Charles-Edouard Brétéché
|
2bb687550c
|
feat: add imagedata cel lib (#12442)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2025-03-19 17:03:23 +08:00 |
|
Charles-Edouard Brétéché
|
d3305512d4
|
chore: move imageverify cel lib (#12449)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2025-03-19 08:28:35 +00:00 |
|
Charles-Edouard Brétéché
|
e785ee4882
|
feat: add globalcontext CEL lib (#12425)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2025-03-17 16:53:32 +01:00 |
|
shuting
|
4f9b07070a
|
feat: enable mutating webhook for ivpol (#12423)
* feat: enable mutating webhook for ivpol
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add objects to payload
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add chainsaw test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: propagate policy response to admission reponse
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update chainsaw tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2025-03-17 12:31:37 +00:00 |
|
shuting
|
5c5a5fc0b0
|
feat: reconcile ivpol.status (#12392)
* feat: update ivpol.status api
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: reconcile ivpol.status
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter issues
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: autogen fields replacement
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update ivpol autogen rules
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: invoke ivpol webhook handler
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
|
2025-03-15 05:29:19 +05:30 |
|
Charles-Edouard Brétéché
|
af550f54d5
|
feat: add cel user lib (#12414)
* feat: add cel user lib
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2025-03-14 13:51:25 +01:00 |
|
Vishal Choudhary
|
98ecf30a62
|
fix: add missing context type and http type in ivpols (#12393)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2025-03-12 14:47:21 +00:00 |
|
Vishal Choudhary
|
d812982b2e
|
feat: webhook handlers for image verification (#12318)
* feat: webhook support for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add validation
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: codegen
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: trim prefix
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: only use matched policies
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: conflicts
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove commented code
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2025-03-11 07:38:11 +00:00 |
|
Frank Jogeleit
|
1ac2dd9fa6
|
Add CEL context.Lib to the imageverification compiler (#12337)
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
|
2025-03-09 17:06:53 +00:00 |
|
Frank Jogeleit
|
29849e196f
|
Add CEL HTTP Lib to the imageverification compiler (#12335)
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
|
2025-03-07 13:31:38 +00:00 |
|
Vishal Choudhary
|
32f13d5894
|
fix: use object key in json image verification (#12298)
|
2025-03-05 19:53:19 +00:00 |
|
Vishal Choudhary
|
c47b48bda6
|
feat: autogenerate image verification policies for pod controllers (#12290)
* feat: autogen for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2025-03-04 21:30:23 +00:00 |
|
Vishal Choudhary
|
70dc8cb81a
|
feat: image verify performance fix and tests (#12282)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2025-03-04 06:34:31 +00:00 |
|
Vishal Choudhary
|
00f3e2f775
|
feat: add evaluation config to image verification policies (#12279)
* feat: add evaluation config to image verification policies
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2025-03-03 21:27:07 +05:30 |
|
Vishal Choudhary
|
7439fcc733
|
feat(test): image verification on any payload (#12266)
|
2025-02-28 09:09:25 +00:00 |
|
Vishal Choudhary
|
8d915b52ce
|
feat: add evaluator for image verification policies (#12251)
* feat: add variables
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: implement evaluator
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: build
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2025-02-27 15:19:11 +08:00 |
|