shivkumar dudhani
b5de11fc0e
refactor engine packages for validate & generate
2019-12-12 15:02:59 -08:00
shivkumar dudhani
12edc56613
initial commit
2019-12-11 09:45:22 -08:00
Shuting Zhao
b2ad71cc5e
remove channel, introduced a flag to indicate the webhook creation status
2019-12-05 15:49:02 -08:00
Shuting Zhao
183f844029
- move resourcewebhookregister to webhookconfig
2019-12-05 13:51:02 -08:00
Shuting Zhao
0f5cf40eda
- holds resource webhook creation requests in a quene; - remove webhookinformer from policy controller and webhookregistrationclient
2019-12-04 12:31:27 -08:00
Shuting Zhao
f506789498
create resource mutating webhook after verifying webhook is active
2019-11-25 18:07:11 -08:00
shivkumar dudhani
89d0cc8799
Merge branch 'v1.1.0' into 504_bug
2019-11-19 10:12:09 -08:00
Shivkumar Dudhani
a81d5c9ae7
update event message ( #515 )
2019-11-18 17:13:48 -08:00
shivkumar dudhani
3df71f6fea
Merge branch 'v1.1.0' into 507_bug
2019-11-18 11:44:17 -08:00
Shivkumar Dudhani
61b202c64a
420 init container ( #501 )
...
* init container to cleanup stale webhook configurations if any.
* remove test code
* use internal pkg for os signals
* move webhook cleanup before http.server shutown.
* update make file and remove init
* update CI script
2019-11-18 11:41:37 -08:00
shivkumar dudhani
3c3931b67b
wat for cache sync and cleanup
2019-11-15 15:59:37 -08:00
shivkumar dudhani
57e8e2a395
Revert "wait for cache to sync and cleanup"
...
This reverts commit 9c3b32b903
2019-11-15 15:57:18 -08:00
shivkumar dudhani
9c3b32b903
wait for cache to sync and cleanup
2019-11-15 15:53:22 -08:00
shivkumar dudhani
f97406698d
remove namespace from resource spec
2019-11-15 12:03:58 -08:00
Shuting Zhao
a1ce6e4297
fix annotation patch in mutate rule
2019-11-13 17:56:56 -08:00
shuting
ded0183aa2
Merge pull request #478 from nirmata/472_update_apiversion
...
472 update apiversion
2019-11-13 15:19:27 -08:00
Shuting Zhao
b67577994a
update apiversion to v1 in code
2019-11-13 13:41:08 -08:00
Shivkumar Dudhani
765a17df03
423 policy store ( #471 )
...
* fix log format
* update test
2019-11-13 13:21:00 -08:00
Shivkumar Dudhani
7a12e12cb5
skip validation if the resource updates dont violate policy rules ( #477 )
2019-11-13 13:13:07 -08:00
Shuting Zhao
81ac13cb05
lookup policies from policy store in webhook
2019-11-13 12:15:51 -08:00
Shuting Zhao
fc35a52ad8
Merge branch 'master' into 455_namespace_pv
...
# Conflicts:
# definitions/install_debug.yaml
# main.go
# pkg/webhooks/mutation.go
# pkg/webhooks/server.go
# pkg/webhooks/validation.go
2019-11-13 11:46:46 -08:00
Shuting Zhao
b5b3dae145
fix logging format
2019-11-13 00:47:37 -08:00
Shuting Zhao
bdcb2eac6a
claim namespaced policy violations
2019-11-12 23:19:38 -08:00
Shuting Zhao
7ca87b0ac6
Merge branch '455_namespace_pv' of https://github.com/nirmata/kyverno into 455_namespace_pv
...
# Conflicts:
# pkg/policyviolation/generator.go
# pkg/policyviolation/namespacedpv.go
# pkg/webhooks/report.go
2019-11-12 19:18:34 -08:00
Shuting Zhao
89e5e7fa54
integrate with pv genreator
2019-11-12 19:05:29 -08:00
Shuting Zhao
2893cc3f7d
create namespace pv when validate policy fails
2019-11-12 19:02:31 -08:00
Shuting Zhao
dfd41774f0
add namespace pv controller
2019-11-12 19:01:48 -08:00
shivkumar dudhani
1049e3fe81
pass dynamic client
2019-11-12 18:25:50 -08:00
Shuting Zhao
8b5ddb66e3
integrate with pv genreator
2019-11-12 16:15:40 -08:00
Shuting Zhao
162a9ee754
create namespace pv when validate policy fails
2019-11-12 16:14:47 -08:00
shivkumar dudhani
ccbb6e33a5
introduce policy violation generator
2019-11-12 14:41:29 -08:00
Shuting Zhao
2a14c1f5dc
- add profiling; - fix CLI
2019-11-11 21:23:26 -08:00
Shuting Zhao
5a3ed62b13
Merge branch 'master' into 345_support_usergroup_info
...
# Conflicts:
# pkg/engine/validation_test.go
# pkg/webhooks/annotations.go
# pkg/webhooks/annotations_test.go
# pkg/webhooks/mutation.go
# pkg/webhooks/server.go
# pkg/webhooks/validation.go
2019-11-11 19:19:08 -08:00
Shuting Zhao
d26029d3be
fix unit test
2019-11-11 19:08:46 -08:00
Shuting Zhao
6c8f4f90da
fix patches annotation
2019-11-11 18:52:26 -08:00
Shuting Zhao
586b197b00
user sharedInformer for rolebindings and clusterrolebindings
2019-11-11 15:43:13 -08:00
Shuting Zhao
03e85c2266
make getRoleRef a separate package
2019-11-11 14:52:09 -08:00
shivkumar dudhani
f788f0e526
introduce policy store
2019-11-11 11:10:25 -08:00
Shuting Zhao
5b0a6d62a4
add unit test
2019-11-11 09:56:53 -08:00
shivkumar dudhani
f11a05a652
create event on webhook status update
2019-11-10 13:30:15 -08:00
Shuting Zhao
6048d59949
change engine interface to take policyContext struct
2019-11-08 18:57:27 -08:00
Shuting Zhao
0e9a952d64
get rbac info for an admission request
2019-11-08 18:56:24 -08:00
Shivkumar Dudhani
687c0c6470
Merge pull request #418 from nirmata/391_feature
...
Check if mutating webhook admission control is enabled
2019-11-08 12:55:28 -08:00
Shuting Zhao
e3c9282e6a
fix edit failure blocked by annotation change
...
- as we change the patches key in annotation to "policies.kyverno.io/patches" in commit bdb3f40f15
2019-11-07 12:13:34 -08:00
Shuting Zhao
caf7abfecc
Get policy list once in handleAdmissionRequest
2019-11-07 12:13:16 -08:00
Shuting Zhao
8496a483dc
- remove resource info per rule; - add resource info in each failed admission request
2019-11-06 17:14:32 -08:00
shivkumar dudhani
7e7286a9c1
support string - numbers comparison, use validatepattern in generate for subset check
2019-10-31 13:29:03 -07:00
Shivkumar Dudhani
92c96aaf1f
Revert "use validatepattern in generate rule to check for subset existance"
2019-10-31 13:21:38 -07:00
shivkumar dudhani
61c1ea5a49
use validatepattern in generate rule to check for subset existance
2019-10-31 13:04:56 -07:00
shivkumar dudhani
e022084dd0
add checker to verify if mutatingwebhook is enabled or not + refactoring
2019-10-30 13:39:19 -07:00
