Mariam Fahmy
31bb10722e
fix: add the support of v2alpha1 exceptions in the CLI ( #9714 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-02-12 22:57:03 +00:00
Charles-Edouard Brétéché
a1cb4f1c30
fix: remove deprecated imageSignatureRepository flag ( #9698 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-08 12:10:29 +00:00
Khaled Emara
10258921ac
feat(validation-webhook): validate global context reference ( #9678 )
...
* feat(validation-webhook): validate global context reference
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(validation-webhook): global reference name
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(globalcontext): fix tests after valdiation
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(policycache): dont add NotReady Policies
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): rename e2e tests
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): add entry errors
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(globalcontext): fix chainsaw test
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
2024-02-08 07:46:58 +00:00
Charles-Edouard Brétéché
c649169a78
feat: add scan command for generic resources ( #9651 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-05 15:49:01 +00:00
Charles-Edouard Brétéché
8a0d2a598a
feat: add root command to process generic json resources ( #9639 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-05 12:38:01 +00:00
Khaled Emara
8a4d9941de
feat: add globalcontext loader and interface ( #9602 )
...
* feat(globalcontext): add interface
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): package import path
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* design(contextloader): move globalcontext from Load to init
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): remove pointer
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* design(globalcontext): create specific Store
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-05 11:24:37 +00:00
Sanskar Gurdasani
204d061a93
support -e shorthand with --exception ( #9624 )
...
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
2024-02-04 10:41:31 +00:00
Anushka Mittal
c6d4f33ae9
make exception in cli exportable ( #9609 )
...
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-02-02 08:03:25 +00:00
Anushka Mittal
cf80b66a69
move error message to log ( #9238 )
...
* move error message to log
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add rephrased error logs
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* silence errors
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* modify tests for silence errors
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-01 20:41:17 +00:00
M Viswanath Sai
d102abeb99
Feat: Human readable timestamps in logs ( #9276 )
...
* added timestamp flag and subsequent behaviour changes for logging
Signed-off-by: mviswanathsai <mviswanath.sai.met21@itbhu.ac.in>
* Changed verbose verbosity level in cli
Signed-off-by: mviswanathsai <mviswanath.sai.met21@itbhu.ac.in>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* log level
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: mviswanathsai <mviswanath.sai.met21@itbhu.ac.in>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-01 19:14:47 +00:00
Charles-Edouard Brétéché
1c82ae269f
fix: make ApplyCommandConfig public again ( #9596 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-01 14:50:58 +00:00
Sanskar Gurdasani
231e7a681e
Support PolicyExceptions with CLI ( #9525 )
...
* loding policyExecptions from func
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* adding PolicyExceptions in crds
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* adding PolicyExceptions in GetPolicy function
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* adding policyexceptions in Load function
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* resolve error becuase of now Getpolicy return policyexceptions
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* added -exception flag loaded policyexception
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* added policyexceptions in processor and NewEngine
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* Revert "added -exception flag loaded policyexception"
This reverts commit f53b205c08
.
* Revert "Added support for PolicyExceptions for apply command "
This reverts commit 82689ea0c1
.
* Update cmd/cli/kubectl-kyverno/commands/test/test.go
loading exceptions with policies
Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Signed-off-by: Sanskar Gurdasani <92817635+Sanskarzz@users.noreply.github.com>
* updated GetFullPaths function and remove unnecessary code
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* added tests for loading exceptions in GetPolicy function
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* added tests for loading policy exceptions
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* Used selector in List function
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* generated cli crd
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* updated loadpolicy_test tests and corrected kind
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* resolved unit test error in path_test.go file
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* limiting the usage of exceptions to ValidatingAdmissionPolicies
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
* remove changes in common code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
Signed-off-by: Sanskar Gurdasani <92817635+Sanskarzz@users.noreply.github.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Mariam Fahmy <mariamfahmy66@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-31 22:28:14 +00:00
shuting
635f160ae0
feat (generate): add orphanDownstreamOnPolicyDelete
to preserve downstream on policy deletion ( #9579 )
...
* add chainsaw tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add .orphanDownstreamOnPolicyDelete
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-01-31 13:50:38 +02:00
Charles-Edouard Brétéché
13052267d0
chore: small nits in cli test command ( #9573 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-31 01:39:47 +00:00
Mike Bryant
c40dab9ea0
fix: Allow generate cli tests to work with server-side apply policies ( #9385 )
...
* test: Add test case for useServerSideApply
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
* fix: Allow generate cli tests to work with server-side apply policies
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
---------
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-29 11:15:13 +00:00
Vishal Choudhary
4108415153
feat: use awslabs keychain for AWS and gcr keychain for GCP ( #9416 )
...
* feat: use awslabs keychain for AWS and gcr keychain for GCP
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: remove unused var
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: remove more unused vars
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: gofumpt
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-29 08:25:52 +00:00
mohamedasifs123
1e6f827f42
Fix: not showing error during policy validation error ( #9533 )
...
* Update result.go
Signed-off-by: mohamedasifs123 <142201466+mohamedasifs123@users.noreply.github.com>
* Update command.go to call function policyvalerror
Signed-off-by: mohamedasifs123 <142201466+mohamedasifs123@users.noreply.github.com>
* Update cmd/cli/kubectl-kyverno/processor/result.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Update cmd/cli/kubectl-kyverno/commands/apply/command.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: mohamedasifs123 <142201466+mohamedasifs123@users.noreply.github.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-28 23:46:09 +00:00
shuting
7170cbb0c2
feat:Webhook config per policy ( #9483 )
...
* add spec.webhookConfigurations
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update crd
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* configure webhook
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* register webhook handler
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* skip storing finegrained policies in cache
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update resource validate handler
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* updates
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* enable mutate resource handler for fine-grained policies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-01-27 13:00:22 +00:00
Mariam Fahmy
f01f0d6dc4
feat: support podSecurity exclusion in exceptions ( #9343 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-01-26 18:43:07 +00:00
Charles-Edouard Brétéché
b7eea2faa9
feat: use assertion trees in cli test command ( #9380 )
...
* feat: use assertion trees in cli test command
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* assert / error
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* output
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* check for nil
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-24 16:40:59 +00:00
Vishal Choudhary
87c7ce254a
feat: add skipImageReferences in verify images ( #8633 )
...
* feat: add skipImageReferences in verify images
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: chainsaw tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: chainsaw-test.yaml
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: typo in assert
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-23 12:27:39 +00:00
Mariam Fahmy
d47684c0d9
feat: support validatingadmissionpolicybindings in CLI apply command ( #9468 )
...
* feat: support validatingadmissionpolicybindings in CLI apply command
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix linter issue
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-01-23 11:47:38 +00:00
Charles-Edouard Brétéché
8795916e14
fix: change generic policy to not return any ( #9463 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-20 19:20:22 +02:00
Charles-Edouard Brétéché
cad231fc15
feat: add resource migration command ( #9296 )
...
* feat: add resource migration command
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* finalize PR
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix unit tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-19 11:47:28 +00:00
Mariam Fahmy
33ffd7a0d7
fix: add v1beta1 of VAPs in the CLI ( #9404 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-01-18 09:40:53 +00:00
Vishal Choudhary
c2e388a71c
fix: update CLI to use store for fetching regclient ( #9315 )
...
* fix: use docker keychain as default in 1.11
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: use store to get registry client
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: use kyverno as username
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: missed cli-test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: changed location
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: undo test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-01-05 06:26:25 +00:00
Khaled Emara
d5491746e7
fix(cli): handle excluded resources as pass ( #9274 )
...
* fix(cli): handle excluded resources as pass
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test: add cli test for exclude
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
2023-12-28 07:16:55 +00:00
hhsel
71739b85ee
fix: large table row ID number format in CLI ( #9281 )
...
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-26 21:31:09 +00:00
Charles-Edouard Brétéché
0107c9af8a
fix: remove skip increment when resource not found in cli apply ( #9282 )
...
* fix: remove skip increment when resource not found in cli apply
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-26 15:47:53 +00:00
Gurmannat Sohal
6902a2b092
Unit tests for Pod Security Admission Integrations ( #8585 )
...
* feat: enable field-restricted exclusions using the psa
Signed-off-by: Liang Deng <283304489@qq.com>
* fix ci error
Signed-off-by: Liang Deng <283304489@qq.com>
* fix ci error
Signed-off-by: Liang Deng <283304489@qq.com>
* initial unit tests
* Add all remaining unit tests
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* fine grain unit tests by adding fields and values
* add detailed pod level exclusion and related tests
* add tests for init & ephemeral containers
* add kuttl tests for the new advanced support
* add kuttl tests for the new advanced support
* add readme for kuttl tests
* add replacement in go.mod
* resolving CI errors
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* fix ci errors
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* fix ci errors
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* updating pod-security-admissio
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* resolving null pointer panic
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* resolved conformance error
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* chainsaw
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* chainsaw
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* remove duplication
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* fix linting
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* remove over computation
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* added field checks, pss skip condition
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* correcting chainsaw tests
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* merge branch 'main' into unit-tests
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
* fix builds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Liang Deng <283304489@qq.com>
Signed-off-by: Gurmannat Sohal <iamgurmannatsohal@gmail.com>
Signed-off-by: shuting <shuting@nirmata.com>
Signed-off-by: Gurmannat Sohal <95538438+itsgurmannatsohal@users.noreply.github.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Liang Deng <283304489@qq.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-26 22:28:08 +08:00
shuting
67b96a7cf2
refactor: mutate checks ( #9255 )
...
* refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-12-22 15:07:17 +02:00
Mariam Fahmy
b61a1f3d18
fix: set v2beta1 of exceptions the storage version ( #9254 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-12-22 10:13:58 +00:00
Honnix
47cafaabd3
Support more signature algorithms ( #9102 )
...
* Support more signature algorithms
Signed-off-by: Hongxin Liang <honnix@users.noreply.github.com>
* Fix codegen
Signed-off-by: Hongxin Liang <honnix@users.noreply.github.com>
* Fail loudly for unsupported algorithm
Signed-off-by: Hongxin Liang <honnix@users.noreply.github.com>
* Fix codegen
Signed-off-by: Hongxin Liang <honnix@users.noreply.github.com>
* Fix more
Signed-off-by: Hongxin Liang <honnix@users.noreply.github.com>
---------
Signed-off-by: Hongxin Liang <honnix@users.noreply.github.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-12-21 13:27:33 +05:30
Charles-Edouard Brétéché
d1138764f5
feat: add deprecation warnings in the CLI ( #9222 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-20 12:45:26 +00:00
Charles-Edouard Brétéché
438a53cb3d
feat: enable kubectl-validate by default in cli ( #9220 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-20 08:37:26 +00:00
raffis
cdd5d4fd22
fix(kubectl-kyverno): apply registry auth ( #9151 )
...
* fix(kubectl-kyverno): apply registry auth
Signed-off-by: Raffael Sahli <raffael.sahli@doodle.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Raffael Sahli <raffael.sahli@doodle.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-19 21:33:05 +00:00
Mariam Fahmy
d5e5219601
chore: remove v2alpha1 version of policy exceptions ( #9211 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-12-19 16:27:08 +00:00
Charles-Edouard Brétéché
584f841c1e
refactor: make CLI store non static ( #9200 )
...
* refactor: make CLI store non static
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* registry access
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* apply
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-19 22:45:53 +08:00
Mariam Fahmy
8e0a7aa204
feat: promote policy exceptions to v2 ( #9208 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-12-19 10:43:39 +00:00
shuting
7282ecca9f
fix: add skipBackgoundRequests
to configure loop protection option ( #9157 )
...
* fix typo
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add new attribute skipBackgroundRequests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* move to per rule config
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* check flag
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* clean up
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix logger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add retryCount to ur.status
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add chainsaw tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-12-19 06:25:12 +00:00
Mariam Fahmy
e22cd9818f
fix: deprecate spec.schemaValidation ( #9189 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-12-18 16:32:11 +00:00
Charles-Edouard Brétéché
3f865d2038
fix: deep copy resource in cli when operation is update ( #9191 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-18 15:31:19 +00:00
Anton Chernev
4d2f7fa8d3
fix: Provide kind list hints to the fake dynamic client. ( #9036 )
...
* fix: Provide kind list hints to the fake dynamic client.
If one uses the `cloneList` option of `generate` without this, a panic
occurs.
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* Added test for `cloneList`.
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* fix: ttl cleanup not working with cluster wide resources (#9060 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* Fix Helm chart to not error when replicas defined (#9066 )
Fixes #8941
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* fix: add nodeSelector to the reports cleanup helm hook (#9065 )
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* optimize JSON context processing using in-memory maps (#8322 )
* optimize JSON context processing using in memory maps
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix excessive logs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix mutate resource diff
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* uncomment tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* copy resource, as it can be modified
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* clear prior resource to prevent mutating original
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* linter fix
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix ImageInfo to unstructured conversion
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix custom image extractors
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* do not update mutated resource in JSON context
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* address review comments
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* Ran `gci` to silence a lint warning.
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
* Added a log message when an invalid or incomplete `cloneList` kind is supplied.
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
---------
Signed-off-by: Anton Chernev <anton.chernev@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
Co-authored-by: Anton Chernev <a-anchernov@expediagroup.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-12-07 06:03:27 +00:00
Jim Bugwadia
c3fc0dafd6
Remove var check ( #8990 )
...
* fix excessive logs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove variable check
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-11-27 09:35:31 +00:00
Mariam Fahmy
86dff69edc
fix: use the default namespace in case --namespace isn't set in kyverno create exception ( #9014 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-11-24 11:43:42 +00:00
Mariam Fahmy
96e223657e
fix: remove the additional dash in kyverno create exception ( #8983 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-11-22 13:37:26 +00:00
Pushkar Mishra
765bd198f1
[DOC] fixed typo and broken links ( #8954 )
...
Signed-off-by: Pushkar Mishra <pushkarmishra029@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
2023-11-19 13:49:10 +00:00
Mariam Fahmy
c7e2cb13d9
fix: use v2beta1 version of exceptions in kyverno create CLI ( #8908 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-11-15 07:04:45 -05:00
Vishal Choudhary
878bc48e51
chore: bump cosign to v2.2.1 ( #8855 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2023-11-09 12:22:35 +00:00
Chandan-DK
cafc0990f9
fix: generate policy fails if triggered resource name exceeds 63 characters limit ( #8466 )
...
* fix: generate label resource name character length issue
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* add source label
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* modify newUR function
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* fix
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* improve readability
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* remove generate source name label
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* Revert changes
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* update ResourceSpec
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* add URGenerateResourceUIDLabel
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* make codegen crds all
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* make codegen client all
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* add GenerateSourceUIDLabel
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* modify comment
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* make codegen crds all
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* make codegen-docs-all
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* make codegen-all
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* set trigger uid
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* add uid in transform()
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* add name label
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* fix: use resource name labels along with its UID
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: use the resource name label only if its uid label isn't set
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* add kuttl tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: delete the trigger resource in the test
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: delete the source in the kuttl test
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* add generate trigger uid label
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* modify TriggerInfo function
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* populate uid field for new update requests
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* populate new ur spec with uid
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* handle downstream resources cleanup
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* populate uid of ur status
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
* fetch triggers by the UID label
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* label triggers
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fetch trigger by comparing UID
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fetch cloneList downstream resource by UID
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update test names
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove trigger name label assertions from kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add unit name selector
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add sleep
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* assert events on failures
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Chandan-DK <chandandk468@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-11-06 10:37:13 +00:00