Charles-Edouard Brétéché
2bb687550c
feat: add imagedata cel lib ( #12442 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-19 17:03:23 +08:00
Frank Jogeleit
f869638edf
Implement Reporting and Background scan for ImageVerificationPolicy ( #12432 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-18 11:39:00 +00:00
Charles-Edouard Brétéché
c0d7332d14
feat: simplify resource cel lib ( #12427 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-18 08:58:59 +00:00
Charles-Edouard Brétéché
6c8446b831
feat: simplify resource cel lib ( #12426 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-17 16:31:01 +00:00
Charles-Edouard Brétéché
e785ee4882
feat: add globalcontext CEL lib ( #12425 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-17 16:53:32 +01:00
Charles-Edouard Brétéché
af550f54d5
feat: add cel user lib ( #12414 )
...
* feat: add cel user lib
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-14 13:51:25 +01:00
Vishal Choudhary
d56e6037a4
fix: image parse func and add chainsaw tests ( #12396 )
...
* fix: image parse func and add chainsaw tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-03-13 07:01:40 +00:00
Frank Jogeleit
6fdbdbce28
Fix: data access in audit annotations ( #12394 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 16:44:50 +00:00
Frank Jogeleit
f59cae97f2
Fix: data access in message expressions ( #12390 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 09:32:29 +00:00
Charles-Edouard Brétéché
9f70209361
feat: mock list resources in context ( #12380 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 17:21:30 +00:00
Frank Jogeleit
1a7c581220
fix: providing the http provider in the compiler ( #12379 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-11 15:00:20 +00:00
Charles-Edouard Brétéché
0d43a2d997
feat: make image ref parsing a static function ( #12374 )
...
* feat: make image ref parsing a static function
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 14:19:36 +00:00
Charles-Edouard Brétéché
c655ba72c2
fix: use pointer in context config map getter ( #12365 )
2025-03-10 14:31:34 +00:00
Charles-Edouard Brétéché
1c3bddf8ca
feat: support mock in CLI for VPs ( #12344 )
...
* feat: support mock in CLI for VPs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* implement get cm mock
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* move into cel package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-10 13:28:44 +00:00
Charles-Edouard Brétéché
a9ac540ddc
fix: nits in cel context lib ( #12333 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-09 17:47:11 +00:00
Vishal Choudhary
4b4e6cc415
feat: add parse image reference function ( #12317 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 07:34:08 +00:00
Frank Jogeleit
da1fbd9475
Cel HTTP Lib ( #12241 )
...
* Implement HTTP CEL lib for external API calls
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* fix lint errors
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
---------
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-06 15:13:13 +00:00
Khaled Emara
c61d0735e3
feat(vp): implement gctx in context library ( #12055 )
...
* feat(vp): implement gctx in context library
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(cel): add chainsaw test for validating policies gctx
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-06 09:27:03 +00:00
shuting
637f756994
feat: support json payload via CLI apply command ( #12296 )
...
* chore: remove unused code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: support json in CLI apply command
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: remove not used validation expressions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-06 08:48:26 +00:00
shuting
84e9517bad
feat: add cel evaluator for json payload ( #12288 )
...
* feat: add cel evaluator for json payload
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: linter fixes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
2025-03-04 15:20:26 +00:00
shuting
f2f724469d
chore: remove mutatingpolicies ( #12261 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-02-28 14:22:09 +00:00
Frank Jogeleit
5f42a0bad8
feat: context function to request resources from api server ( #12181 )
...
* feat: context function to request resources from api server
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* add chainsaw test
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* replace dclient with dynamic client
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* update test case
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
---------
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-27 13:31:03 +00:00
Vishal Choudhary
8d915b52ce
feat: add evaluator for image verification policies ( #12251 )
...
* feat: add variables
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: implement evaluator
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: build
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-02-27 15:19:11 +08:00
Charles-Edouard Brétéché
ebaad6fbb1
feat: improve validating policy api ( #12243 )
...
* feat: improve validating policy api
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-02-26 15:18:12 +00:00
shuting
7a34b60ed2
feat: create patchers and apply mutations ( #12253 )
...
* feat: create patchers and apply mutations
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: create patchers and apply mutations
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-02-26 13:32:28 +00:00
Charles-Edouard Brétéché
9d56f5f2b5
feat: stop reusing admissionregistrationv1.ValidatingAdmissionPolicySpec ( #12246 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-25 14:48:47 +00:00
Vishal Choudhary
c056321cba
chore(refactor): refactor image verification packages ( #12220 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2025-02-23 08:55:32 +00:00
Frank Jogeleit
fef88ab433
Validating policy audit annotations ( #12115 )
...
* feat: return single result from validating policy evaluation
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* feat: support audit annotations for validating policies
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* fix error message
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* feat: return single result from validating policy evaluation
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* feat: support audit annotations for validating policies
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* fix error message
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* fix testcase
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
* rebase with main
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
---------
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-19 13:10:01 +00:00
Mariam Fahmy
76751b96b3
feat: support celexceptions in the CLI apply command ( #12182 )
...
* feat: support celexceptions in the CLI
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add unit tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-19 08:38:44 +00:00
Mariam Fahmy
86fff3b394
feat: compile and evaluate autogen rules ( #12163 )
2025-02-15 12:56:51 +08:00
Frank Jogeleit
05f9bb4506
feat: configure admission and background flag for ValidatingPolicies ( #12153 )
2025-02-13 17:24:45 +00:00
Mariam Fahmy
7d5750a717
chore: move celexceptions to the new group ( #12143 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-11 19:05:22 +02:00
Mariam Fahmy
a4c10f6bb4
feat: compile and evaluate polex's match conditions ( #12113 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-02-06 15:30:59 +02:00
Charles-Edouard Brétéché
e55a90cc4b
feat: implement match conditions failure policy ( #12071 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-04 00:04:26 +02:00
Charles-Edouard Brétéché
884a77a044
feat: add context provider in admission handling ( #12070 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-03 19:11:31 +02:00
Charles-Edouard Brétéché
1cb0d1c356
feat: add message expression support to validating policies ( #12063 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-03 14:04:19 +00:00
Vishal Choudhary
7d8ed212a4
feat: create image data loader ( #12036 )
...
* feat: add image data loader to context
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: build
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: update types
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: replace crane with remote
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-03 13:42:40 +00:00
Charles-Edouard Brétéché
2bf7262814
feat: add admission request cel variable ( #12054 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-03 11:40:05 +00:00
Charles-Edouard Brétéché
0077fdae2b
feat: add validation message in cel engine response ( #12052 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-02-03 11:13:06 +00:00
Charles-Edouard Brétéché
7a4e1bede9
feat: use more admission attributes ( #12044 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-30 23:58:12 +00:00
Charles-Edouard Brétéché
db4f7fb5e6
feat: register cel context lib ( #12007 )
...
* feat: register cel context lib
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-27 16:16:27 +00:00
Charles-Edouard Brétéché
a5fe768a53
feat: implement cel engine context provider ( #11995 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-24 15:42:58 +00:00
Charles-Edouard Brétéché
144bf436ed
fix: implement cel context lib correctly ( #11983 )
...
* fix: implement cel context lib correctly
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more changes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-23 11:02:33 +00:00
Charles-Edouard Brétéché
f5467fcd61
refactor: reduce generic policy interface ( #11977 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-22 16:32:30 +00:00
Charles-Edouard Brétéché
9d11e8f98c
feat: introduce evaluation results in cel engine ( #11971 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-21 16:41:45 +00:00
Charles-Edouard Brétéché
54a8a53205
feat: add validating policy engine api wrapper ( #11963 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-21 15:59:34 +08:00
Charles-Edouard Brétéché
a30fc14d4d
feat: add namespace support in CLI values ( #11958 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-20 13:43:13 +02:00
Charles-Edouard Brétéché
7351501ef6
feat(cli,apply): load validating policies ( #11933 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-17 09:53:17 +00:00
Charles-Edouard Brétéché
6af7ab8905
feat: add CEL variables type checking ( #11920 )
...
* feat: add CEL variables support
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: add CEL variables type checking
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more types
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* provider
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-01-14 15:57:55 +01:00
Mariam Fahmy
4678078c3d
feat: add auditAnnotation in CEL Compiler ( #11918 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2025-01-14 13:16:29 +00:00
