Jim Bugwadia
50e5e7eedf
add wildcard support for label key and values
2020-12-01 22:48:56 -08:00
NoSkillGirl
5794889752
Merge branch 'main' into policyreport_cli
2020-11-18 14:43:30 +05:30
Shuting Zhao
e985ee4031
correct misspelled words
2020-11-17 12:01:01 -08:00
NoSkillGirl
acc34fbf0a
Merge commit
2020-11-10 10:49:29 +05:30
NoSkillGirl
ba5d3a0b7a
CLI handling - applying policy with annotations on pod
2020-11-10 10:05:07 +05:30
NoSkillGirl
009268f844
special handling - when applying policy with annotations on pod
2020-11-09 20:36:42 +05:30
Shuting Zhao
d8d5160bce
fix #1192
2020-11-03 15:31:58 -08:00
Jim Bugwadia
4ea1126fce
remove docs and update README.md
2020-10-14 17:39:45 -07:00
Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
Shuting Zhao
b8b1d81df0
handles array parsing in configmap value
2020-09-22 18:26:52 -07:00
Mohan B E
51ac382c6c
Feature/configmaps var 724 ( #1118 )
...
* added configmap data substitution for foreground mutate and validate
* added configmap data substitution for foreground mutate and validate fmt
* added configmap lookup for background
* added comments to resource cache
* added configmap data lookup in preConditions
* added parse strings in In operator and configmap lookup docs
* added configmap lookup docs
* modified configmap lookup docs
2020-09-22 14:11:49 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen ( #1089 )
...
* add watch policy to clusterrole kyverno:customresources
* - improve auto-gen policy application logic - remove unused code
* move method to common util
* auto-gen rule for cronJob
* update doc
* set CronJob as default auto-gen pod controller
* - update doc; - fix test
* remove unused code
2020-09-01 09:11:20 -07:00
Pooja Singh
5a68653749
Supporting annotations in match/exclude ( #1045 )
...
* Supporting annotations in match/exclude filters
* updated readme
* small fix
2020-08-17 17:12:27 -07:00
shuting
d6062fdd47
Add go fmt ( #1055 )
...
* remove empty flag
* format code
* revert change in install.yaml
2020-08-14 12:21:06 -07:00
Yuvraj
73840e3c5f
configrable rules added ( #1017 )
...
* configrable rules added
* fix exclude group logic from code
* flag added in yaml
* exclude username added
* exclude username added
* config interface implimented
* configure exclude username
* get role ref
* test case fixed
* panic fix
* move from interface to slice
* exclude added in mutate
* trim strings
* configmap changes added
* kustomize changes for configmap
* k8s resources added
2020-08-07 17:09:24 -07:00
shuting
67f7ed0ed3
Bug fix: perform OR across types in UserInfo ( #992 )
...
* remove policy name cache entry on policy DELETE
* buugfix: perform OR in userInfo match
* add function description
2020-07-14 20:23:30 -07:00
shuting
87fa77fbcc
965 add validate audit handler ( #967 )
...
* store policy names cache to reduce lookup time
* add validate audit handler
* fix #958 , remove auto-gen annotation on Pod
* formatting code
* update processTime to readable format
* #586 , add back unit test
* update logging info
* remove unused interface
* handle generate policy in a single thread in weboook
* resolve pr comments
2020-07-09 11:48:34 -07:00
shuting
da943325fe
Ignore auto-gen annotation on Pod when processing DENY rule ( #944 )
...
* ignore auto-gen annotation on Pod when processing DENY rule
* remove unused code
2020-06-24 10:26:04 -07:00
Jim Bugwadia
838d02c475
Bugfix/659 support wildcards for namespaces ( #871 )
...
* - support wildcards for namespaces
* do not annotate resource, unless policy is an autogen policy
* close HTTP body
* improve messages
* remove policy store
Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.
We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.
* handle wildcard namespaces in background processing
* fix unit tests 1) remove platform dependent path usage 2) remove policy store
* add test case for mutate with wildcard namespaces
2020-05-26 10:36:56 -07:00
Shuting Zhao
34d05c58c2
PR fixes
2020-05-19 13:04:06 -07:00
Shuting Zhao
f0bd8eae11
clarify names
2020-05-19 12:41:13 -07:00
Shuting Zhao
9eb2534d63
- fix pending delete for denying deletion rule - revert timeoutHandler - update log level
2020-05-19 00:14:23 -07:00
Shuting Zhao
74387d2ee4
Fix CI
2020-05-18 20:10:30 -07:00
Shuting Zhao
0e803ae532
fix DENY pending for DELETE request
2020-05-18 20:01:20 -07:00
Shuting Zhao
90bd8ee306
Fix match/exclude is not working
2020-05-18 17:10:49 -07:00
shivkumar dudhani
d327309d72
refactor logging
2020-03-17 16:25:34 -07:00
shivkumar dudhani
1b1ab78f77
logs & access
2020-03-17 11:05:20 -07:00
shravan
710be633a6
644 golangci issues
2020-02-19 10:49:57 +05:30
shravan
bc84413f35
644 resolving merge conflicts
2020-02-19 10:44:14 +05:30
shravan
38f916961d
644 removed concurrency
2020-02-19 10:25:51 +05:30
shivkumar dudhani
5cee543755
refactor variable substitution
2020-02-14 11:59:28 -08:00
shivkumar dudhani
0518aebb29
Merge branch 'master' into 671_cleanUp_generate
2020-02-10 12:39:32 -08:00
shravan
9f36141e3c
644 creating deepcopies of function inputs and fixing test policy raw
2020-02-09 20:52:45 +05:30
shravan
99e54e28d8
644 fixing compilation issue
2020-02-09 19:15:39 +05:30
shravan
a969a38c81
644 working version need to add more tests
2020-02-09 19:11:25 +05:30
shravan
122d1bd5fa
644 removed userinfo validation
2020-02-09 13:12:27 +05:30
shravan
c8fd7f6a91
644 simplyifying solution
2020-02-07 18:11:47 +05:30
shravan
736c18ea46
644 logical error fixes prototype
2020-02-07 16:53:38 +05:30
shravan
819ba3fb1b
644 returning detailed error from function in question, changes currently untested
2020-02-07 14:45:43 +05:30
shravan
9051320e43
644 removing outdated tests and fixing stylistic issues
2020-02-06 23:55:46 +05:30
shravan
0891b23efd
644 stopped closing channel while go routine is sending values
2020-02-06 23:39:57 +05:30
shravan
a683f8d373
644 more elegant solution
2020-02-06 23:35:50 +05:30
shravan
f9293e9585
644 untested prototype
2020-02-06 22:32:50 +05:30
shravan
d38bf5c16e
658 prototype changes without policy lookup update
2020-02-05 15:55:37 +05:30
shivkumar dudhani
f608d4db18
variable substitution on copy and retry generate resource creation
2020-02-04 12:13:41 -08:00
shravan
0d4b256d13
644 updating changes with revised understanding of issue, also removed alot of deadcode to make changes
2020-02-03 18:51:18 +05:30
Shivkumar Dudhani
8c1d79ab28
linter suggestions ( #655 )
...
* cleanup phase 1
* linter fixes phase 2
2020-01-24 12:05:53 -08:00
Shivkumar Dudhani
1171ac691b
cleanup phase 1 ( #653 )
2020-01-24 09:37:12 -08:00
Shuting Zhao
4c83ab8b52
add more unit tests
2020-01-10 17:15:44 -08:00
Shuting Zhao
434ed20857
report violation in generate when path not present
2020-01-10 11:59:05 -08:00
