Rodrigo Fior Kuntzer
bb90bb25ba
fix closed watchers in the resource-report-controller ( #5350 )
...
* fix: fix closed watchers in the resource-report-controller
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
* fix: using the resourceVersion from the list operation result
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-17 09:37:51 +00:00
Charles-Edouard Brétéché
fcca45b1cf
fix: send notification when stoping watching resource in reports system ( #5298 )
...
* fix: send notification when stoping watching resource in reports system
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add kuttl test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rework
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-10 17:01:56 +00:00
Charles-Edouard Brétéché
786e595c06
feat: add policy label to policy reports ( #5198 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-04 07:55:41 +00:00
Charles-Edouard Brétéché
076f2c3c49
fix: deletion of reports not belonging to kyverno ( #5194 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-02 10:08:54 +00:00
Charles-Edouard Brétéché
547771a221
fix: use pagination to aggregate reports ( #5190 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-02 15:10:48 +08:00
Charles-Edouard Brétéché
05d90afe1b
fix: check resource version on update notification ( #5179 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-01 21:49:25 +01:00
Charles-Edouard Brétéché
5d0adadfa7
fix: use correct side effects in validating webhooks ( #5080 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-21 16:53:55 +08:00
Charles-Edouard Brétéché
749c1bab3b
fix: do not update reports when they are identical ( #5056 )
...
* fix: do not update reports when they are identical
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 09:32:43 +00:00
Charles-Edouard Brétéché
c4b3301ab0
fix: go routines not gracefully shut down in controllers ( #5022 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-19 08:54:48 +00:00
Charles-Edouard Brétéché
cdfac95cdb
fix: account for policy/rule deletion in aggregated reports ( #5048 )
...
* fix: account for policy/rule deletion in aggregated reports
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* reduce delay
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 08:16:28 +00:00
Charles-Edouard Brétéché
5aec07215f
feat: add image verification support to background scan ( #5047 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-18 15:23:02 +00:00
Charles-Edouard Brétéché
5a09a78350
feat: add controller logger helper ( #5029 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-18 14:42:43 +00:00
Charles-Edouard Brétéché
a89fbac333
fix: don't process non background policies in background scan ( #5008 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-17 13:01:41 +02:00
Charles-Edouard Brétéché
47780bf37f
fix: improve banned types management in reports ( #4953 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-14 23:20:30 +08:00
Charles-Edouard Brétéché
e749907302
fix: missing watchers in resource report controller ( #4967 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 13:55:50 +00:00
Charles-Edouard Brétéché
9e933e8d21
fix: set operation in context when necessary ( #4940 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-13 19:33:49 +05:30
Charles-Edouard Brétéché
7cef1c00d9
fix: clean background scan reports ( #4908 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-12 21:13:33 +05:30
Charles-Edouard Brétéché
465f9d204b
fix: non watchable resources in report controller ( #4888 )
...
* fix: non watchable resources in report controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix events
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-12 13:36:24 +08:00
Charles-Edouard Brétéché
1509fa6251
refactor: non leader controllers management ( #4831 )
2022-10-06 18:38:35 +08:00
Charles-Edouard Brétéché
25cf8d6c1e
fix: add workers to the controller interface ( #4776 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 07:55:59 +00:00
yinka
688b4fb8e3
add package logger in files ( #4766 )
...
* add package logger in files
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add package logger to initContainer and other files
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* helm docs
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* helm default values
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* release notes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 19:45:03 +00:00
Charles-Edouard Brétéché
287eb84d07
refactor: use context in controllers instead of chan ( #4761 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-30 16:54:47 +05:30
Charles-Edouard Brétéché
7fa796e24a
fix: watch error in resource controller ( #4751 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-29 23:39:34 +05:30
Charles-Edouard Brétéché
e0ab72bb9a
feat: reports v2 implementation ( #4608 )
...
This PR refactors the reports generation code.
It removes RCR and CRCR crds and replaces them with AdmissionReport, ClusterAdmissionReport, BackgroundScanReport and ClusterBackgroundScanReport crds.
The new reports system is based on 4 controllers:
Admission reports controller is responsible for cleaning up admission reports and attaching admission reports to their corresponding resource in case of a creation
Background scan reports controller is responsible for creating background scan reports when a resource and/or policy changes
Aggregation controller takes care of aggregation per resource reports into higher level reports (per namespace)
Resources controller is responsible for watching reports that need background scan reports
I added two new flags to disable admission reports and/or background scan reports, the whole reporting system can be disabled if something goes wrong.
I also added a flag to split reports in chunks to avoid creating too large resources.
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-09-28 17:15:16 +05:30
