1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

7612 commits

Author SHA1 Message Date
Alex Hamlin
218877dc03
Evaluate one version of each pod security standard (#10924)
The original logic for evaluating pod security standards took two steps
for each defined check:

1. If the policy author requested the latest version of the standard,
   find the newest version of the check and evaluate the pod against it,
   adding any failure to the final results.

2. Otherwise, evaluate the pod against *each version of the check* whose
   minimum version is below the requested version, adding any failures
   to the final results.

This second step can be problematic, as new PSS versions may permit a
broader range of values for a restricted field compared to old versions.
As a concrete example, versioned podSecurity rules don't permit some of
the newer sysctls allowed by Kubernetes v1.27 and v1.29, since Kyverno
still evaluates v1.0 of the check.

With this change, Kyverno identifies the highest version of the check
that the podSecurity rule allows, and only executes that version of the
check against the pod. Since the "latest" version is special-cased to
compare newer than all non-latest versions, no special logic is required
in that case.

I've added unit tests for several combinations of sysctl and policy
version, especially to check that policy v1.27 permits the new sysctl
allowed in v1.27 but not the sysctls allowed in v1.29. I've also taken
the liberty of changing `assert.Assert` to `assert.Check`, to collect
multiple failures from a single unit test run.

Signed-off-by: Alex Hamlin <alexanderh@qualtrics.com>
2024-09-03 18:58:40 +00:00
Vishal Choudhary
95f54a1cb6
feat: enable custom data in policy reports using properties (#10933)
* feat: enable custom data in policy reports using properties

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: dont throw error in variable substitution for properties

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

---------

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-09-03 17:36:07 +00:00
Charles-Edouard Brétéché
86fa32af7f
feat: add context entry openapi validation (#10993)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-03 16:51:28 +00:00
Charles-Edouard Brétéché
2270498ef6
chore: disable fail-fast in conformance (#10992)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-03 16:20:34 +00:00
Charles-Edouard Brétéché
fb90636776
feat: add rule openapi validation (#10990)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-03 15:20:37 +00:00
KhasDenis
02a3c4afda
Custom annotations on deployment (#10971)
* Custom annotations on deployment

Signed-off-by: Denis Khasbulatov <KhasDenis@gmail.com>

* chore: simplify e2e matrix (#10972)

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Denis Khasbulatov <KhasDenis@gmail.com>

* Custom annotations on deployment

Signed-off-by: Denis Khasbulatov <KhasDenis@gmail.com>

* Custom annotations on deployment

Signed-off-by: Denis Khasbulatov <KhasDenis@gmail.com>

* Custom annotations on deployment

Signed-off-by: Denis Khasbulatov <KhasDenis@gmail.com>

---------

Signed-off-by: Denis Khasbulatov <KhasDenis@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: KhasDenis <30524039+KhasDenis@users.noreply.github.com>
Co-authored-by: Denis Khasbulatov <mimacom.khasbulatov@extaccount.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-03 13:13:28 +00:00
dependabot[bot]
38e96a4b6b
chore(deps): bump CycloneDX/gh-gomod-generate-sbom (#10978)
Bumps [CycloneDX/gh-gomod-generate-sbom](https://github.com/cyclonedx/gh-gomod-generate-sbom) from 1.1.0 to 2.0.0.
- [Release notes](https://github.com/cyclonedx/gh-gomod-generate-sbom/releases)
- [Commits](d4aee0cf51...efc74245d6)

---
updated-dependencies:
- dependency-name: CycloneDX/gh-gomod-generate-sbom
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 11:52:58 +00:00
Mariam Fahmy
d9b975129c
fix: use failureAction and failureActionOverrides in validate rules (#10941)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-09-03 10:04:19 +00:00
shuting
8e35198c28
chore: remove unused fields (#10964)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-09-03 09:28:04 +00:00
dependabot[bot]
d6f74cf713
chore(deps): bump actions/setup-go in /.github/actions/setup-build-env (#10980)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.5.0 to 5.0.2.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](6edd4406fa...0a12ed9d6a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 09:04:11 +00:00
dependabot[bot]
972e81cd3a
chore(deps): bump actions/cache in /.github/actions/setup-caches (#10988)
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.2 to 4.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](4723a57e26...0c45773b62)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 07:07:04 +00:00
Charles-Edouard Brétéché
2b70d46d95
chore: add e2e matrix codegen and verification (#10986)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-09-03 00:11:29 +00:00
dependabot[bot]
8549709f03
chore(deps): bump github.com/alitto/pond from 1.9.1 to 1.9.2 (#10966)
Bumps [github.com/alitto/pond](https://github.com/alitto/pond) from 1.9.1 to 1.9.2.
- [Release notes](https://github.com/alitto/pond/releases)
- [Commits](https://github.com/alitto/pond/compare/v1.9.1...v1.9.2)

---
updated-dependencies:
- dependency-name: github.com/alitto/pond
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 23:36:35 +00:00
dependabot[bot]
ce3d6d0c3b
chore(deps): bump sigstore/scaffolding from 0.7.7 to 0.7.8 (#10960)
Bumps [sigstore/scaffolding](https://github.com/sigstore/scaffolding) from 0.7.7 to 0.7.8.
- [Release notes](https://github.com/sigstore/scaffolding/releases)
- [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md)
- [Commits](fd2699d622...16ae89aa23)

---
updated-dependencies:
- dependency-name: sigstore/scaffolding
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-02 22:58:06 +00:00
Charles-Edouard Brétéché
96965eb229
chore: more e2e matrix based jobs (#10984)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 22:24:55 +00:00
dependabot[bot]
24b5e6ddde
chore(deps): bump actions/setup-python from 5.1.1 to 5.2.0 (#10959)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.1.1 to 5.2.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](39cd14951b...f677139bbe)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-02 21:55:51 +00:00
Charles-Edouard Brétéché
ebf61e3e10
chore: update upload/download artifact actions (#10985)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 21:01:25 +00:00
Charles-Edouard Brétéché
3dceb71442
chore: remove deprecated option in install-helm action (#10983)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 20:23:13 +00:00
dependabot[bot]
322dce6e76
chore(deps): bump adRise/update-pr-branch from 0.9.0 to 0.9.1 (#10968)
Bumps [adRise/update-pr-branch](https://github.com/adrise/update-pr-branch) from 0.9.0 to 0.9.1.
- [Release notes](https://github.com/adrise/update-pr-branch/releases)
- [Commits](f6b919383e...3576c22e28)

---
updated-dependencies:
- dependency-name: adRise/update-pr-branch
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-02 19:51:32 +00:00
Charles-Edouard Brétéché
d219766f12
feat: add chainsaw matrix script (#10976)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 19:01:50 +00:00
Charles-Edouard Brétéché
61c4a3e7b7
chore: split conformance jobs per folder (#10974)
* chore: simplify e2e matrix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* chore: use dynamic matrix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* chore: split conformance jobs per folder

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 17:55:55 +00:00
dependabot[bot]
e4afa3a125
chore(deps): bump jlumbroso/free-disk-space (#10981)
Bumps [jlumbroso/free-disk-space](https://github.com/jlumbroso/free-disk-space) from 1.2.0 to 1.3.1.
- [Release notes](https://github.com/jlumbroso/free-disk-space/releases)
- [Commits](76866dbe54...54081f1387)

---
updated-dependencies:
- dependency-name: jlumbroso/free-disk-space
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-02 17:21:03 +00:00
dependabot[bot]
0438a65c0c
chore(deps): bump jlumbroso/free-disk-space (#10982)
Bumps [jlumbroso/free-disk-space](https://github.com/jlumbroso/free-disk-space) from 1.2.0 to 1.3.1.
- [Release notes](https://github.com/jlumbroso/free-disk-space/releases)
- [Commits](76866dbe54...54081f1387)

---
updated-dependencies:
- dependency-name: jlumbroso/free-disk-space
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-02 16:55:57 +00:00
Charles-Edouard Brétéché
de3aa98015
fix: configure dependabot to work with composite actions (#10975)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 16:10:12 +00:00
Charles-Edouard Brétéché
f89eca87da
chore: use dynamic matrix (#10973)
* chore: simplify e2e matrix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* chore: use dynamic matrix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 21:06:02 +05:30
Charles-Edouard Brétéché
43e5910472
chore: simplify e2e matrix (#10972)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-09-02 14:27:10 +00:00
dependabot[bot]
b5870864b8
chore(deps): bump cbrgm/cleanup-stale-branches-action (#10969)
Bumps [cbrgm/cleanup-stale-branches-action](https://github.com/cbrgm/cleanup-stale-branches-action) from 1.1.20 to 1.1.21.
- [Release notes](https://github.com/cbrgm/cleanup-stale-branches-action/releases)
- [Commits](3a038290b5...07d311426e)

---
updated-dependencies:
- dependency-name: cbrgm/cleanup-stale-branches-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-02 08:07:12 +00:00
Jim Bugwadia
f699250246
update K8s compatibility test versions (#10956)
* update K8s compatibility test versions

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix versions

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update sigstore scaffolding versions

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

---------

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2024-08-31 01:22:56 +00:00
dependabot[bot]
14c7883a18
chore(deps): bump github/codeql-action from 3.26.5 to 3.26.6 (#10961)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 3.26.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2c779ab0d0...4dd16135b6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-30 17:23:54 +00:00
Anushka Mittal
eb72b04d2c
change metrics default to stable defaults (#10459)
* change metrics default to stable defaults

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* make codegen-helm-all

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* make codegen-manifest-all

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* fix: chart testing lint error

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

---------

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-08-30 11:10:07 +00:00
Rizul Gupta
02ffe4131c
add image name in all logs (#10837)
* add image name in all logs

Signed-off-by: Rizul Gupta <mail2rizul@gmail.com>

* make lint tests pass

Signed-off-by: Rizul Gupta <mail2rizul@gmail.com>

---------

Signed-off-by: Rizul Gupta <mail2rizul@gmail.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2024-08-30 09:22:44 +00:00
dependabot[bot]
3211c2f611
chore(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 (#10958)
Bumps [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) from 3.2.3 to 3.3.0.
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-30 08:13:41 +00:00
Anushka Mittal
b76bb77e46
Deferred loading for image info in policy context (#10787)
* fix: add deferred loading for image info in policy context

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* chore: move logic to context.go

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* chore: add unit test

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* fix: cleanup code

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* fix: unit test

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* fix: unit test

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

---------

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2024-08-30 05:35:26 +00:00
asr2003
8f418a90fc
fix: variable substitution error handling in policy validation (#10936)
* fix variable substitution error handling in policy validation and add tests

Signed-off-by: Ambati Sahithi <162500856+asr2003@users.noreply.github.com>

* cleanup

Signed-off-by: Ambati Sahithi <162500856+asr2003@users.noreply.github.com>

* fix variable substitution error handling in policy validation and add tests

Signed-off-by: Ambati Sahithi <162500856+asr2003@users.noreply.github.com>

* cleanup

Signed-off-by: Ambati Sahithi <162500856+asr2003@users.noreply.github.com>

* add review comment

Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: asr2003 <162500856+asr2003@users.noreply.github.com>

* Update pkg/validation/policy/validate.go

The rule and policy will be appended to the top level message, so no need to repeat here.

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fmt

Signed-off-by: Ambati Sahithi <162500856+asr2003@users.noreply.github.com>

* Update pkg/validation/policy/validate.go

update for unit tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

---------

Signed-off-by: Ambati Sahithi <162500856+asr2003@users.noreply.github.com>
Signed-off-by: asr2003 <162500856+asr2003@users.noreply.github.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2024-08-29 23:49:45 +00:00
dependabot[bot]
f6962f631b
chore(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#10948)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-29 21:16:18 +00:00
dependabot[bot]
6276d699a7
chore(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.0 (#10949)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.65.0 to 1.66.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.65.0...v1.66.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-29 19:57:07 +00:00
Mariam Fahmy
bde90340a6
chore: remove v1alpha1 of VAPs and use v1beta1 (#10955)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-08-29 15:31:25 +00:00
Mariam Fahmy
e00596a551
fix: match wildcard names for generateExisting policies (#10945)
* fix: match wildcard names for generateExisting policies

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix chainsaw test

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* chore: add unit tests

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-08-29 13:09:30 +00:00
shuting
2cd462570a
feat: foreach support for clone (#10888)
* chore: add chainsaw tests for foreach clone

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: update webhooks for foreach generate

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: rename generatePattern

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: chainsaw tests for generateExisting

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: add missing files

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: add chainsaw tests for foreach clone, sync=true

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: linter issues

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: add chainsaw test foreach clonelist, sync=true, delete source

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix: sync deletion for cloneList

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-08-29 11:59:22 +00:00
Charles Uneze
d733ea3bb0
make kubeconfig optional (#10922)
Signed-off-by: Charles Uneze <charlesniklaus@gmail.com>
2024-08-29 09:40:11 +00:00
dependabot[bot]
dd519a75ca
chore(deps): bump adRise/update-pr-branch from 0.8.1 to 0.9.0 (#10950)
Bumps [adRise/update-pr-branch](https://github.com/adrise/update-pr-branch) from 0.8.1 to 0.9.0.
- [Release notes](https://github.com/adrise/update-pr-branch/releases)
- [Commits](5d273948c5...f6b919383e)

---
updated-dependencies:
- dependency-name: adRise/update-pr-branch
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-29 08:16:48 +00:00
Sean Liao
d0b4800785
explicit protocol selection with appProtocol (#10864)
* explicit protocol selection with appProtocol

Signed-off-by: Sean Liao <sean+git@liao.dev>

* explicit protocol selection with appProtocol

Signed-off-by: Sean Liao <sean+git@liao.dev>

---------

Signed-off-by: Sean Liao <sean+git@liao.dev>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-28 23:37:43 +00:00
Mariam Fahmy
00c81048aa
chore: add --reportsServiceAccountName in launch.json (#10943)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-08-28 20:49:10 +00:00
Charles-Edouard Brétéché
f87fa52cb7
feat: bump to k8s 1.31 (#10938)
* feat: bump to k8s 1.31

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* tidy

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* mod

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix otel

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix otel schema

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* update linter

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* feat: fix image verification tests

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* linter issues

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* cel change

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-08-28 17:09:58 +00:00
Liang Deng
90b3101423
adding @YTGhost to codeowners (#10944)
Signed-off-by: Liang Deng <283304489@qq.com>
2024-08-28 14:50:28 +00:00
Harshita Sao
838ea5b931
fix: fixed the pinned dependencies issue (#10910)
Signed-off-by: harshitasao <harshitasao@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-28 13:15:02 +00:00
dependabot[bot]
12a515cc0d
chore(deps): bump github.com/notaryproject/notation-go (#10939)
Bumps [github.com/notaryproject/notation-go](https://github.com/notaryproject/notation-go) from 1.2.0-rc.1 to 1.2.0.
- [Release notes](https://github.com/notaryproject/notation-go/releases)
- [Commits](https://github.com/notaryproject/notation-go/compare/v1.2.0-rc.1...v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/notaryproject/notation-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-28 07:27:53 +00:00
Charles-Edouard Brétéché
ad4f0ab038
feat: bump controller gen package (#10927)
* feat: bump controller gen package

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix chainsaw test

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* bump annotation

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-28 14:23:19 +08:00
Mariam Fahmy
2140a0239b
chore: rename validationFailureAction to failureAction under the rule (#10893)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2024-08-27 20:07:57 +00:00
dependabot[bot]
ee5fdcad47
chore(deps): bump github.com/notaryproject/notation-core-go (#10932)
Bumps [github.com/notaryproject/notation-core-go](https://github.com/notaryproject/notation-core-go) from 1.1.0-rc.1 to 1.1.0.
- [Release notes](https://github.com/notaryproject/notation-core-go/releases)
- [Commits](https://github.com/notaryproject/notation-core-go/compare/v1.1.0-rc.1...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/notaryproject/notation-core-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-27 13:21:04 +00:00