1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

201 commits

Author SHA1 Message Date
Batuhan Apaydın
29a26e54f7
chore: Push and sign install manifests to GHCR (#4895)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Stefan Prodan <@stefanprodan>
Co-authored-by: Charles-Edouard Brétéché <@eddycharly>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-10-14 12:48:32 +00:00
Chip Zoller
b7247b5935
Update issue templates and scan for vulns action (#4952)
* update version drop-down

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add workflow to detect and report on image vulnerabilities

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* pin deps

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump JasonEtco/create-an-issue

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump versions in drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix background mode scan with request.operation

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Revert "bump versions in drop-downs"

This reverts commit 5fcea048dd.

* Revert "bump JasonEtco/create-an-issue"

This reverts commit f0d44c7aca.

* update version drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump action version

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2022-10-13 22:11:58 +00:00
Batuhan Apaydın
38a15a948f
chore: add COSIGN_REPOSITORY env to ko-publish-dev step (#4922) 2022-10-13 10:55:39 +00:00
Batuhan Apaydın
f45584bfd6
chore: signing helm releases (#4801)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-12 20:14:44 +00:00
Chip Zoller
5346bce5ca
Add workflow to detect and report on image vulns (#4850)
* update version drop-down

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add workflow to detect and report on image vulnerabilities

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* pin deps

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-10 15:10:16 +02:00
Charles-Edouard Brétéché
7e0884ca36
fix: publish yaml manifests in release instead of repo (#4738)
* fix: publish yaml manifests in release instead of repo

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* ignore

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* pin actions

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* messages

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix helm gen crds

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* chart app version

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* makefile

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 15:12:43 +00:00
Batuhan Apaydın
e258004e76
chore: change charts registry url (#4768)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 20:20:33 +00:00
Charles-Edouard Brétéché
c28c0f2f42
docs: add policy cache controller docs (#4714)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-09-28 13:08:26 +00:00
Charles-Edouard Brétéché
332a5aa01f
chore: enable overriding images repo (#4694)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-27 17:47:59 +00:00
Charles-Edouard Brétéché
e8839a3ff7
chore: bump minimum go version (#4677)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-25 10:11:28 +00:00
Batuhan Apaydın
e35da69c92
chore: publish sbom result to a different repositry from an image (#4665)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-21 22:06:34 -05:00
Shubham Gupta
f00c12e954
Integrate Sonarcloud and Nancy github action (#3491)
* Integrate Sonarcloud and Nancy github action

Integrate Sonarcloud for static code analysis and Nancy for analysing
dependencies

Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>

* fix: pin actions to commit sha

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix auth for pr

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-09-14 07:25:14 +00:00
shuting
c3e91fb357
update helm releases path (#4596)
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-09-12 07:36:46 +00:00
Batuhan Apaydın
ff7ed78b09
chore: add kocache (#4482)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-09 09:00:25 +00:00
shuting
9297efa55f
add new patterns for releases (#4552)
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-09-08 17:34:09 +00:00
Vyankatesh Kudtarkar
aa6abd99f2
Support V2beta1 Version (#4514)
introduce new version V2beta1 which remove deprecated CRD 
types from version v1.

Signed-off-by: Vyankatesh <vyankateshkd@gmail.com>
2022-09-08 11:19:16 +00:00
Charles-Edouard Brétéché
92e223b7ff
fix: api reference docs (#4490)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-07 14:25:57 +08:00
Charles-Edouard Brétéché
3beb4fee28
chore: test for k8s 1.25 (#4503)
* chore: test for k8s 1.25

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* remove 1.21 tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-09-06 16:48:53 +02:00
Charles-Edouard Brétéché
870462cc6d
chore: add unit tests for pkg/utils/os (#4509)
* chore: add unit tests for pkg/utils/os

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* review

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-06 07:19:29 +00:00
Charles-Edouard Brétéché
5e5627e81f
refactor: verify codegen targets in makefile (#4494) 2022-09-02 09:49:35 +00:00
Charles-Edouard Brétéché
caafbb74b9
fix: fetch history in pre-checks job (#4491)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-02 16:55:41 +08:00
Batuhan Apaydın
cd0d87542a
chore: publish helm charts to ghcr.io (#4479)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-01 19:15:33 +00:00
Charles-Edouard Brétéché
b65d9fc5c6
chore: bump cache action and improve paths (#4485)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 17:41:48 +00:00
Charles-Edouard Brétéché
89ccf7998f
chore: relax auto update PRs conditions (#4486)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 17:14:57 +00:00
Charles-Edouard Brétéché
b8e2d69693
fix: release workflow (#4483)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 16:19:19 +00:00
Charles-Edouard Brétéché
0c40cd8814
fix: auto update pr workflow (#4478) 2022-09-01 10:54:23 +00:00
Charles-Edouard Brétéché
8ddc72d792
refactor: clearly separate makefile docker targets for build and publish (#4454)
* refactor: clearly separate makefile ko targets for build and publish

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: clearly separate makefile docker targets for build and publish

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-31 12:22:46 +08:00
Charles-Edouard Brétéché
fc79ca96a2
refactor: clearly separate makefile ko targets for build and publish (#4450)
* refactor: clearly separate makefile ko targets for build and publish

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-30 17:30:28 +02:00
Charles-Edouard Brétéché
2b495c7ef3
chore: fix workflows related to ko recent changes (#4438)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-08-30 12:59:08 +08:00
Charles-Edouard Brétéché
c35e73e39c
fix: ko login (#4425)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 16:56:27 +00:00
Charles-Edouard Brétéché
e0da0c996c
fix: ko login (#4424)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:54:48 +00:00
Charles-Edouard Brétéché
ce4377a54e
fix: ko login (#4423)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 23:01:50 +08:00
Charles-Edouard Brétéché
5915f37f4d
fix: ko login (#4422)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-26 14:25:30 +00:00
Charles-Edouard Brétéché
9e49b25484
refactor: makefile build targets (#4418)
* refactor: makefile

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: makefile build targets

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:23:04 +08:00
Jason Hall
6055713dfc
Use ko to build images (#4366)
This updates Makefile targets to build images using `docker buildx
build` to use `ko build` instead.

End-to-end tests are accomplished by building and loading the image
directly into the KinD cluster via ko.

Also:
- use GitHub Actions token to push to ghcr.io (setup-ko sets this up for us)
- allow forks to push to their forked repo's packages (useful for testing)

Signed-off-by: Jason Hall <jason@chainguard.dev>

Signed-off-by: Jason Hall <jason@chainguard.dev>
2022-08-25 20:32:40 +02:00
Charles-Edouard Brétéché
cf0ee93de8
feat: enable autogen internals by default (#4381)
* feat: enable autogen internals by default

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* change e2e tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* change e2e tests matrix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-25 23:01:43 +08:00
Prateek Pandey
34fe6c9058
bump cosign deps version to 1.11.1 (#4408)
* bump cosign deps version to 1.11.1

to accommodate latest attestation verification fixes

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* bump github action go version to 1.18

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-08-25 08:24:49 +00:00
shuting
e2b77641cb
bump cosign version to 1.11.0 (#4398)
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-08-24 15:24:44 +00:00
Charles-Edouard Brétéché
91373e1329
fix: goimports check not working in ci job (#4387)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-08-24 13:38:49 +00:00
Charles-Edouard Brétéché
144985ee5a
chore: fix golangcilint timeout (#4388)
* chore: fix golangcilint timeout

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix commit sha

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* add .gitattributes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-24 21:08:24 +08:00
Charles-Edouard Brétéché
3d9417a58a
chore: add workflow to ensure github actions are pinned to a commit SHA (#4390)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-23 22:02:13 +02:00
Charles-Edouard Brétéché
8fc1754df7
chore: fix fossa ci job (#4382)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-23 13:30:32 +00:00
Prateek Pandey
0d44003386
refactor: bump KIND version to use v1.24.0 k8s release (#3877)
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Co-authored-by: shuting <shuting@nirmata.com>
2022-06-01 14:39:55 +00:00
Charles-Edouard Brétéché
8175fc15c9
chore: add previous pod logs in case of job failure (#3978)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-20 20:34:55 +05:30
shuting
bccce5d9e3
Remove permissions in helm-release workflow (#3901)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-05-12 08:12:17 +00:00
Charles-Edouard Brétéché
4107140a8d
chore: enable golangci-lint in ci (#3852)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-10 10:22:34 +00:00
Sambhav Kothari
266bfa1077
Fix PR update flow and allow updates from release branches (#3780)
Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
2022-05-03 16:03:43 +08:00
Sambhav Kothari
0a9bcd5407
Auto-update PRs which are enabled for auto-merging (#3766) 2022-05-02 18:04:43 +00:00
treydock
0ae671ca7a
Cherry-pick release-1.6 Helm changes (#3689)
* Support releasing kyverno and kyverno-policies chart separately (#3672)

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add DELETE precondition back (#3657)

* Add DELETE precondition back

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add another example and test for 'any'

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: shuting <shuting@nirmata.com>
2022-04-27 03:52:45 +00:00
Charles-Edouard Brétéché
2e1534bd9d
fix: api reference docs link (#3664)
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
2022-04-25 21:07:42 +08:00