-request-limit.yaml	2019-10-09 17:37:31 -07:00
Shuting Zhao	18c190447f	update require-readonly-rootfilesystem.yaml	2019-10-08 22:09:58 -07:00
Shuting Zhao	cb44585d70	add disallow_readonly_rootfilesystem.yaml	2019-10-08 22:05:15 -07:00
Shuting Zhao	c755df6b70	add scenario_validate_disallow_hostpid_hostipc.yaml	2019-10-08 21:58:05 -07:00
Shuting Zhao	ce41e4a99d	add disallow_host_network_hostport.yaml	2019-10-08 21:51:35 -07:00
Shuting Zhao	0c0a9a69a6	add disallow_priviledged_privelegesecalation.yaml	2019-10-08 21:42:49 -07:00
Shuting Zhao	137d596e11	rename EngineResponseNew to EngineResponse accordingly	2019-10-08 16:23:24 -07:00
shuting	5c38c28904	Merge pull request #369 from nirmata/368_bug ... update engineResponse Name	2019-10-08 16:02:07 -07:00
Shivkumar Dudhani	d973e84084	Merge pull request #366 from nirmata/best_practice_policies ... Add best practice policies	2019-10-08 15:51:19 -07:00
Shuting Zhao	d7080c2d94	fix pr comment	2019-10-08 14:21:47 -07:00
shivkumar dudhani	70ff2fa177	update engineResponse Name	2019-10-08 10:57:24 -07:00
Shuting Zhao	2077409c85	fix 365 annotation_bug	2019-10-07 18:31:14 -07:00
Shuting Zhao	cac41d9fda	using anyPattern for allowed image registries	2019-10-07 14:34:32 -07:00
Shuting Zhao	87d9cdd9dd	best practice: volume white list	2019-10-07 12:46:34 -07:00
Shuting Zhao	16a851cd8b	update sysctl	2019-10-07 11:35:04 -07:00
Shuting Zhao	c80f9e0f9d	best_practice: sysctl	2019-10-07 11:21:14 -07:00