1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Commit graph

610 commits

Author SHA1 Message Date
shuting
f4614213e5
Test publishing dev-test images (#2848)
* publish dev-* images

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add LD_FLAGS_DEV

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add IMAGE_TAG_LATEST_DEV

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove test statement

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2021-12-17 02:46:59 +00:00
Shubham Palriwala
ea3529f2d0
Trivy now scans local images (#2744)
* fix: trivy now scans entire container

Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>

* update github.com/docker/cli package for vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix go.mod vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2021-11-22 20:57:51 +08:00
Jose Armesto
831a9826d1
Restructure project to follow standards (#2632)
Signed-off-by: Jose Armesto <github@armesto.net>
2021-10-29 18:13:20 +02:00
Marcus Noble
a923dce631
Cleanup imports (#2635)
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-29 12:24:26 +02:00
Vinod Anandan
a07274f234 Update gh-gomod-generate-sbom
Signed-off-by: Vinod Anandan <vinod@owasp.org>
2021-10-23 14:41:05 +01:00
ShubhamPalriwala
5417b9d3c1 feat: shift sigs and sbom
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-13 21:34:04 +05:30
NoSkillGirl
0ff18dca6f removed log for e2e test
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 16:21:32 +05:30
NoSkillGirl
37b91245cb corrected metric server name
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 15:48:53 +05:30
NoSkillGirl
d1a78e14f3 debugging
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 15:48:53 +05:30
Shubham Palriwala
ae4fb488bf
fix: sign kyverno-cli (#2480)
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-05 22:28:40 -07:00
Jim Bugwadia
8437582622
Merge branch 'main' into sign-and-generate-sbom 2021-10-05 14:49:06 -07:00
ShubhamPalriwala
92ca609c7c ci: scan kyverno-image on each build
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-05 16:38:55 +05:30
ShubhamPalriwala
187f054809 feat: add SBOM using cosign
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
ShubhamPalriwala
f3318767d8 feat: sign images using cosign on release
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
ShubhamPalriwala
614975b1c6 feat: sign images using cosign on build
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
treydock
e1daf2085d
Switch Helm CRDs back to kyverno chart and move Policies to dedicated chart (#2357)
* Switch Helm CRDs back to kyverno chart and move Policies to dedicate chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix policies chart labels

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Remove README items moved to kyverno-policies chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-09-22 13:56:10 -07:00
Pooja Singh
adb785831f
fix | e2e test cases are failing with busybox image (#2422)
* removing charts from push and pull ignore

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated tag replace logic

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* linting fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-09-21 13:07:46 -07:00
Anita-ihuman
afae554a7b
Fixed a typo in config file (#2407)
* create configuration for behaviour bot

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* adding contributor images

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* fixed typo in config.yml

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* including config file to ignore.

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
2021-09-20 15:04:16 -07:00
shuting
e288ed7fd2
Fix upgrade issue from 1.4.2 to 1.4.3-rc1 (#2387)
* update git command to get tag in 'v*' format

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add label "appVersion" to report change request

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix linter issue

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update git hash

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-09-14 01:06:56 -07:00
treydock
1f756c37ac
Only release Helm charts on tags (#2281)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-08-20 15:06:58 -07:00
treydock
45e95c2217
Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted (#2218)
* Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make E2E tests work with new chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Seems Helm lint needs values.yaml

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Can't use ct install for the CRDs because will end up getting uninstalled after test

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Ensure helm release accounts for new CRD chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update CRD chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make CRD chart version match main kyverno chart version

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Bump chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-08-12 13:54:17 -07:00
shuting
6ba341ff9b
- update Make target; - update release workflow config; - update PR template (#2257)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-08-12 09:58:25 -07:00
Vyankatesh Kudtarkar
adb0170001
Automate CLI binaries releases (#2236)
* fix issue

* fix comment

* fix comment

* fix comment

* add md file

* ignore /release

* fix issue
2021-08-10 09:07:46 -07:00
shuting
4c99b51fb7
Remove GitHub Releaser & Add app version in Helm notes (#2191)
* - remove github releaser
- add app version in Helm notes

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update chart var

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-27 10:28:28 -07:00
georgekaz
c73a14eba2
add tests before release (#2174)
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-20 17:06:56 -07:00
shuting
3de6128147
Bugfixes/helm release (#2173)
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 12:49:37 -07:00
shuting
2de0af635e
Bump Helm version (#2167)
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 00:15:33 -07:00
georgekaz
216a4e13bf
Fix helm-release workflow (#2150)
* add checkout step to helm releaser.

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

Increment version

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* disable version check, revert version no. to last released

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-19 13:01:17 -07:00
georgekaz
b9e77575be
Chart changes merged,not deployed,iterate version (#2111)
* Chart changes merged,not deployed,iterate version

kyverno#2073 - Updates chart version to v1.4.2 - merged 13 days ago but not deployed
kyverno#2081 - Fix Helm release during tag - merged 9 days ago
kyverno#2037 - updated chart contents but not chart version - not released - merged 7 days ago
kyverno#2103 - updated chart contents but not chart version - not released - merged 3 hours ago

Status - main branch shows chart version is v1.4.2, git tag is v1.4.1 and latest helm chart on artifacthub.io/packages/helm/kyverno/kyverno is v1.4.1

This PR just iterates the chart version so that it's built, but I think chart versions should be incremented as part of the normal PR/merge process if chart elements are changed

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* break the helm release out into it's own workflows

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* workflow fixes

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* don't run helm-release on PR. Remove git config bit

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-14 12:10:41 -07:00
Jim Bugwadia
13caaed8b7
Feature/cosign (#2078)
* add image verification

* inline policy list

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* cosign version and dependencies updates

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add registry initialization

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* generate deep copy and other fixtures

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix deep copy issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* mutate images to add digest

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add certificates to Kyverno container for HTTPS lookups

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align flag syntax

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update docs

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* patch image with digest and fix checks

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* hardcode image for demos

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add default registry (docker.io) before calling reference.Parse

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix definition

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase webhook timeout

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix args

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* run gofmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rename for clarity

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix HasImageVerify check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix linter error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle API conflict and retry

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix reviewdog issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix make for unit tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* improve error message

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix durations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle errors in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* print policy name

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add retries and duration to error log

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix time check in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* round creation times in test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix retry loop

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove timing check for policy creation

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix e2e error - policy not found

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update string comparison method

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix test Generate_Namespace_Label_Actions

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug info for e2e tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix generate bug

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add check for update operations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase time for deleteing a resource

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Shuting Zhao <shutting06@gmail.com>
2021-07-09 18:01:46 -07:00
treydock
c479517c53
Fix Helm release during tag (#2081)
Fixes #2057

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-29 13:36:30 -07:00
Arsh Sharma
9efd58f667
deleted bot (#2059)
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-23 00:23:33 -07:00
Arsh Sharma
431b36f34e
updating the bot to auto label issues and PRs (#2042)
* changed labeler bot

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed label for hold

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 12:10:25 -07:00
shuting
6d5e988ebe
BugFix - update the annotation lastRequestTimestamp from active instances (#2019)
* fix webhook monitor - inactive instance did not get latest request timestamp

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add checks for registered webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update veridy_deployment.sh

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug steps in e2d workflow

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix CI errors

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-15 18:39:22 -07:00
RinkiyaKeDad
4e6cdb9005 moved bot yaml to workflows
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-15 12:44:23 +05:30
treydock
f1491fe6d3
Allow metrics service annotations to be defined separate from main service (#1988)
* Allow metrics service annotations to be defined separate from main service

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add test for metrics during Helm deployment testing

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make services separate for kustomize

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Run 'make kustomize-crd'

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix e2e tests for metrics

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix Helm chart for metrics service

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix helm chart testing

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-10 13:53:29 -07:00
Pooja Singh
e227636271
1947/e2e generate policy (#1951)
* fixed generate flow

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added test for generate policy with clone

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small conflict fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* print logs for e2e

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* changing log level

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added wait while creating policy

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* remove log level from e2e

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added a clusterpolicy check while creating a namespaced resource in e2e tests

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated the github_action name for e2e tests

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* changing waiting time to 1 sec

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* remove log

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

Co-authored-by: Shuting Zhao <shutting06@gmail.com>
2021-06-07 12:36:00 -07:00
Yashvardhan Kukreja
b0ef84c581 added e2e tests: ensuring the availability of kyverno's prometheus metrics-server
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-05-24 08:09:17 +05:30
treydock
67973c2776
Add Helm tests to Github Actions (#1793)
This reverts commit 2749280b6c.

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-04-13 10:39:27 -07:00
shuting
2749280b6c
Revert "Add Helm tests to Github Actions (#1790)" (#1792)
This reverts commit 9c7f7019f3.
2021-04-12 21:57:21 -07:00
treydock
9c7f7019f3
Add Helm tests to Github Actions (#1790)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-04-12 20:55:13 -07:00
treydock
0131f375f1
Register webhooks only once service endpoint is ready (#1741)
* Register webhooks only once service endpoint is ready

Fixes #1740

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Wait for webhook to become ready in main loop

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Better error handling and logging around checking endpoint

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Log soft failure as info, remove redundant return

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-03-30 13:46:01 -07:00
Vyankatesh Kudtarkar
04dc3ddfe3
Remove sample Dir and Remove testcases from test_runner (#1686)
* remove sample Dir and remove testcases form test_runner

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* change git URL for test

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix fmt issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* remove unused policy and test yamls

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix yaml path issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

Co-authored-by: vyankatesh <vyankatesh@neualto.com>
2021-03-16 14:35:32 -07:00
Raj Babu Das
08643773c3
removing go.sum from github workflow and adding unused pkg check (#1698)
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
2021-03-11 10:14:46 -08:00
Raj Babu Das
7a1629aa9d
Adding parallel GitHub pipeline to reduce the build time (#1635)
* refactoring github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* refactoring github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* stage-pipeline

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* Refactoring release and push github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* refactoring github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* adding release-cli-via-krew

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
2021-02-22 14:48:11 -08:00
Raj Babu Das
0b832a038d
Adding multi arch support in all kyverno components (AMD6 and ARM64) (#1542)
* Adding multi arch support

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding multi arch support

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* minor refactors

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* adding buildx action in e2e.yaml

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding kyvernopre

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding kyvernopre

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding amd build

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding go env

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* minor fix

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* removing docker tag

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding local dockerfile build command

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
2021-02-18 18:09:01 -08:00
Yashvardhan Kukreja
426475b16c
added: gofmt check over the existing github workflows (#1553)
* added: gofmt check over the existing github workflows

Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>

* added: gofmt check with logs added

Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-02-09 11:34:13 -08:00
shuting
54d49ed412
revet GitHub action change for krew (#1484)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-01-20 14:17:39 -08:00
Shuting Zhao
f95771a3b8 add dependency to go.sum 2021-01-08 18:47:28 -08:00
Jim Bugwadia
947ebf135b ignore docs 2021-01-07 21:17:03 -08:00