1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

145 commits

Author SHA1 Message Date
Roee Landesman
3e524b5586
Add github token permissions to improve ossf scorecard (#2992)
* Fix autogen issue with cronjob generator and foreach pod generator (#2989)

Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

* Add baseline read-all permissions

Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

* remove extra read-all

Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

* Add arm64 goarch to go releaser (#2991)

Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-15 17:14:22 -08:00
Jim Bugwadia
116f36622b
move guidelines up (#2976)
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-01-13 18:33:24 +08:00
Shubham Palriwala
1257388b97
feat: pin dependencies in gh actions (#2952)
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-01-13 05:23:05 +00:00
Naman Lakhwani
8350aadc58
Fix: CI job to release images (#2929)
* making required changes in images workflow

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* making required changes in release workflow

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

Co-authored-by: shuting <shutting06@gmail.com>
2022-01-10 14:10:44 +00:00
Sambhav Kothari
9a9326928c
Fix the PR template checkboxes to render empty instead of brackets (#2942)
The current PR template doesn't render the checkboxes by default as unticked and instead as square brackets. This change
allows contributors to use the rendered UI to check boxes instead of manually fixing markdown.

Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-09 12:02:57 -08:00
Naman Lakhwani
68c8790139
adding permissions in jobs (#2924)
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 19:35:45 +00:00
Naman Lakhwani
2f8bfc78b1
removing spaces (#2923)
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 17:12:11 +00:00
Naman Lakhwani
cda6310249
fix in image workflow (#2921)
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 22:48:20 +08:00
Naman Lakhwani
f330886af7
fixing cosign command (#2915)
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-05 13:02:17 -08:00
Naman Lakhwani
d126280184
keyless signing kyverno images with digest (#2896)
* signing with digest

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* keyless signing

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* adding annotations

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* keyless image signing with digest in release workflow

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-04 08:08:28 -08:00
Abhinav Sinha
2076f07b9f
added support for --git-branch flag and directory in git path for kyverno test cmd (#2763)
* added support for --git-branch flag and directory in git path for kyverno test cmd

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* added cli tests

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* replaced hard-coded Makefile test-cmd branch names with var GIT_BRANCH

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* moved `test-cmd` job from Makefile to github workflow

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* added `release*` branch to `e2e` workflow

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

Co-authored-by: shuting <shutting06@gmail.com>
2021-12-20 14:09:53 +08:00
shuting
f4614213e5
Test publishing dev-test images (#2848)
* publish dev-* images

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add LD_FLAGS_DEV

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add IMAGE_TAG_LATEST_DEV

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove test statement

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2021-12-17 02:46:59 +00:00
Shubham Palriwala
ea3529f2d0
Trivy now scans local images (#2744)
* fix: trivy now scans entire container

Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>

* update github.com/docker/cli package for vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix go.mod vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2021-11-22 20:57:51 +08:00
Chip Zoller
7c5142b26a
Contributors updates, Kyverno CLI acknowledgements (#2644)
* add platform to bug template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Helm value updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting, formatting, link updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting, formatting, updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Updates per contributors meeting; linting, fixes

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Updated templates with acknowledgement of CLI parity

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* git => GitHub

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-11-06 11:08:42 -04:00
Jose Armesto
831a9826d1
Restructure project to follow standards (#2632)
Signed-off-by: Jose Armesto <github@armesto.net>
2021-10-29 18:13:20 +02:00
Marcus Noble
a923dce631
Cleanup imports (#2635)
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-29 12:24:26 +02:00
Vinod Anandan
a07274f234 Update gh-gomod-generate-sbom
Signed-off-by: Vinod Anandan <vinod@owasp.org>
2021-10-23 14:41:05 +01:00
ShubhamPalriwala
5417b9d3c1 feat: shift sigs and sbom
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-13 21:34:04 +05:30
NoSkillGirl
0ff18dca6f removed log for e2e test
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 16:21:32 +05:30
NoSkillGirl
37b91245cb corrected metric server name
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 15:48:53 +05:30
NoSkillGirl
d1a78e14f3 debugging
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 15:48:53 +05:30
Shubham Palriwala
ae4fb488bf
fix: sign kyverno-cli (#2480)
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-05 22:28:40 -07:00
Jim Bugwadia
8437582622
Merge branch 'main' into sign-and-generate-sbom 2021-10-05 14:49:06 -07:00
ShubhamPalriwala
92ca609c7c ci: scan kyverno-image on each build
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-05 16:38:55 +05:30
ShubhamPalriwala
187f054809 feat: add SBOM using cosign
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
ShubhamPalriwala
f3318767d8 feat: sign images using cosign on release
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
ShubhamPalriwala
614975b1c6 feat: sign images using cosign on build
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
treydock
e1daf2085d
Switch Helm CRDs back to kyverno chart and move Policies to dedicated chart (#2357)
* Switch Helm CRDs back to kyverno chart and move Policies to dedicate chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix policies chart labels

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Remove README items moved to kyverno-policies chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-09-22 13:56:10 -07:00
Pooja Singh
adb785831f
fix | e2e test cases are failing with busybox image (#2422)
* removing charts from push and pull ignore

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated tag replace logic

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* linting fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-09-21 13:07:46 -07:00
Anita-ihuman
afae554a7b
Fixed a typo in config file (#2407)
* create configuration for behaviour bot

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* adding contributor images

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* fixed typo in config.yml

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* including config file to ignore.

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
2021-09-20 15:04:16 -07:00
Anita-ihuman
ac7082d76e
configured Behaviour bot. (#2402)
* create configuration for behaviour bot

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* adding contributor images

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
2021-09-16 13:34:07 -07:00
shuting
e288ed7fd2
Fix upgrade issue from 1.4.2 to 1.4.3-rc1 (#2387)
* update git command to get tag in 'v*' format

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add label "appVersion" to report change request

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix linter issue

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update git hash

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-09-14 01:06:56 -07:00
treydock
1f756c37ac
Only release Helm charts on tags (#2281)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-08-20 15:06:58 -07:00
treydock
45e95c2217
Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted (#2218)
* Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make E2E tests work with new chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Seems Helm lint needs values.yaml

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Can't use ct install for the CRDs because will end up getting uninstalled after test

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Ensure helm release accounts for new CRD chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update CRD chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make CRD chart version match main kyverno chart version

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Bump chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-08-12 13:54:17 -07:00
shuting
6ba341ff9b
- update Make target; - update release workflow config; - update PR template (#2257)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-08-12 09:58:25 -07:00
Vyankatesh Kudtarkar
adb0170001
Automate CLI binaries releases (#2236)
* fix issue

* fix comment

* fix comment

* fix comment

* add md file

* ignore /release

* fix issue
2021-08-10 09:07:46 -07:00
Chip Zoller
bbee030b75
add platform to bug template (#2246)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-08-09 14:37:58 -07:00
shuting
4c99b51fb7
Remove GitHub Releaser & Add app version in Helm notes (#2191)
* - remove github releaser
- add app version in Helm notes

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update chart var

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-27 10:28:28 -07:00
georgekaz
c73a14eba2
add tests before release (#2174)
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-20 17:06:56 -07:00
shuting
3de6128147
Bugfixes/helm release (#2173)
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 12:49:37 -07:00
shuting
2de0af635e
Bump Helm version (#2167)
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 00:15:33 -07:00
georgekaz
216a4e13bf
Fix helm-release workflow (#2150)
* add checkout step to helm releaser.

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

Increment version

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* disable version check, revert version no. to last released

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-19 13:01:17 -07:00
georgekaz
b9e77575be
Chart changes merged,not deployed,iterate version (#2111)
* Chart changes merged,not deployed,iterate version

kyverno#2073 - Updates chart version to v1.4.2 - merged 13 days ago but not deployed
kyverno#2081 - Fix Helm release during tag - merged 9 days ago
kyverno#2037 - updated chart contents but not chart version - not released - merged 7 days ago
kyverno#2103 - updated chart contents but not chart version - not released - merged 3 hours ago

Status - main branch shows chart version is v1.4.2, git tag is v1.4.1 and latest helm chart on artifacthub.io/packages/helm/kyverno/kyverno is v1.4.1

This PR just iterates the chart version so that it's built, but I think chart versions should be incremented as part of the normal PR/merge process if chart elements are changed

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* break the helm release out into it's own workflows

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* workflow fixes

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* don't run helm-release on PR. Remove git config bit

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-14 12:10:41 -07:00
Jim Bugwadia
13caaed8b7
Feature/cosign (#2078)
* add image verification

* inline policy list

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* cosign version and dependencies updates

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add registry initialization

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* generate deep copy and other fixtures

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix deep copy issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* mutate images to add digest

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add certificates to Kyverno container for HTTPS lookups

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align flag syntax

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update docs

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* patch image with digest and fix checks

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* hardcode image for demos

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add default registry (docker.io) before calling reference.Parse

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix definition

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase webhook timeout

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix args

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* run gofmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rename for clarity

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix HasImageVerify check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix linter error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle API conflict and retry

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix reviewdog issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix make for unit tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* improve error message

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix durations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle errors in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* print policy name

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add retries and duration to error log

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix time check in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* round creation times in test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix retry loop

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove timing check for policy creation

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix e2e error - policy not found

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update string comparison method

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix test Generate_Namespace_Label_Actions

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug info for e2e tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix generate bug

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add check for update operations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase time for deleteing a resource

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Shuting Zhao <shutting06@gmail.com>
2021-07-09 18:01:46 -07:00
treydock
c479517c53
Fix Helm release during tag (#2081)
Fixes #2057

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-29 13:36:30 -07:00
Arsh Sharma
9efd58f667
deleted bot (#2059)
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-23 00:23:33 -07:00
Arsh Sharma
431b36f34e
updating the bot to auto label issues and PRs (#2042)
* changed labeler bot

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed label for hold

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 12:10:25 -07:00
shuting
6d5e988ebe
BugFix - update the annotation lastRequestTimestamp from active instances (#2019)
* fix webhook monitor - inactive instance did not get latest request timestamp

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add checks for registered webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update veridy_deployment.sh

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug steps in e2d workflow

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix CI errors

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-15 18:39:22 -07:00
RinkiyaKeDad
4e6cdb9005 moved bot yaml to workflows
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-15 12:44:23 +05:30
Arsh Sharma
15e4a4e4ca
initial commit (#2005)
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-14 23:35:40 -07:00