Yuvraj
e15ed829ca
remove policy controller for policyreport
2020-09-03 22:19:37 +05:30
Mohan B E
118b40c644
added invalid field validation for policy ( #1094 )
2020-09-03 22:14:54 +05:30
shuting
931d7cd47c
Set mutating webhhok reinvocationPolicy to IfNeeded ( #1097 )
...
* add watch policy to clusterrole kyverno:customresources
* fix build
* fix nil pointer
* skip json patches if the mutation is re-invoked
* set resource mutating webhook invocation policy to IfNeeded
2020-09-03 08:54:37 -07:00
Yuvraj
fdd908e20e
refactor codebase
2020-09-03 21:11:02 +05:30
NoSkillGirl
70108232ec
added return
2020-09-03 09:47:43 +05:30
NoSkillGirl
fcdbc054c9
added validation for openapi_v3
2020-09-02 17:14:29 +05:30
Yuvraj
e59425dfcd
go fmt
2020-09-02 14:19:11 +05:30
Yuvraj
e43154ea1c
merge conflict resolve
2020-09-02 14:17:33 +05:30
Yuvraj
05ca32ed19
docs added for command
2020-09-02 14:06:55 +05:30
Yuvraj
2309e2390c
count bug fix
2020-09-02 14:02:37 +05:30
shuting
9a210e24d9
bug fix - nil pointer ( #1093 )
...
* add watch policy to clusterrole kyverno:customresources
* fix build
* fix nil pointer
2020-09-01 17:23:54 -07:00
Yuvraj
979884fdb1
cli changes
2020-09-02 01:10:08 +05:30
shuting
b319a816c5
Fix build ( #1092 )
...
* add watch policy to clusterrole kyverno:customresources
* fix build
2020-09-01 09:38:49 -07:00
Mohan B E
3690bf5fff
conditional anchor preprocessing for patch strategic merge ( #1090 )
...
* conditional anchor preprocessing for patch strategic merge
* modified sequence pre processing and added unit test
* merged master
* go fmt
* corrected mistake and added error handling to policy validate
2020-09-01 09:12:05 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen ( #1089 )
...
* add watch policy to clusterrole kyverno:customresources
* - improve auto-gen policy application logic - remove unused code
* move method to common util
* auto-gen rule for cronJob
* update doc
* set CronJob as default auto-gen pod controller
* - update doc; - fix test
* remove unused code
2020-09-01 09:11:20 -07:00
Pooja Singh
2bfb5fffb3
Merge pull request #1080 from NoSkillGirl/feature/crd_validation
...
Supporting CRD validation in CLI
2020-09-01 08:51:02 +05:30
NoSkillGirl
afc340ea5f
removed todo
2020-09-01 08:41:59 +05:30
Yuvraj
eb518a25f3
buf fix
2020-09-01 01:05:29 +05:30
Yuvraj
2641120907
Generate policy does not work on namespace update ( #1085 )
...
* added logic for handling generate request
* generate rules added
* added label condition for generate
* remove extra logs
* remove extra logs
* buf fixed
* bug fixed
* added logic for delete gr
* log fixed
* documentation changed
* remove best practices changes
* bug fix
* added best pratice
2020-08-31 11:25:13 -07:00
Yuvraj
0bc1b3b3e8
added logic for cli
2020-08-31 23:18:25 +05:30
NoSkillGirl
d9c3a166cc
updated readme
2020-08-31 19:32:00 +05:30
NoSkillGirl
ccfd4adad3
calling GetCRD's from validate
2020-08-31 18:44:08 +05:30
NoSkillGirl
e5f5ef9db1
split multi yaml in crd
2020-08-31 18:20:25 +05:30
NoSkillGirl
6b6897f6e2
working version of CRD validation for CLI
2020-08-31 18:19:09 +05:30
NoSkillGirl
b61412ca7a
minor validation changes
2020-08-31 18:18:10 +05:30
NoSkillGirl
afb6ad714c
small issue while resolving conflicts
2020-08-31 18:16:53 +05:30
NoSkillGirl
70b13d06dc
validation of policy against crd
2020-08-31 18:15:39 +05:30
Yuvraj
22437289f5
added logic for jobs
2020-08-31 00:26:30 +05:30
Yuvraj
ea3e4241ed
added logic for jobs
2020-08-31 00:06:21 +05:30
Yuvraj
d0d555688f
added logic for jobs
2020-08-30 23:57:30 +05:30
Yuvraj
59dce68379
added logic for kyverno cli
2020-08-30 04:13:22 +05:30
Mohan B E
a827f88dc7
resolved conditional anchor issue and added validation to pattern labels ( #1060 )
...
* resolved conditional anchor issue and added validation to pattern labels
* restored IsConditionAnchor
* added annotation and anypattern validation
* added conditional anchor key checker
* reverted docs
* fixed tests
* modified validation
* modified validate condition check
2020-08-28 18:22:22 -07:00
Yuvraj
a01bfc7f15
configmap added
2020-08-29 04:31:40 +05:30
Yuvraj
3ebf9d43fc
common package changed
2020-08-28 23:19:22 +05:30
Yuvraj
d3bba37e08
subcommand added for report
2020-08-28 20:18:14 +05:30
Yuvraj
2dbacdea9a
sub command added for policy report
2020-08-28 17:26:41 +05:30
Yuvraj
fb6c4c3699
common function added
2020-08-28 16:41:16 +05:30
Yuvraj
9fb2b8dbb1
added logic for cli
2020-08-28 16:14:46 +05:30
Yuvraj
b59a4edfcd
bug fixed
2020-08-27 20:25:23 +05:30
Yuvraj
b9123cd3f4
added jobs
2020-08-27 13:19:41 +05:30
Yuvraj
e9d2ba4e04
added jobs
2020-08-27 03:08:03 +05:30
Yuvraj
2a9477ba06
configmap added
2020-08-27 01:18:18 +05:30
Michael Barrientos
b067f41d02
Replace Policy CRD AnyValue fields with empty dict ( #1086 )
...
/kind cleanup
\## Proposed change
This implements the same change as #1047 , except for the new Policy CRD instead of the ClusterPolicy CRD, which apparently did not get those updates before merging.
When deploying Kyverno using Argo CD, we get a persistent false diff for the Policy custom resource definition (the definition itself, not instances of Policy), because Kubernetes converts the invalid AnyValue: {} property types to just an empty dict {}. Since the Kubernetes server makes this change to {} unilaterally after applying, when a diffing tool like Argo CD compares it against the YAML manifest, each such instance of AnyValue appears as a diff.
I know that since AnyValue is not part of the official OpenAPI V3 schema, and that when you run kubectl get crd policies.kyverno.io -o yaml the status message shows Kubernetes complaining about "Required value: must not be empty for specified object fields" for all of these fields. In theory the correct solution would be to somehow provide a full schema, but I know this can be tricky for these data/anyPattern/patches types, but at the minimum, I would like to get Argo CD to believe that there are no changes that need to be applied.
Since these fields are already silently turned into {} by Kubernetes, this should have no functionality change on existing code/deployments.
2020-08-26 11:11:36 -07:00
Yuvraj
251521a77a
policy report added
2020-08-26 18:50:38 +05:30
Yuvraj
b648c2edd6
Events take several minutes to show on the resource ( #1083 )
...
* git action added
* changed retry method
* remove time method
* increase worker for event generator
2020-08-26 14:28:34 +05:30
Yuvraj
875f9716e8
policy report crd added
2020-08-26 00:03:39 +05:30
Yuvraj
91c45b408b
add report in cli
2020-08-25 22:44:29 +05:30
shuting
513f5ec898
add watch policy to clusterrole kyverno:customresources ( #1084 )
2020-08-24 12:27:16 -07:00
Pooja Singh
8105e4cad8
Allowing only few variables in the policies ( #1063 )
...
* Checking for non whitelisted variables in the policy
* method name change
* small issue while rebasing
2020-08-23 15:11:03 -07:00
Pooja Singh
1b69ca26db
Merge pull request #1030 from NoSkillGirl/feature/add_cli_variables
...
Feature/add cli variables
2020-08-22 01:48:40 +05:30
