Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
shuting
d6062fdd47
Add go fmt ( #1055 )
...
* remove empty flag
* format code
* revert change in install.yaml
2020-08-14 12:21:06 -07:00
Yuvraj
73840e3c5f
configrable rules added ( #1017 )
...
* configrable rules added
* fix exclude group logic from code
* flag added in yaml
* exclude username added
* exclude username added
* config interface implimented
* configure exclude username
* get role ref
* test case fixed
* panic fix
* move from interface to slice
* exclude added in mutate
* trim strings
* configmap changes added
* kustomize changes for configmap
* k8s resources added
2020-08-07 17:09:24 -07:00
Mohan B E
a14828246d
Feature/api version 852 ( #1028 )
...
* apiVersion support for generate
* added apiVersion to crds
2020-08-07 09:47:33 +05:30
Jim Bugwadia
838d02c475
Bugfix/659 support wildcards for namespaces ( #871 )
...
* - support wildcards for namespaces
* do not annotate resource, unless policy is an autogen policy
* close HTTP body
* improve messages
* remove policy store
Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.
We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.
* handle wildcard namespaces in background processing
* fix unit tests 1) remove platform dependent path usage 2) remove policy store
* add test case for mutate with wildcard namespaces
2020-05-26 10:36:56 -07:00
Yuvraj
4fa5a056f3
Fix conflict
...
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
2020-03-27 14:10:21 +05:30
Yuvraj
801c7513cb
golanfci-lint changes
...
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
2020-03-24 00:35:05 +05:30
shivkumar dudhani
d327309d72
refactor logging
2020-03-17 16:25:34 -07:00
Shivkumar Dudhani
8c1d79ab28
linter suggestions ( #655 )
...
* cleanup phase 1
* linter fixes phase 2
2020-01-24 12:05:53 -08:00
Shivkumar Dudhani
1171ac691b
cleanup phase 1 ( #653 )
2020-01-24 09:37:12 -08:00
Shivkumar Dudhani
ffd2179b03
538 ( #587 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* cleanup
* CR fixes
* fix logs
2020-01-07 10:33:28 -08:00
Shivkumar Dudhani
5b8ab3842b
Support variable substitution ( #549 )
...
* initial commit
* variable substitution
* update tests
* update test
* refactor engine packages for validate & generate
* update vendor
* update toml
* support variable substitution in overlay mutation
* missing update
* fix indentation in logs
* store context values as single JSON document using merge patches.
* remove duplicate functions
* fix message string
* Handle processing of policies in background (#569 )
* remove condition check while generating mutation patch as conditions are verified in the first iteration
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* fix order to correct policy registration
* update comment
Co-authored-by: shuting <shutting06@gmail.com>
* refactor
Co-authored-by: shuting <shutting06@gmail.com>
2019-12-30 17:08:50 -08:00
shivkumar dudhani
10fc1b47ba
Merge branch 'master' into v1.1.0
2019-12-12 16:54:42 -08:00
Shivkumar Dudhani
ffe3bdb677
remove newline from engine response strings ( #537 )
...
* remove newline from engine response strings
* add scenario file updates
* cr: remove . in trailing msg string
2019-12-04 18:04:42 -08:00
Shuting Zhao
261560eafb
mutate rule: do not ignore empty key in resource if overlay has nested anchor
2019-11-27 16:07:15 -08:00
shivkumar dudhani
f97406698d
remove namespace from resource spec
2019-11-15 12:03:58 -08:00
Shivkumar Dudhani
3ab0790342
use PolicyContext with engine.Generate ( #483 )
2019-11-13 15:46:43 -08:00
shuting
ded0183aa2
Merge pull request #478 from nirmata/472_update_apiversion
...
472 update apiversion
2019-11-13 15:19:27 -08:00
Shuting Zhao
b67577994a
update apiversion to v1 in code
2019-11-13 13:41:08 -08:00
Shivkumar Dudhani
7a12e12cb5
skip validation if the resource updates dont violate policy rules ( #477 )
2019-11-13 13:13:07 -08:00
Shuting Zhao
5a3ed62b13
Merge branch 'master' into 345_support_usergroup_info
...
# Conflicts:
# pkg/engine/validation_test.go
# pkg/webhooks/annotations.go
# pkg/webhooks/annotations_test.go
# pkg/webhooks/mutation.go
# pkg/webhooks/server.go
# pkg/webhooks/validation.go
2019-11-11 19:19:08 -08:00
Shuting Zhao
ec331b8d17
remove resource info in the validation error
2019-11-07 12:30:58 -08:00
Shuting Zhao
2dec70cc72
make expected message optional in scenario file
2019-11-07 12:13:34 -08:00
Jim Bugwadia
1173e062c9
- add policy and test for known ingress
...
- fix messages and remove unnecessary comments in testrunner/scenario.go
2019-11-05 19:07:44 -08:00
Shuting Zhao
9f7b6eaaf6
skip applying mutate rule if condition key is not present in the resource, consider the rule as success
2019-11-05 16:27:06 -08:00
Jim Bugwadia
5ded29f74e
temp update for debugging
2019-11-05 12:28:44 -08:00
Shuting Zhao
4195f45a42
add missing scenario test
2019-11-05 10:19:42 -08:00
Jim Bugwadia
35bed4bc6a
add safe-to-evict annotation
2019-11-04 17:55:13 -08:00
shivkumar dudhani
dbc35eb8f4
enable disabled tests
2019-10-10 12:22:07 -07:00
shivkumar dudhani
70ff2fa177
update engineResponse Name
2019-10-08 10:57:24 -07:00
shivkumar dudhani
6228b8343e
refactor engine api
2019-09-03 15:48:13 -07:00
shivkumar dudhani
fa53519e2a
change CRD Name to ClusterPolicy & ClusterPolicyViolations
2019-09-03 14:51:51 -07:00
shivkumar dudhani
0a132054e1
fixes + support generate policies
2019-08-30 14:06:47 -07:00
shivkumar dudhani
07d86cb769
add success tests for validation & mutation
2019-08-29 18:48:58 -07:00
shivkumar dudhani
20e2f639eb
add validate helper functions
2019-08-29 11:44:50 -07:00
