mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
2324 commits 15 branches 540 tags 276 MiB
Commit graph

168 commits

Author SHA1 Message Date
Shuting Zhao
24a7563b2b tag 1.1.3 2020-02-21 18:10:17 -08:00
shivkumar dudhani
3beac273a5 add missing rbac resoruces 2020-02-20 15:21:07 -08:00
shuting
60b3af9d58
Merge pull request #716 from nirmata/fix_apiVersion 
upgrade apiVersion for ClusterRole,ClusterRoleBindings
 2020-02-20 11:23:06 -08:00
shivkumar dudhani
d624c5eaa1 upgrade apiVersion for ClusterRole,ClusterRoleBindings 2020-02-20 11:08:44 -08:00
Shuting Zhao
71605ad70c tag v1.1.3-rc1 2020-02-19 19:30:17 -08:00
shuting
3224585b78
Merge pull request #694 from nirmata/688_addClusterRole 
kyverno ClusterRole
 2020-02-18 17:35:00 -08:00
shivkumar dudhani
c402b5602c CR fixes 2020-02-18 17:10:15 -08:00
Shivkumar Dudhani
2f1c8c688c
add type in openapi schema (#629) 2020-02-18 14:55:12 -08:00
shivkumar dudhani
6e57747cb5 update apiVersion for clusterRole 2020-02-11 13:46:00 -08:00
shivkumar dudhani
38b4f97585 use kyverno ClusterRole 2020-02-11 13:43:36 -08:00
shravan
d38bf5c16e 658 prototype changes without policy lookup update 2020-02-05 15:55:37 +05:30
Shuting Zhao
c365bb2b3b tag 1.1.2 2020-01-16 15:42:52 -08:00
Shuting Zhao
0431fa0ae3 tag v1.1.1 2020-01-14 16:29:26 -08:00
shuting
bd538e51bc
Merge pull request #613 from nirmata/update_markdown 
move definitions/rolebindings.yaml to installation.md
 2020-01-13 10:42:26 -08:00
Shuting Zhao
54275bdc01 tag v1.1.0 2020-01-10 18:52:11 -08:00
shuting
0f398e631d
Merge pull request #599 from nirmata/542_feature 
flag to use FQDN as CommonName in CSR
 2020-01-10 18:38:18 -08:00
Shuting Zhao
eb0390d0ed remove managedResource 2020-01-10 13:34:45 -08:00
Shuting Zhao
c4eb721b03 move definitions/rolebindings.yaml to installatino.md 2020-01-10 12:39:26 -08:00
shivkumar dudhani
7b38676505 remove nonsupported flags from comments 2020-01-09 09:52:09 -08:00
Shivkumar Dudhani
3cf9141f4d
593 feature (#594) 
* initial commit

* background policy validation

* correct message

* skip non-background policy process for add/update

* add Generate Request CR

* generate Request Generator Initial

* test generate request CR generation

* initial commit gr generator

* generate controller initial framework

* add crd for generate request

* gr cleanup controller initial commit

* cleanup controller initial

* generate mid-commit

* generate rule processing

* create PV on generate error

* embed resource type

* testing phase 1- generate resources with variable substitution

* fix tests

* comment broken test #586

* add printer column for state

* return if existing resource for clone

* set resync time to 2 mins & remove resource version check in update handler for gr

* generate events for reporting

* fix logs

* initial commit

* fix trailing quote in patch

* remove comments

* initial condition (equal & notequal)

* initial support for conditions

* initial support fo conditions in generate

* support precondition checks

* cleanup

* re-evaluate GR on namespace update using dynamic informers

* add status for generated resources

* display loaded variable SA

* support delete cleanup of generate request main resources

* fix log

* remove namespace from SA username

* support multiple variables per statement for scalar values

* fix fail variables

* add check for userInfo

* validation checks for conditions

* update policy

* refactor logs

* code review

* add openapispec for clusterpolicy preconditions

* Update documentation

* CR fixes

* documentation

* CR fixes

* update variable

* fix logs

* update policy

* pre-defined variables (serviceAccountName & serviceAccountNamespace)

* update test
 2020-01-07 15:13:57 -08:00
Shivkumar Dudhani
ffd2179b03
538 (#587) 
* initial commit

* background policy validation

* correct message

* skip non-background policy process for add/update

* add Generate Request CR

* generate Request Generator Initial

* test generate request CR generation

* initial commit gr generator

* generate controller initial framework

* add crd for generate request

* gr cleanup controller initial commit

* cleanup controller initial

* generate mid-commit

* generate rule processing

* create PV on generate error

* embed resource type

* testing phase 1- generate resources with variable substitution

* fix tests

* comment broken test #586

* add printer column for state

* return if existing resource for clone

* set resync time to 2 mins & remove resource version check in update handler for gr

* generate events for reporting

* fix logs

* cleanup

* CR fixes

* fix logs
 2020-01-07 10:33:28 -08:00
Shivkumar Dudhani
337e0f7d1d
update image tag to latest (#556) 2019-12-13 11:22:22 -08:00
Shuting Zhao
7b9c8d763a Merge commit '03ee0486df57eca9c3a484a1e94580b955f8c026' into 531_crd_permission 2019-12-12 17:47:29 -08:00
Shuting Zhao
bc19f408bd add rolebinding manifest for a ns admin 2019-12-12 17:46:35 -08:00
Shuting Zhao
782916b7e8 add clusterrole to access policyviolation 2019-12-12 17:45:02 -08:00
shivkumar dudhani
10fc1b47ba Merge branch 'master' into v1.1.0 2019-12-12 16:54:42 -08:00
Shuting Zhao
81a0cc4f45 add age column to pv printer 2019-12-12 15:19:48 -08:00
Shuting Zhao
a107ad7ac8 rename namespacedpolicyviolation: update codegen 2019-12-11 16:07:39 -08:00
Shuting Zhao
c3b7de6f16 tag v1.0.0 2019-12-04 17:10:00 -08:00
Shivkumar Dudhani
59f864c5d7
474 feature (#503) 
* add printer columns

* add shortNames for CRD
 2019-11-25 12:36:47 -08:00
shivkumar dudhani
89d0cc8799 Merge branch 'v1.1.0' into 504_bug 2019-11-19 10:12:09 -08:00
Shivkumar Dudhani
61b202c64a
420 init container (#501) 
* init container to cleanup stale webhook configurations if any.

* remove test code

* use internal pkg for os signals

* move webhook cleanup before http.server shutown.

* update make file and remove init

* update CI script
 2019-11-18 11:41:37 -08:00
shivkumar dudhani
9a24a27368 CR fixes 2019-11-15 16:10:12 -08:00
Shuting Zhao
2153c284b5 update image tag to latest 2019-11-13 18:48:03 -08:00
Shuting Zhao
6b227a2aa9 update crds to V1 2019-11-13 13:41:28 -08:00
Shuting Zhao
fc35a52ad8 Merge branch 'master' into 455_namespace_pv 
# Conflicts:
#	definitions/install_debug.yaml
#	main.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
 2019-11-13 11:46:46 -08:00
Shuting Zhao
3706822df7 update crd 2019-11-12 19:02:31 -08:00
Shuting Zhao
0badf761a8 add namespace cluster policyviolation crd 2019-11-12 19:02:31 -08:00
Shuting Zhao
565a9b0f8f update crd 2019-11-11 18:52:39 -08:00
shivkumar dudhani
9803028abc remove unused yamls 2019-11-06 15:40:19 -08:00
Shuting Zhao
fb6151c6d0 release 0.11.0 2019-10-30 18:05:08 -07:00
shivkumar dudhani
ba94577d40 upates 2019-10-29 11:51:30 -07:00
shivkumar dudhani
dfbcd6b2d7 merge with master 2019-10-29 11:30:44 -07:00
shuting
fd90b25755
Revert "261 dynamic config" 2019-10-28 18:37:41 -07:00
shivkumar dudhani
4b19dd0715 Merge branch '261_dynamic_config' of github.com:nirmata/kyverno into 261_dynamic_config 2019-10-28 15:24:13 -05:00
shivkumar dudhani
a1d7f984db remove comments 2019-10-28 15:23:52 -05:00
Shivkumar Dudhani
158a499feb
Merge branch 'master' into 261_dynamic_config 2019-10-28 15:06:37 -05:00
shivkumar dudhani
1528b7f333 add configMap to install.yaml 2019-10-28 15:00:20 -05:00
Shuting Zhao
da31a2c6aa update tag to latest 2019-10-28 12:15:39 -07:00
Shuting Zhao
a7b8041feb retag 0.10.0 2019-10-28 12:04:16 -07:00
Shuting Zhao
8047ed68d3 remove required mark for managedresource "kind" 2019-10-28 11:44:48 -07:00
Shivkumar Dudhani
22e7ab1c49
Merge branch 'master' into 261_dynamic_config 2019-10-25 19:17:15 -05:00
Shuting Zhao
50daf03743 clean up definitions folder 2019-10-25 13:53:16 -07:00
Shuting Zhao
2cc17985cd release 0.10.0 2019-10-24 18:17:29 -07:00
Shuting Zhao
c603f206b4 Revert "release 0.11.0" 
This reverts commit ca23f7470b.
 2019-10-24 18:16:31 -07:00
Shuting Zhao
ca23f7470b release 0.11.0 2019-10-24 17:58:47 -07:00
Shuting Zhao
3a3efe00f1 - rename to managedResource; - refact code structure 2019-10-24 15:50:11 -07:00
Shuting Zhao
6e69c8b69b cleanup pv with dependant when blocked admission request pass 2019-10-23 23:18:58 -07:00
shivkumar dudhani
0bb3d74498 add env var 2019-10-18 17:49:30 -07:00
shivkumar dudhani
64eab3d1d6 initial commit 2019-10-18 17:38:46 -07:00
shivkumar dudhani
e66ed52b34 update apiVersion for deployment 2019-10-14 15:24:59 -07:00
shivkumar dudhani
2669b0ae6b set default ValidationFailureAction to 'audit' 2019-09-06 10:18:45 -07:00
Shuting Zhao
4a94e0dbbd tag latest image 2019-09-04 10:34:11 -07:00
Shuting Zhao
2139225ce5 update image tag for v0.9.1 2019-09-04 10:32:33 -07:00
shivkumar dudhani
fa53519e2a change CRD Name to ClusterPolicy & ClusterPolicyViolations 2019-09-03 14:51:51 -07:00
shivkumar dudhani
0c2dd0120a correct install.yaml 2019-08-22 14:22:23 -07:00
shivkumar dudhani
dc72368e86 fix indentations 2019-08-22 14:12:30 -07:00
Shuting Zhao
053202fc84 update install.yaml 2019-08-22 12:48:27 -07:00
shuting
535c855897
update image tag to latest 2019-08-22 10:51:05 -07:00
shuting
fc0949763a
update image tag v0.8.0 for release 2019-08-22 10:49:11 -07:00
Shuting Zhao
124b105736 add anyPattern in crd definition 2019-08-20 18:01:43 -07:00
Shuting Zhao
a83e5c1d05 Merge commit '2192703df1bb26cb8b30a1aece6f9afeed09b214' into 254_dynamic_webhook_configurations 
# Conflicts:
#	pkg/engine/generation.go
#	pkg/engine/overlay.go
#	pkg/engine/utils.go
#	pkg/engine/utils_test.go
#	pkg/gencontroller/controller.go
#	pkg/gencontroller/generation.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
 2019-08-19 16:44:38 -07:00
shivkumar dudhani
bbf30a9ec0 update crd 2019-08-19 11:54:25 -07:00
shivkumar dudhani
24c9ad0926 update openapi spec 2019-08-17 09:59:13 -07:00
Shuting Zhao
a110efb96c Merge branch 'policyViolation' into 254_dynamic_webhook_configurations 
# Conflicts:
#	main.go
#	pkg/annotations/annotations.go
#	pkg/annotations/controller.go
#	pkg/controller/controller.go
#	pkg/controller/controller_test.go
#	pkg/engine/engine.go
#	pkg/engine/generation.go
#	pkg/engine/mutation.go
#	pkg/engine/validation.go
#	pkg/event/controller.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/policyvalidation.go
#	pkg/webhooks/report.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
 2019-08-14 19:00:37 -07:00
shivkumar dudhani
9af6bf9003 update testing v1 2019-08-12 10:02:07 -07:00
Shuting Zhao
05f26335f7 structure code to be reusable 2019-08-08 15:10:10 -07:00
shivkumar dudhani
9ec85e5f74 update crd 2019-08-08 02:39:38 -07:00
shivkumar dudhani
3dda879e51 policyviolation, policy controller reconciliation 2019-08-07 16:14:33 -07:00
Shuting Zhao
a4217de1a2 expose webhook timeout configuration 2019-08-07 12:32:44 -07:00
Shuting Zhao
70f5592933 check in install_profiling as separate yaml 2019-08-02 11:41:36 -07:00
Shuting Zhao
aad47b46ec Merge commit '2200f9c7840bc71c7e7748a3168f59b67fc66227' into 120_policy_performance 2019-08-02 11:23:56 -07:00
Shuting Zhao
eec1939b17 update install.yaml to mount profiling stats 2019-08-02 11:18:59 -07:00
shivkumar dudhani
b7a1bee496 update arguments & cleanup print 2019-08-01 14:21:59 -07:00
shuting
4d684fca51
Merge pull request #249 from nirmata/filter_resources 
Filter resources
 2019-07-31 18:04:44 -07:00
shivkumar dudhani
19e50272b6 update arguments to install template 2019-07-31 17:42:30 -07:00
Shuting Zhao
256240dc46 Merge commit 'c1916a8bfc5b35499638428fbcda12ca42babdc3' into 196_anchor_selection_on_peer 2019-07-26 13:47:23 -07:00
shivkumar dudhani
7b942ec235 update CRD 2019-07-25 14:38:38 -04:00
shivkumar dudhani
94a6f1a71a match % exclude resources 2019-07-23 23:34:03 -04:00
Shuting Zhao
7d2abc5df3 Merge branch 'master' into 196_anchor_selection_on_peer 2019-07-23 17:55:24 -07:00
Shuting Zhao
6d49a728a1 - update install_debug.yaml - add debug log 2019-07-23 17:54:31 -07:00
shivkumar dudhani
b839d4f134 change flag field 2019-07-23 18:29:44 -04:00
shivkumar dudhani
15918ec0d8 rebase with master 2019-07-19 20:39:31 -07:00
shivkumar dudhani
3cb978c16f clean up + fix bugs 2019-07-19 20:30:55 -07:00
shivkumar dudhani
f9b5ac9a27 flag, violations 2019-07-18 10:22:20 -07:00
shivkumar dudhani
11da52c329 add mode(blockChanges,reportViolation) CRD spec 2019-07-15 15:30:28 -07:00
shivkumar dudhani
7bb7971c1d update crd spec for namespace attrib 2019-07-01 15:21:50 -07:00
Shuting Zhao
da5e4cf6eb rename kyverno-deployment to kyverno 2019-06-27 11:38:34 -07:00
shivdudhani
39a17911c3 code review corrections 2019-06-19 14:05:23 -07:00
shuting
044ca7a408 - addd cleanup script - remove imagepullpolicy in install.yaml 2019-06-12 18:23:16 -07:00