628 commits

Author	SHA1	Message	Date
Shuting Zhao	8a7250ffef	refactor policy validation, moved to pkg/api/kyverno	2019-09-27 16:31:27 -07:00
Shuting Zhao	76ad9406b1	only allow one type of rule defined in a single rule	2019-09-26 18:02:24 -07:00
shivkumar dudhani	ae3059b858	unit test initial check	2019-09-26 11:00:30 -07:00
shivkumar dudhani	087efffd96	support existance on list type	2019-09-25 21:01:45 -07:00
shivkumar dudhani	974fff169a	support evaluation of nested values	2019-09-25 16:06:37 -07:00
shivkumar dudhani	c65f12b97b	initial commit	2019-09-25 15:12:33 -07:00
Shuting Zhao	5e0415911a	add best-practice: policy_validate_disallow_default_serviceaccount	2019-09-16 14:16:54 -07:00
shuting	3d02f81434	Merge pull request #351 from nirmata/348_feature_wildcardsNamespaces ... support wild cards for namespaces in rule resource description	2019-09-12 23:06:51 -07:00
shivkumar dudhani	44af35d6e4	support wild cards for namespaces in rule resource description	2019-09-12 17:11:55 -07:00
shivkumar dudhani	5dab189743	fix event resource name + add filtered kinds to policy controller & namespace + fix messages	2019-09-12 15:04:35 -07:00
Shuting Zhao	e6a5b1ceb8	add namespace_quota testrunner	2019-09-10 12:27:21 -07:00
Shuting Zhao	2e22c21164	add policy_validate_disallow_node_port.yaml	2019-09-10 11:57:33 -07:00
Shuting Zhao	6ecec2f5a7	add resource_quota testrunner	2019-09-09 23:55:14 -07:00
Shuting Zhao	3237f3d799	add policy_validate_not_readonly_rootfilesystem.yaml	2019-09-09 18:13:38 -07:00
Shuting Zhao	3eeba1a32b	add policy_validate_hostPID_hosIPC.yaml	2019-09-09 17:34:25 -07:00
Shuting Zhao	d0fd3e69ef	update testrunner, unit test for validate_host_network_port	2019-09-09 16:08:15 -07:00
Shuting Zhao	0fe5a065dd	add validate_hostpath testrunner	2019-09-09 15:06:54 -07:00
Shuting Zhao	b494dec7f3	add validate_namespace test runner	2019-09-09 14:33:55 -07:00
Shuting Zhao	d92026f94a	add disallow_priviledgedprivelegesecalation test runner	2019-09-09 10:56:19 -07:00
Shuting Zhao	ae8264deae	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies ... # Conflicts: # examples/best_practices/policy_validate_container_disallow_priviledgedprivelegesecalation.yaml # examples/best_practices/policy_validate_container_security_context.yaml # examples/best_practices/validate_container_security_context.yaml	2019-09-09 10:36:56 -07:00
Shuting Zhao	b667c47587	update testrunner for examples/best_practices/policy_validate_container_security_context.yaml	2019-09-06 18:54:19 -07:00
Shuting Zhao	bc087d7918	Merge branch 'master' of https://github.com/nirmata/kyverno into best_practice_policies ... # Conflicts: # examples/best_practices/validate_default_namespace.yaml	2019-09-06 17:04:44 -07:00
shivkumar dudhani	2669b0ae6b	set default ValidationFailureAction to 'audit'	2019-09-06 10:18:45 -07:00
shivkumar dudhani	ff60dc05fd	add policies	2019-09-06 10:03:24 -07:00
shivkumar dudhani	f56603e4d4	update message to show resource path of failure for validation + print custom message on failure + anyPattern to return on first success validation + update scenarios for test runner	2019-09-05 12:44:38 -07:00
shivkumar dudhani	cf32510067	remove old function refereces and update tests	2019-09-05 09:37:57 -07:00
Shuting Zhao	6912114363	Merge commit '595dd1f18523845720b53a4b5d818782d85cb616' into best_practice_policies	2019-09-04 15:36:28 -07:00
shivkumar dudhani	973abe6233	ignore creationg of event and PV if Name is not assgined.	2019-09-04 15:30:09 -07:00
shivkumar dudhani	90a7282b97	remove log	2019-09-04 14:09:42 -07:00
shivkumar dudhani	7a43bed8e4	remove commented code + fix log param	2019-09-04 14:06:06 -07:00
Shivkumar Dudhani	b1e5f0a8c7	Merge branch 'master' into refactor_webhookconfigGeneration	2019-09-04 13:50:46 -07:00
Shivkumar Dudhani	bf35d711e6	Merge pull request #330 from nirmata/bug_exclude ... remove exlude kind checks	2019-09-04 13:43:27 -07:00
shivkumar dudhani	c2e822c887	refactor webhook configuration	2019-09-04 13:43:12 -07:00
Shuting Zhao	b39ec75dbd	fix "failed to patch resource: json: cannot unmarshal array into Go value of type jsonpatch.Operation"	2019-09-04 11:58:57 -07:00
shivkumar dudhani	b66c1b7f0c	remove exlude kind checks	2019-09-04 10:40:49 -07:00
Shivkumar Dudhani	94bf186f30	Merge pull request #328 from nirmata/bug_exclude ... check the exclude conditions with AND	2019-09-04 10:02:57 -07:00
shivkumar dudhani	5a6814a588	fix return values	2019-09-04 09:56:44 -07:00
shivkumar dudhani	dee4eef44a	check the exclude conditions with AND	2019-09-03 19:31:42 -07:00
shivkumar dudhani	b152cdd004	rule to show violation count	2019-09-03 18:31:57 -07:00
shivkumar dudhani	9d81e61002	ignore stats if no rule is applied	2019-09-03 18:18:21 -07:00
shivkumar dudhani	cd6b1d0990	aggregate rule status	2019-09-03 17:43:36 -07:00
shivkumar dudhani	6228b8343e	refactor engine api	2019-09-03 15:48:13 -07:00
shuting	42f10af603	Merge pull request #325 from nirmata/281_rename_policy ... 281 rename policy	2019-09-03 15:21:52 -07:00
shivkumar dudhani	786cbf5522	fix test	2019-09-03 15:02:00 -07:00
shivkumar dudhani	fa53519e2a	change CRD Name to ClusterPolicy & ClusterPolicyViolations	2019-09-03 14:51:51 -07:00
Shuting Zhao	82273bf1cc	Merge commit 'd12841898645ff05baa2340686821cc98eaefdea' into 293_remove_overall_mutation ... # Conflicts: # pkg/policy/apply.go	2019-09-03 09:49:56 -07:00
shivkumar dudhani	0a132054e1	fixes + support generate policies	2019-08-30 14:06:47 -07:00
shivkumar dudhani	d43b4d93c2	rebase with master	2019-08-30 01:08:54 -07:00
shivkumar dudhani	a31f9c383d	scneario file test runner	2019-08-30 00:22:37 -07:00
Shivkumar Dudhani	f10b5fdfe8	Merge pull request #322 from nirmata/307_feature ... Validate anchor values of type object/[map]interface{}	2019-08-29 19:03:01 -07:00