Charles-Edouard Brétéché
66ba0fc5ec
fix: exception validation follow up ( #5697 )
...
* fix: exception validation follow up
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-15 17:53:22 +08:00
Charles-Edouard Brétéché
4618dc39d0
feat: add policy exception validation webhook ( #5679 )
...
* feat: add policy exception validation webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-15 08:34:44 +00:00
Charles-Edouard Brétéché
682afc8e0f
chore: remove deprecated flag splitPolicyReport ( #5686 )
...
* chore: remove deprecated flag splitPolicyReport
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-14 13:21:13 +01:00
Charles-Edouard Brétéché
d100f4647d
chore: remove secrets client from webhook controller ( #5682 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-14 01:00:29 +00:00
Charles-Edouard Brétéché
807b16b87c
feat: add certs controller to cleanup policies ( #5671 )
...
* feat: add certs controller to cleanup policies
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* webhook controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-13 16:43:17 +01:00
Jim Bugwadia
af4c8ed886
use camel case for ForEach naming ( #5660 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-12-12 19:24:13 +00:00
Charles-Edouard Brétéché
f927b51b86
feat: add metrics service and service monitor to cleanup controller ( #5653 )
...
* feat: add metrics service and service monitor to cleanup controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more config
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* name and certs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: conditions check
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* leader election
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* workflows
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rbac
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-12-12 18:39:29 +00:00
Jim Bugwadia
9d3b176def
Nested foreach ( #5589 )
...
* updated foreach logic and added tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* uncomment tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix vars and unit tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix vars and unit tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix some tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix more tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* format
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* make codegen
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* linter
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* cleanup
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter issue
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* revert local launch
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* propagate context
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* uncomment tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix propagation of registry client
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-12 15:20:20 +00:00
Charles-Edouard Brétéché
d16bdba1d4
feat: improve cleanup policies controller and chart ( #5628 )
...
* feat: improve cleanup policies controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* helm improvements
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* todo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-09 17:12:37 +00:00
Vyom Yadav
99d988e98c
feat: add support for subresources to validating and mutating policies ( #4916 )
...
* feat: add support for subresources to validating and mutating policies
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
* Add CLI test cases with subresources for validating policies
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
* Fix existing e2e tests for validating policies and remove tests migrated to kuttl
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
* Add kuttl e2e tests for validating policies with subresources
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
* Add kuttl e2e tests for mutating policies with subresources
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
* Add kuttl e2e tests for validating policy by-pass by manipulating preconditions
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
2022-12-10 00:45:23 +08:00
Charles-Edouard Brétéché
ff728d5f2b
feat: propagate context through engine ( #5639 )
...
* feat: propagate context through engine
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: propagate context through engine
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: propagate context through engine
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: propagate context through engine
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-09 21:45:11 +08:00
Charles-Edouard Brétéché
9dc001e758
feat: add conditions matching to cleanup controller ( #5626 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-09 10:24:04 +00:00
Charles-Edouard Brétéché
7db2307574
fix: setup tracing and minor cleanup in tracing and metrics code ( #5629 )
...
* fix: setup tracing and minor cleanup in tracing and metrics code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-09 09:49:45 +00:00
Charles-Edouard Brétéché
39b72eefb9
feat: add http clients tracing ( #5630 )
...
* feat: add http clients tracing
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* check we are in a span before creating one and and context to metrics recording calls
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-09 09:09:11 +00:00
Charles-Edouard Brétéché
8376bf8b6b
feat: use lister in registry client ( #5620 )
2022-12-09 00:51:45 +08:00
Charles-Edouard Brétéché
87ce4b85de
feat: introduce v2alpha1 ( #5625 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-08 11:45:47 +00:00
Charles-Edouard Brétéché
f5adb50f8f
feat: implement cleanup policy matching ( #5614 )
...
* chore: bump a couple of deps
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: implement cleanup policy matching
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* delete
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* check namespace
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* ns labels
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* review
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-08 11:31:28 +01:00
Charles-Edouard Brétéché
7219b4f8a3
refactor: registry client ( #5596 )
...
* refactor: registry client
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-07 23:08:37 +08:00
Charles-Edouard Brétéché
dd95e00076
refactor: improve color management in cli test ( #5609 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-07 13:02:43 +01:00
Charles-Edouard Brétéché
a6aaffded3
feat: add cleanup handler ( #5576 )
...
* feat: add cleanup handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* service
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-07 10:30:47 +00:00
Charles-Edouard Brétéché
c8185feb11
fix: use lister for CA secret ( #5598 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-07 14:08:37 +08:00
Steven Lahouchuc
022243a0fd
adding --warn-exit-code flag ( #5577 )
...
* adding --warn-exit-code flag
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
* tweaking flag to int
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
* Update cmd/cli/kubectl-kyverno/apply/apply_command.go
No shorthand needed - IntVar is a better choice
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
* Update cmd/cli/kubectl-kyverno/apply/apply_command.go
prevent a hard exit if 0
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
* making struct field private
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-05 18:15:22 +00:00
Charles-Edouard Brétéché
6893842226
refactor: cli test command ( #5550 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-03 19:56:09 +01:00
Charles-Edouard Brétéché
a7b4089613
refactor: cli jp command ( #5552 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-03 19:18:01 +01:00
Soumya Singh
ebf9f3f878
Kyverno CLI: added method to detect duplicate resource in kyverno test ( #3612 )
...
* added method to detect duplicate resource in kyverno test
Signed-off-by: tend2infinity <somu12.ss@gmail.coom>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: tend2infinity <somu12.ss@gmail.coom>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: tend2infinity <somu12.ss@gmail.coom>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-02 15:14:26 +00:00
vivek kumar sahu
82e1fd417d
To support gitURLs for "apply" command ( #4502 )
...
* apply cmd support gitURL
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* Added e2e test cases
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* fix e2e test case
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* added functions to make it simple
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* fixed tests
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* added more e2e test
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* typo mistake
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* removed uncovert linters
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* renamed variables, functions
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* test: to check urls are git source or not.
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* remove misleading message
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-02 14:33:04 +00:00
Pratik Shah
f8ed1a9301
issue-4613: Add support for cache enhancements with informers ( #5484 )
...
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Pratik Shah <pratik@infracloud.io>
2022-12-02 13:59:51 +00:00
Charles-Edouard Brétéché
5b89e2e5f8
refactor: make policy context immutable and fields private ( #5523 )
...
* refactor: make policy context immutable and fields private
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: make policy context immutable and fields private
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-12-02 16:14:23 +08:00
yinka
d7c7bbc843
configure opentelemetry logger ( #5513 )
...
* configure opentelemetry logger
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* Update cmd/internal/metrics.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Update cmd/internal/metrics.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-01 22:44:30 +00:00
Charles-Edouard Brétéché
db9faf5835
fix: cleanup policy validation ( #5514 )
...
* fix: cleanup policy validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-12-01 16:02:21 +08:00
Charles-Edouard Brétéché
83bbf87ff6
feat: use admission review v1 ( #5464 )
...
* feat: use admission review v1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* patch type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-11-30 23:37:42 +08:00
Charles-Edouard Brétéché
1ea4a0db19
refactor: use internal cmd package in kyverno ( #5507 )
2022-11-30 13:37:53 +00:00
Charles-Edouard Brétéché
9b1860a4e5
refactor: add controller helper to internal package ( #5506 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-30 11:13:57 +00:00
Charles-Edouard Brétéché
c3be9e36a5
feat: propagate context to dynamic client ( #5495 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-29 13:59:40 +00:00
Charles-Edouard Brétéché
8f6c3e648c
feat: add dynamic client support to internal cmd package ( #5477 )
...
* feat: add dynamic client support to internal cmd package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Update cmd/internal/client.go
Signed-off-by: shuting <shutting06@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2022-11-29 09:16:07 +00:00
Charles-Edouard Brétéché
6f1bd5fff2
chore: replace utils.ContainsString with builtin slices.Contains ( #5496 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-29 08:04:49 +00:00
Charles-Edouard Brétéché
dfded5cc60
feat: propagate context to the metrics package ( #5479 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-28 10:30:14 +00:00
Charles-Edouard Brétéché
e03f48128a
refactor: metrics configuration code ( #5475 )
...
* refactor: metrics configuration
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-25 13:14:55 +00:00
Charles-Edouard Brétéché
4984c5c878
feat: create a policy utils package ( #5473 )
...
* feat: create a policy utils package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* added comment
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-25 13:46:02 +01:00
Nikhil Sharma
8547c8ff8c
Add reconciling logic for creating cronjobs whenever a new cleanup policy is created ( #5385 )
...
* add reconcile logic to create CronJobs
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix lint issues
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* watch cronjobs in reconciliation
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* fix
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-25 09:59:45 +00:00
Charles-Edouard Brétéché
925f0cf182
fix: issue when calling kustomize concurrently ( #5465 )
...
* fix: issue when calling kustomize concurrently
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-25 09:09:41 +05:30
Charles-Edouard Brétéché
41800c63a0
feat: support flagsets in internal cmd package ( #5461 )
...
* feat: add signal in internal cmd package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logger
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: support flagsets in internal cmd package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* setup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* setup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* init container
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-24 20:57:01 +01:00
Charles-Edouard Brétéché
ee28f9e9b9
fix: reading policies for oci command and pushing image ( #5435 )
...
* fix: reading policies for oci command and pushing image
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-24 15:54:56 +00:00
Charles-Edouard Brétéché
56aae9f505
fix: admission reports stacking up ( #5457 )
...
* fix: admission reports stacking up
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* utils
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* warmup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix logger
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nits
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-24 14:21:08 +01:00
Charles-Edouard Brétéché
25a10e7cd9
feat: use client funcs from internal cmd package ( #5443 )
...
* refactor: improve instrumented clients creation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: instrumented clients code part 3
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* metadata
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* metadata
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: use client funcs from internal cmd package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-23 10:36:15 +00:00
Charles-Edouard Brétéché
a6c8c401ff
feat: add signal in internal cmd package ( #5444 )
...
* feat: add signal in internal cmd package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logger
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-23 07:28:19 +00:00
Charles-Edouard Brétéché
f4c2f24208
feat: improve handlers tracing code ( #5442 )
...
* feat: improve handlers tracing code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-23 06:50:55 +00:00
Charles-Edouard Brétéché
2178b9fe77
refactor: dynamic client use instrumented clients ( #5436 )
...
* refactor: improve instrumented clients creation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: instrumented clients code part 3
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: dynamic client
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-22 13:37:27 +00:00
cleverhu
8a09d76198
fix request.operation in globalValues is always set to CREATE ( #5423 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-22 12:17:06 +00:00
Charles-Edouard Brétéché
447360c1f3
refactor: improve instrumented clients code and support dynamic/metadata client ( #5428 )
...
* refactor: improve instrumented clients creation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: instrumented clients code part 3
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* metadata
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* metadata
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-22 17:10:07 +08:00
Charles-Edouard Brétéché
8ff6ce1c7f
refactor: improve instrumented clients creation ( #5417 )
...
* refactor: improve instrumented clients creation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-21 17:16:25 +00:00
Steven Lahouchuc
1960ced030
adding --audit-warn flag ( #5321 )
...
Signed-off-by: Steven Lahouchuc <stelah1423@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-21 14:21:32 +00:00
Charles-Edouard Brétéché
4bdd45c0cc
refactor: introduce cmd internal package ( #5404 )
...
* refactor: introduce cmd internal package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* informer
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* tracing
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix flag
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-18 22:21:15 +08:00
Charles-Edouard Brétéché
1b307ff6c5
refactor: generated instrumented client code part 2 ( #5398 )
...
* refactor: generated instrumented client code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kyverno client
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* client type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* factory
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* main
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* remove manually instrumented clients
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor and traces
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* use instrumented clients
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-18 10:07:29 +00:00
Charles-Edouard Brétéché
9983e82770
feat: add tracing middleware ( #5397 )
...
* feat: add tracing middleware
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add middleware
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add tracing to middlewares
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-18 09:18:00 +00:00
yinka
ee54672cab
add os.Exit ( #5402 )
...
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-17 22:42:26 +00:00
Charles-Edouard Brétéché
1f48610cd2
refactor: generate instrumented client code ( #5362 )
...
* refactor: generated instrumented client code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kyverno client
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* client type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* factory
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* main
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* remove manually instrumented clients
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-17 16:01:30 +00:00
Charles-Edouard Brétéché
fdf5b840b6
refactor: propagate context through admission handlers ( #5392 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-17 15:17:52 +00:00
yinka
3d7fd8adc1
fix: set correct logger in profiling server ( #5358 )
...
* fix: set correct logger in profiling server
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* Update cmd/kyverno/main.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-17 10:06:36 +00:00
yinka
449cd4356c
fix: set logger in metrics server ( #5319 )
...
* set logger in metrics server
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix linter issue
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix linter issue
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
2022-11-17 08:54:33 +00:00
Nikhil Sharma
0fb45ed53a
feat: add CleanupPolicy validation code to CleanupPolicyHandler ( #5338 )
...
* add validation code for cleanupPolicyHandler
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* update
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* register kuttl tests for cleanup policy
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-16 13:11:33 +00:00
Charles-Edouard Brétéché
86fc537ce0
feat: add cleanup controller to helm chart ( #5329 )
...
* feat: add cleanup controller to helm chart
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add webhook config
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rbac
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* secret
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* certs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix labels
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add server
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rbac
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-14 18:30:12 +01:00
Charles-Edouard Brétéché
511eb797e6
chore: remove docker support ( #5324 )
...
* chore: remove docker support
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update docs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-14 23:34:46 +08:00
Charles-Edouard Brétéché
217d77d670
feat: add cleanup controller makefile targets ( #5327 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-14 11:00:40 +00:00
Nikhil Sharma
d44dc97990
feat: add cleanupPolicy validation code ( #5279 )
...
* validate the cleanupPolicy
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* add validation for DELETE permission for cleanupPolicy
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* add separate binary for cleanupPolicy
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
* fix linter issues
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
Signed-off-by: Nikhil Sharma <nikhilsharma230303@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-14 10:43:32 +01:00
Eric Miller
001db94d87
Fix issue where CLI test command ignores failures ( #5189 )
...
Closes #5187
The test command was resetting the return value to "pass", even if it
was already marked failed, in some cases. This solves by moving the
"pass" into an else-if clause.
Signed-off-by: Eric Miller <eric.miller@instructure.com>
Signed-off-by: Eric Miller <eric.miller@instructure.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-11 07:19:49 +00:00
yinka
a1e9856846
fix: make zapr compatible with klog's -v argument ( #5166 )
...
* make zapr compatible with klog's -v argument
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* remove zap logger's NameKey
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
2022-11-09 15:10:27 +00:00
Charles-Edouard Brétéché
ff5e0a361c
feat: add flag to control leader election frequency ( #5172 )
...
* feat: add flag to control leader election frequency
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-11-09 11:37:00 +00:00
Charles-Edouard Brétéché
cc8f643767
refactor: admission metrics (counter and latency) ( #5245 )
...
* refactor: move all middlewares in handlers sub package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: admission metrics (counter and latency)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* builder
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-09 18:52:20 +08:00
Prateek Pandey
2d475c1b85
fix: kyverno Dockerfile base image tag and sha256 hash ( #5248 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-11-07 21:02:41 +05:30
XDRAGON2002
25f8d4498b
[Feature] Pin Dependencies by Hash ( #5168 )
...
* pin dependencies by hash
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* pin scripts
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-07 08:59:26 +00:00
Charles-Edouard Brétéché
a64475a6db
refactor: health check system ( #5176 )
...
* refactor: health check system
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* filter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-03 11:19:38 +01:00
Charles-Edouard Brétéché
9f6b0e8017
refactor: remove policyreport package ( #5174 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-02 09:06:44 +00:00
Charles-Edouard Brétéché
2dcd48ef6f
fix: do not cancel context when loosing the lead ( #5180 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-01 15:33:41 +00:00
Charles-Edouard Brétéché
bd64cc4d75
feat: run leader election in loop ( #5173 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-01 10:28:20 +00:00
Vyankatesh Kudtarkar
7137ccaa28
fix 5151 issue ( #5170 )
2022-10-31 19:15:02 +08:00
Charles-Edouard Brétéché
e4bf66e756
feat: remove policy mutation for auto-gen rules ( #5123 )
...
* feat: remove policy mutation code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-25 23:43:46 +00:00
Batuhan Apaydın
cbbd8488c8
feat: oci pull/push support for policie(s) ( #5026 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-24 18:47:20 +00:00
XDRAGON2002
a3c129f469
[Feature] create command line option to set failurePolicy globally ( #4991 )
...
* add forceFailurePolicyIgnore flag
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* cleanup code
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* add logging
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* resolve merge conflicts
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* fix codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-21 18:13:36 +00:00
yinka
822dbdc011
feat: enable/disable Debug mode which shows entire AdmissionReview payload ( #5024 )
...
* work in progress PR
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add custom request struct
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* pass debug mode option through constructor and replace logger with klogr
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* make changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add another test case
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* removed unused function
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-21 16:17:49 +00:00
Charles-Edouard Brétéché
5d0adadfa7
fix: use correct side effects in validating webhooks ( #5080 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-21 16:53:55 +08:00
Charles-Edouard Brétéché
0d50b70134
feat: add flag to configure the number of background scan workers ( #5088 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-20 23:02:38 +02:00
Sandesh More
fa178ebd82
added apiCalls support in kyverno-apply command ( #4938 )
...
Signed-off-by: Sandesh More <sandesh.more@infracloud.io>
Signed-off-by: Sandesh More <sandesh.more@infracloud.io>
2022-10-19 16:39:15 +00:00
Charles-Edouard Brétéché
c433242cd3
fix: setup max procs with correct logger ( #5059 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 10:44:29 +00:00
Charles-Edouard Brétéché
cdfac95cdb
fix: account for policy/rule deletion in aggregated reports ( #5048 )
...
* fix: account for policy/rule deletion in aggregated reports
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* reduce delay
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 08:16:28 +00:00
Charles-Edouard Brétéché
a15853910b
feat: make shutdown more graceful ( #5031 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-18 10:55:33 +00:00
Charles-Edouard Brétéché
583a27da3d
fix: lower default qps/burst ( #5034 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-18 10:18:16 +00:00
Charles-Edouard Brétéché
16aca2816f
fix: don't report ready until certs are valid ( #4934 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 04:23:42 +00:00
Charles-Edouard Brétéché
090b68e55d
feat: make cert renewer private and add server name support ( #4904 )
...
* fix: remove unnecessary dependencies from tls package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: make cert renewer private and add server name support
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nits
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-13 09:46:05 +00:00
Charles-Edouard Brétéché
8f7db3d4be
fix: use constants defined in openapi controller ( #4919 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-13 06:29:38 +00:00
Charles-Edouard Brétéché
b3021f5a57
refactor: openapi controller part 2 ( #4910 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-12 22:24:16 +05:30
Charles-Edouard Brétéché
de67a507cd
refactor: openapi controller part 1 ( #4901 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-12 11:38:48 +00:00
Charles-Edouard Brétéché
d25dccbd9c
fix: remove unnecessary dependencies from tls package ( #4903 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-12 09:36:26 +00:00
Charles-Edouard Brétéché
4aed9359cb
refactor: manage webhooks with webhook controller ( #4846 )
...
* refactor: add config support to webhook controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: add client config to webhook controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* migrate verify webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* v1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: move policy webhooks management in webhook controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* policy validating webhook config
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* watch policies
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: migrate resource webhook management in webhook controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* mutating webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* auto update
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* auto update and wildcard policies
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* policy readiness
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: can't use v1 admission
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* reduce reconcile
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* watchdog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* health check
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* runtime utils
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* runtime utils
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* watchdog check
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* remove delete from mutating webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-12 06:52:42 +00:00
XDRAGON2002
f6cb33de95
Fix result colour ( #4885 )
...
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
2022-10-11 20:36:31 +00:00
XDRAGON2002
df12c80b95
fix test output numbering ( #4853 )
...
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-11 12:30:11 +00:00
Charles-Edouard Brétéché
83b7f919aa
refactor: make cert manager a real controller ( #4792 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-07 19:51:37 +05:30
Charles-Edouard Brétéché
7bfcf7d7e2
refactor: add config support to webhook controller ( #4838 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-07 11:32:38 +00:00
Charles-Edouard Brétéché
ebe86473fc
feat: use a dedicated policy metrics controller ( #4818 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-07 10:53:54 +00:00
Charles-Edouard Brétéché
7849fbbc8a
refactor: leader controllers management ( #4832 )
...
* refactor: leader controllers management
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rename
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix start
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix deps
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* remove dead code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-07 07:38:38 +00:00
Charles-Edouard Brétéché
1509fa6251
refactor: non leader controllers management ( #4831 )
2022-10-06 18:38:35 +08:00
Charles-Edouard Brétéché
74172f2079
refactor: make tls cert func not depending on cert controller ( #4820 )
...
* refactor: make tls cert func not depending on cert controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fmt
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-06 08:43:43 +00:00
Charles-Edouard Brétéché
13ce3f55ed
fix: use new client in tls package ( #4746 )
...
* fix: use new client in tls package
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix import
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-06 08:11:59 +00:00
Charles-Edouard Brétéché
1c337bdf44
fix: debug mode ( #4785 )
...
* fix: debug mode
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-06 15:41:05 +08:00
Charles-Edouard Brétéché
1db08f82dd
refactor: split main into sub funcs ( #4821 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-05 17:39:04 +00:00
Charles-Edouard Brétéché
90a62e76ce
fix: controllers start in loop ( #4815 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-05 13:40:54 +00:00
Charles-Edouard Brétéché
144afb6f0f
refactor: split main into sub func ( #4810 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-05 10:58:35 +00:00
Charles-Edouard Brétéché
3941754a92
feat: add context support to leader election ( #4811 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-05 10:19:50 +00:00
Charles-Edouard Brétéché
433c5bfd77
feat: add context funcs to logging package ( #4812 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-05 17:37:52 +08:00
Charles-Edouard Brétéché
4cb171c980
refactor: split main func for metrics ( #4796 )
...
* refactor: split main func for metrics
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* clients
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* todo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* metrics shutdown
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-04 17:05:21 +08:00
Charles-Edouard Brétéché
f079bfb25f
fix: remove error prone debug field ( #4794 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-04 13:21:03 +05:30
Charles-Edouard Brétéché
29696c106a
refactor: split main into funcs ( #4795 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 22:04:56 +05:30
Addil Afzal
5f3411e588
Add security context and resource block to test ( #4712 )
...
* Add security context and resource block to test
Signed-off-by: aaz10 <6935594+AddilAfzal@users.noreply.github.com>
Signed-off-by: AddilAfzal <>
* Add comment to test security context
Signed-off-by: aaz10 <6935594+AddilAfzal@users.noreply.github.com>
Signed-off-by: AddilAfzal <>
* Add security context and resource block to other test container
Signed-off-by: aaz10 <6935594+AddilAfzal@users.noreply.github.com>
Signed-off-by: AddilAfzal <>
* fix: shutdown controllers workers gracefully (#4681 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Signed-off-by: AddilAfzal <>
* fix: split webhook handlers per failure policy (#4650 )
* fix: split webhook handlers per failure policy
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix handlers
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* rolling update
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* better error message
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Signed-off-by: AddilAfzal <>
* refactor: use pod name as leader id (#4680 )
* refactor: use pod name as leader id
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix manifests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* leader client
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: AddilAfzal <>
* fix: missing client wrapper (#4703 )
* fix: missing client wrapper
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* v1beta1
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* v1alpha2
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* policy report
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: AddilAfzal <>
* chore: refactor manifests related makefile targets (#4706 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: AddilAfzal <>
* fix: change key used in test (#4718 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: AddilAfzal <>
* Add changelog entry
Signed-off-by: AddilAfzal <6935594+AddilAfzal@users.noreply.github.com>
* Set user and group on test pod
Signed-off-by: AddilAfzal <6935594+AddilAfzal@users.noreply.github.com>
* fix docs
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* Move securityContext back to container level
Signed-off-by: AddilAfzal <6935594+AddilAfzal@users.noreply.github.com>
Signed-off-by: aaz10 <6935594+AddilAfzal@users.noreply.github.com>
Signed-off-by: AddilAfzal <>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: AddilAfzal <6935594+AddilAfzal@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: AddilAfzal <>
2022-10-03 14:16:14 +00:00
Charles-Edouard Brétéché
278dbba316
fix: new cert manager controller never returns error ( #4789 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 13:48:34 +00:00
Charles-Edouard Brétéché
3971376814
refactor: introduce webhook controller ( #4749 )
...
* refactor: introduce webhook controller
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix linter issues
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix imports
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* merge main
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* merge main
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 11:23:02 +00:00
Charles-Edouard Brétéché
209bab2059
refactor: more context less chans ( #4764 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 09:19:01 +00:00
Charles-Edouard Brétéché
25cf8d6c1e
fix: add workers to the controller interface ( #4776 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 07:55:59 +00:00
yinka
688b4fb8e3
add package logger in files ( #4766 )
...
* add package logger in files
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add package logger to initContainer and other files
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* helm docs
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* helm default values
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* release notes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 19:45:03 +00:00
Charles-Edouard Brétéché
6e64d4fb1a
fix: parse flags error handling ( #4775 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 21:04:14 +05:30
Charles-Edouard Brétéché
ac8f4ba59c
refactor: make server owner of the cleanup chan ( #4765 )
...
* refactor: make server owner of the cleanup chan
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* gofumpt
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-30 16:13:29 +02:00
Charles-Edouard Brétéché
9aca37fe9f
refactor: use context in openapi controller ( #4760 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-09-30 11:56:47 +00:00
Charles-Edouard Brétéché
287eb84d07
refactor: use context in controllers instead of chan ( #4761 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-30 16:54:47 +05:30
Charles-Edouard Brétéché
c42851a37a
refactor: use context in dynamic client instead of chan ( #4756 )
...
* refactor: use context in dynamic client instead of chan
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-30 10:12:21 +02:00
Eng Zer Jun
f40a3bc8f5
refactor: move from io/ioutil to io and os packages ( #4752 )
...
The io/ioutil package has been deprecated as of Go 1.16 [1]. This commit
replaces the existing io/ioutil functions with their new definitions in
io and os packages.
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2022-09-30 12:55:19 +05:30
Charles-Edouard Brétéché
8784f95cc7
refactor: split main in a couple of funcs and use local loggers ( #4754 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-30 08:13:13 +02:00
yinka
528bcbad6b
add and use package level logger ( #4750 )
...
* add and use package level logger
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* small fixes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix comments
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add Info and Error functions
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* small fixes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* move function calls
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* replace init function
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-29 19:43:20 +00:00
Charles-Edouard Brétéché
8e24dbece0
fix: reports not generated ( #4743 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-29 08:39:14 +00:00
yinka
bb2e193d44
feat: allow users enable JSON logging with a --loggingFormat=json flag ( #4661 )
...
* feat: add feature flag to disable background scan (#4638 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* allow users configure JSON logging with a --logging-format=json flag
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* Clean up changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* added kubeconfig and context flag to kyverno apply (#4524 )
Signed-off-by: Sandesh More <sandesh.more@infracloud.io>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* chore: publish sbom result to a different repositry from an image (#4665 )
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* Fix issue for wildcard versions (#4670 )
* Fix wildcard issue
Co-Authored-By: vyankd <51167361+vyankd@users.noreply.github.com>
* Delete res.yaml
Co-Authored-By: vyankd <51167361+vyankd@users.noreply.github.com>
Co-authored-by: vyankd <51167361+vyankd@users.noreply.github.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* chore: bump minimum go version (#4677 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: namespaced policy not validated in engine (#4653 )
* fix: namespaced policy not validated in engine
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix test
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: handle auth permission for cloneList validation (#4684 )
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: bump net standard lib (#4685 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* small fixes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add json logger
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix import
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix go mod
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix go mod
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* chore: simplify go mod (#4692 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: jmespath random error handling (#4697 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* refactor: replace signal package by signal.NotifyContext (#4691 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: namespaced policy targets namespace validation and scoping them to the policy's namespace (#4671 )
Signed-off-by: praddy26 <pradeep.vaishnav4@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: shutdown controllers workers gracefully (#4681 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: split webhook handlers per failure policy (#4650 )
* fix: split webhook handlers per failure policy
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix handlers
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* rolling update
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* better error message
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* refactor: use pod name as leader id (#4680 )
* refactor: use pod name as leader id
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix manifests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* leader client
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix: missing client wrapper (#4703 )
* fix: missing client wrapper
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* v1beta1
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* v1alpha2
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* policy report
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* chore: refactor manifests related makefile targets (#4706 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* deps
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: Sandesh More <34198712+sandeshlmore@users.noreply.github.com>
Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: vyankd <51167361+vyankd@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
2022-09-29 07:49:29 +00:00
Charles-Edouard Brétéché
82a9eeb16c
fix: use a single leader election ( #4722 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-29 07:23:21 +00:00
Charles-Edouard Brétéché
e0ab72bb9a
feat: reports v2 implementation ( #4608 )
...
This PR refactors the reports generation code.
It removes RCR and CRCR crds and replaces them with AdmissionReport, ClusterAdmissionReport, BackgroundScanReport and ClusterBackgroundScanReport crds.
The new reports system is based on 4 controllers:
Admission reports controller is responsible for cleaning up admission reports and attaching admission reports to their corresponding resource in case of a creation
Background scan reports controller is responsible for creating background scan reports when a resource and/or policy changes
Aggregation controller takes care of aggregation per resource reports into higher level reports (per namespace)
Resources controller is responsible for watching reports that need background scan reports
I added two new flags to disable admission reports and/or background scan reports, the whole reporting system can be disabled if something goes wrong.
I also added a flag to split reports in chunks to avoid creating too large resources.
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-09-28 17:15:16 +05:30
Shivansh Yadav
2a5407f7f0
fix: remove deprecation notice ( #4635 )
...
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-09-27 18:18:16 +00:00
Charles-Edouard Brétéché
481a09823f
refactor: use pod name as leader id ( #4680 )
...
* refactor: use pod name as leader id
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix manifests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* leader client
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-26 16:25:27 +00:00
Charles-Edouard Brétéché
79bff1c19c
refactor: replace signal package by signal.NotifyContext ( #4691 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-09-26 14:24:32 +00:00
Sandesh More
01b1ece704
added kubeconfig and context flag to kyverno apply ( #4524 )
...
Signed-off-by: Sandesh More <sandesh.more@infracloud.io>
2022-09-20 19:05:18 +05:30
Charles-Edouard Brétéché
328fdc8b3d
feat: add feature flag to disable background scan ( #4638 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-09-19 12:00:36 +00:00
Charles-Edouard Brétéché
3e5af370a5
refactor: move validation audit out of webhooks package ( #4562 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-09 09:27:07 +00:00
Charles-Edouard Brétéché
a95d61b9d7
refactor: client wrappers ( #4519 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-07 12:01:43 +08:00
Charles-Edouard Brétéché
317a3ae0bf
feat: add kyverno managed resources protection ( #4414 )
...
* feat: add kyverno managed resources protection
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add toggle
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-06 15:43:04 +00:00
Charles-Edouard Brétéché
1947dafed6
fix: load policy and add tests ( #4515 )
...
* fix: load policy and add tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix callers
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-09-06 15:16:44 +00:00
Mritunjay Kumar Sharma
c07f6bd8a8
refactor: to remove generate cleanup controller ( #4041 )
...
- refactored cleanup controller
- handle delete policy
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2022-09-01 09:39:06 +00:00
Charles-Edouard Brétéché
f243a7dd84
refactor: make toggles easier to define and use ( #4456 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-31 06:41:14 +00:00
shuting
3bf3dcc1af
Add the metric "kyverno_client_queries_total" ( #4359 )
...
* Add metric "kyverno_kube_client_queries_total"
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* publish metric for missing queries
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Refactor the way Kyverno registers QPS metric
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Move clientsets to a dedicated folder
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Wrap Kyverno client and policyreport client to register client query metric
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* address linter comments
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* address linter comments
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Switch to use wrapper clients
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-08-31 11:33:47 +05:30
Ayushman
1394b91898
Added kubeconfig flag support ( #4308 )
...
* Added kubeconfig flag support
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
* removed swp file
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
* changed
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-29 06:21:42 +00:00
Charles-Edouard Brétéché
9e49b25484
refactor: makefile build targets ( #4418 )
...
* refactor: makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: makefile build targets
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:23:04 +08:00
Jason Hall
6055713dfc
Use ko to build images ( #4366 )
...
This updates Makefile targets to build images using `docker buildx
build` to use `ko build` instead.
End-to-end tests are accomplished by building and loading the image
directly into the KinD cluster via ko.
Also:
- use GitHub Actions token to push to ghcr.io (setup-ko sets this up for us)
- allow forks to push to their forked repo's packages (useful for testing)
Signed-off-by: Jason Hall <jason@chainguard.dev>
Signed-off-by: Jason Hall <jason@chainguard.dev>
2022-08-25 20:32:40 +02:00
Prateek Pandey
6db747224a
bump golang 1.18.5 version digest in Dockerfile ( #4413 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-08-25 22:07:18 +08:00
Charles-Edouard Brétéché
144985ee5a
chore: fix golangcilint timeout ( #4388 )
...
* chore: fix golangcilint timeout
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix commit sha
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add .gitattributes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-24 21:08:24 +08:00
Ayushman
a79fb4d963
Added remove-color flag for CLI-test ( #4345 )
...
* added remove-color flag
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
* applied to print table
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
Signed-off-by: Ayushman Mishra <ayushvidushi01@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-08-19 19:11:19 +05:30
Anutosh Bhat
d92e16526f
Added appropriate logging levels to log.Info() calls wherever necessary ( #4341 )
...
* Added appropriate logging levels to log.Info() calls wherever necessary
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
* Changed logging levels to 2
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-18 13:24:59 +00:00
Anurag
0e25017ff8
update apply help message ( #4344 )
...
Signed-off-by: Anurag <81210977+kranurag7@users.noreply.github.com>
Signed-off-by: Anurag <81210977+kranurag7@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-18 06:52:30 +00:00
Dylan Shepard
d10f9d1b5a
trivial typo update ( #4291 )
...
Signed-off-by: Dylan Shepard <dylan@shepard.dev>
2022-08-03 04:28:06 +00:00
Jim Bugwadia
943c3a1929
use failurePolicy to block or allow requests, on policy errors ( #4183 )
...
* use failurePolicy to block or allow requests, on policy errors
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add warnings
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* codegen
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add unit tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* handle network errors
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix title conversion
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix path in generated file
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix fake metrics
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add check for klog flag initialization
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check for flag reinitialization
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* check for flag reinitialization
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix spelling
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix flag init
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-08-02 20:24:02 +05:30
Guilhem Lettron
b03e461f25
feat: auto optimize GOMAXPROCS ( #4277 )
...
Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>
2022-07-29 23:59:47 +08:00
James Callahan
975a2a21fa
fix: use an absolute path in docker entrypoint ( #4263 )
...
With a relative path, containers started with a different working
directory will fail to find the entrypoint
Fixes : #4252
Signed-off-by: James Callahan <jamescallahan@bitgo.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-07-26 07:16:01 +00:00
Tathagata Paul
9b41e2e017
Add shutdown methods for exporters and controllers ( #4214 )
...
* add shutdown methods for exporters and controllers
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
* remove shutdown exporter and add timeout in main.go
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
* move ctx timeout to main
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
* change variable order
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
2022-07-25 09:25:26 +00:00
Guilhem Lettron
96999f8995
fix: use only 1 kubernetes client ( #4256 )
...
Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>
Co-authored-by: shuting <shuting@nirmata.com>
2022-07-25 13:49:51 +08:00
Anutosh Bhat
be6cc1381f
Implementing flag to show all failing tests only through the test command ( #4227 )
...
* fix kyverno cli policy-report typo (#4224 )
- fix kyverno cli policy report typo
- add shorthand for policy-report flag
Signed-off-by: Vyankatesh vyankateshkd@gmail.com
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
* Added flag for getting fail only tests
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
* Improve output message
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
* Updated flag name as per CamelCase
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-07-22 20:02:12 +05:30
Prateek Pandey
3f1997c0e8
fix split policyreport name with background scan ( #4237 )
...
- fix split policyreport name with background scan
- fix the label selector initialising
- refactor the generatePolicyName func
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-07-21 14:31:42 +05:30
Batuhan Apaydın
9af9717f16
chore: use new distroless base image provided by distroless org ( #4219 )
...
* chore: use new distroless base image provided by distroless org
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
* chore: remove unnecessary user instruction
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-07-21 06:37:56 +00:00
shuting
23a1df0d7b
Cherry-pick #4233 ( #4236 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-07-20 22:22:15 +05:30
Anutosh Bhat
81c699b4a5
Removed confusing output message for the apply and replaced no of policies by no of policy rules count in the output message ( #4229 )
...
Signed-off-by: anutosh491 <andersonbhat491@gmail.com>
2022-07-19 16:28:09 +05:30
Vyankatesh Kudtarkar
612b7fdff2
fix kyverno cli policy-report typo ( #4224 )
...
- fix kyverno cli policy report typo
- add shorthand for policy-report flag
Signed-off-by: Vyankatesh vyankateshkd@gmail.com
2022-07-18 07:12:19 +00:00
Meha Bhalodiya
06460c0e68
feat: improve flag message for disableMetricsExport ( #4194 )
...
* feat: improve flag message for disableMetricsExport
Signed-off-by: Meha Bhalodiya <mehabhalodiya@gmail.com>
* update description
Signed-off-by: Meha Bhalodiya <mehabhalodiya@gmail.com>
2022-07-15 01:07:45 +08:00
Vyankatesh Kudtarkar
e71493e5cc
Make method public ( #4207 )
...
* npmctl chnages
* revert commit
* remove comment
2022-07-13 13:37:51 -07:00
Tathagata Paul
3e2894b6fa
feat: Opentelemetry support for metrics and traces ( #3910 )
...
* integrating opentelemetry
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
* fix multiple imports
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
* fixed cli help statement
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
* added init file for metrics
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-07-11 17:49:47 +00:00
vivek kumar sahu
a37901425f
return helpful error message on invalid patched resources. ( #4129 )
...
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-07-06 13:24:28 +05:30
Prateek Pandey
9226873e68
feat: split policy report per policy bases ( #4147 )
...
* feat: split policy report per policy bases
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* add policy name as a handler key
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* update merge change request logic
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* handle the delete resource update on policy report
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* add splitPolicyReport feature gate
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* delete old reports if splitPolicyReport feature enable
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* use trim policyname as label and create name
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* fix change request result
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-06-28 15:27:57 +00:00
shuting
77fb10a430
Clean up RCRs if the count exceeds the threshold ( #4148 )
...
* Clean up RCRs if the count exceeds the limit
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Sets reports to inactive on resourceExhausted error
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Add a container flag changeRequestLimit
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Skip generating RCRs if resourceExhausted error occurs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* set default RCR limit to 1000
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Update log messages and CHANGELOG.md
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Address review comments
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* Extract mapper to a separate file
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-28 06:18:57 +00:00
shuting
cd2d89bf55
Wait for informers' cache to be synced before starting controllers ( #4155 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-28 04:55:52 +00:00
shuting
1c329ea65f
Use kyverno namespace informer to list pods while processing URs ( #4156 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-06-27 12:44:42 +08:00
Tathagata Paul
16f8620993
added resource lists for test cli ( #4082 )
...
Signed-off-by: Tathagata Paul <tathagatapaul7@gmail.com>
2022-06-20 06:38:13 +00:00
vivek kumar sahu
051b0751e0
set test.namespace value implict as resource namespace until and unless explict value is added ( #4100 )
...
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
2022-06-15 17:59:13 +05:30
Jim Bugwadia
c3be689851
remove TUF initialization from main ( #4098 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-06-10 00:52:12 -07:00
vivek kumar sahu
7e79403324
Updated jp command flags and also added URL for help. ( #4084 )
...
* Updated jp command flags and also added URL for help.
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* Update cmd/cli/kubectl-kyverno/jp/jp_command.go
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-06-07 06:19:44 +00:00
Prateek Nandle
70175ae5e8
Print for failed test cases ( #4048 )
...
Signed-off-by: Prateeknandle <prateeknandle@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-02 17:31:46 +00:00
Batuhan Apaydın
e756ae522a
chore(dockerfile): use buildx features for cross-compilation ( #4023 )
...
* chore(dockerfile): use buildx features for cross-compilation
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
* feat(kyverno): main container image
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-01 20:35:02 +08:00
Charles-Edouard Brétéché
dae3dad027
refactor: used typed admission request in ur ( #4022 )
...
* refactor: add policy event listener in ur controller (#4012 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
(cherry picked from commit cd1fa030ee
2022-05-29 07:27:14 +00:00
Shubham Nazare
165c5d9fc3
feat: Extend CLI to cover generate policies ( #3456 )
...
- Change in namespace for test-generate example
- Change cloneResource to cloneSourceResource
- Add support for namespaced Policy and fix log messages
- Add test-generate in Makefile and an example of namespaced Policy
- Fix namespaced policy issue and add comments
- Refactor according to new generate controller
- Add json tag to GeneratedResource field of RuleResponse struct
Signed-off-by: Shubham Nazare <shubham4443@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-25 14:26:22 +00:00
vivek kumar sahu
fbbe57f5e1
Request operation value by default to CREATE ( #3894 )
...
* set by default request.operation to CREATE
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
* Added test cases
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-25 13:59:53 +00:00
Anton Popovichenko
afc9a56d33
Feature: Add support for allowing insecure registries. ( #3983 )
...
Now you can work with self signed registries by updating your deployment with adding `--allowInsecureRegistry` to the `args` field.
Signed-off-by: Anton Popovichenko <anton.popovichenko@mendix.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-25 11:03:36 +02:00
Charles-Edouard Brétéché
73fdbd3e76
refactor: ur cleaner controller ( #3974 )
...
* fix: move ur controller filtering in reconciler
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: mark ur retry on conflict
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: test data
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: add filter back in update ur handler
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: added some logs about attempts and increased backoff
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: reconciliation logic
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: Test_Generate_Synchronize_Flag
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: small nits
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: interface and logger
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: remove useless Control and ControlInterface
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: use GetObjectWithTombstone helper
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: reoder methods
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: is not found check
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: move check in reconcile code
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: stop mutating cached resource in ur controller (#4003 )
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
(cherry picked from commit dac733755b
2022-05-24 13:30:00 +00:00
Charles-Edouard Brétéché
88f769cb39
fix: init container gr copy ( #3995 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-23 17:57:19 +02:00
Charles-Edouard Brétéché
caa769fb1d
refactor: clean updaterequest generator ( #3949 )
...
* refactor: clean updaterequest generator
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: clean updaterequest generator
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-05-23 22:39:12 +08:00
Charles-Edouard Brétéché
c1df363a0e
fix: release ur when handler pod is gone ( #3973 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-20 17:43:00 +08:00
Charles-Edouard Brétéché
1936d86623
fix: move ur controller filtering in reconciler ( #3964 )
...
* fix: move ur controller filtering in reconciler
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: mark ur retry on conflict
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: test data
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: add filter back in update ur handler
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: added some logs about attempts and increased backoff
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: reconciliation logic
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: Test_Generate_Synchronize_Flag
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: small nits
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-20 00:06:56 +08:00
Charles-Edouard Brétéché
c988d519b4
fix: mark ur retry on conflict ( #3961 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-18 06:07:13 +00:00
Charles-Edouard Brétéché
41a3f6c388
chore: make kyverno informers and listers import aliases consistent ( #3958 )
...
* chore: make kyverno api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make apimachinery api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make dclient api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make clients import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make kube informers and listers import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make kyverno informers and listers import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-05-18 04:02:31 +00:00
Charles-Edouard Brétéché
5243763674
chore: make dclient import aliases consistent ( #3951 )
...
* chore: make kyverno api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make apimachinery api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make dclient api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-17 14:40:51 +00:00
Charles-Edouard Brétéché
666bcb3c15
chore: make k8s api import aliases consistent ( #3950 )
...
* chore: make kyverno api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore: make apimachinery api import aliases consistent
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-17 22:14:31 +08:00
Charles-Edouard Brétéché
5aaf2d8770
chore: make kyverno api import aliases consistent ( #3939 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-17 13:12:43 +02:00
Charles-Edouard Brétéché
0099ef54ad
chore: enable gofmt and gofumpt linters ( #3931 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-17 06:19:03 +00:00
Charles-Edouard Brétéché
c12f94d6d4
chore: enble gci linter ( #3930 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-05-17 07:56:48 +02:00
Charles-Edouard Brétéché
53adf904d6
refactor: separate policy cache and controller ( #3925 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-16 18:36:19 +02:00
Charles-Edouard Brétéché
c112aaefa1
refactor: separate resource mutation/validation handlers from server ( #3908 )
...
* refactor: webhooks server logger
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: separate policy mutation/validation handlers from server
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* separate resource mutation from server code
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-16 22:36:21 +08:00
Charles-Edouard Brétéché
70954b9995
refactor: policy cache ( #3919 )
...
* refactor: simplify policy cache
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: policy cache
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* remove update and add policies map
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: review comments
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-16 07:56:16 +00:00
Dhaval Shah
4d0d719735
fix: gosec G304 file inclusion error ( #3916 )
...
Part of KubeCon EU 2022 Bugbash
Signed-off-by: Dhaval Shah <30974879+dhavalgshah@users.noreply.github.com>
2022-05-14 16:40:04 +00:00
Charles-Edouard Brétéché
87ac548563
refactor: separate policy mutation/validation handlers from server ( #3905 )
...
* refactor: webhooks server logger
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: separate policy mutation/validation handlers from server
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-13 07:33:20 +02:00
Charles-Edouard Brétéché
526876452e
fix: docker build ( #3907 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-12 22:24:25 +01:00
Charles-Edouard Brétéché
97cf1b3e95
feat: gracefull certificates rotation support ( #3890 )
...
* refactor: remove deployment hash on certs secrets
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: add label on kyverno webhooks
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: implement update ca bundle
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* test: set very low validity and expiration intervals
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: writing secret
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add renew ca
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* decouple ca and tls validity duration
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactored code, everything is in place to finalize implementation
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* use real validity periods
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-12 14:07:25 +00:00
Charles-Edouard Brétéché
c15ad0c520
chore: remove ca-certificates from our repository ( #3859 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-05-12 11:41:45 +00:00
