mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Code Activity
3220 commits 16 branches 550 tags 288 MiB
Commit graph

3220 commits

This branch
This branch
All branches
Author SHA1 Message Date
Shuting Zhao
e0d523eb2d Merge branch 'main' into 1543_unkown_unstructured 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 17:38:11 -08:00
Shuting Zhao
77a94fda6b add "watch" to cluster role kyverno:policycontroller 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 17:35:35 -08:00
shuting
8dcfa185b1
Remove duplicate results' entries from policy report (#1559) 
* remove duplicate results' entries from policy report

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* improve error reporting when removing duplicate result entries

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 14:42:17 -08:00
Shuting Zhao
88af9924bd improve error reporting when removing duplicate result entries 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 14:19:08 -08:00
shuting
ecc052f0cd
upload logo (#1560) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 13:09:37 -08:00
Shuting Zhao
50b126fe56 remove duplicate results' entries from policy report 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 12:33:26 -08:00
Pooja Singh
c148573d48
issue fixed (#1558) 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-02-08 10:36:39 -08:00
Raj Babu Das
72eb5e3503
Adding support for applying git raw by kyverno cli (#1554) 
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
 2021-02-08 10:08:06 -08:00
Yashvardhan Kukreja
d141f74015
performed cleanups (#1552) 2021-02-07 21:19:25 -08:00
shuting
2f2d6c2e38
Upgrade client libraries to 0.20.2 (#1547) 
* upgrade clients to 0.20.2

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* remove debug log

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix unit tests

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix e2e test

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-07 20:26:56 -08:00
shuting
bd44dbff41
Reduce RCR Throttling (#1545) 
* buffer report change requests

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix clusterReportChangeRequest

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* further reduce RCRs in background scan

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-07 19:46:50 -08:00
Yashvardhan Kukreja
6b3ab3fe23
added: generic NumericOperator to handle numeric operations for kyverno policies (#1536) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-02-05 19:49:23 -08:00
shuting
c42d545c20
Revert "Adding HTTP(git raw or any public url ) URL applying functionality to kyverno cli (#1527)" (#1548) 
This reverts commit 0487330b33.
 2021-02-05 19:34:15 -08:00
Raj Babu Das
0487330b33
Adding HTTP(git raw or any public url ) URL applying functionality to kyverno cli (#1527) 
* Adding feature to apply from http url

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding comment

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* formatting imports

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* removing fmt.print

Signed-off-by: Raj Das <mail.rajdas@gmail.com>
 2021-02-05 18:42:39 -08:00
Max Goncharenko
536f364724
Add AND logical operator support (#1539) 
Signed-off-by: Max Goncharenko <kacejot@fex.net>
 2021-02-05 17:52:31 -08:00
Jim Bugwadia
b91022d438
Merge pull request #1518 from kyverno/test_cli 
test command for kyverno
 2021-02-05 12:44:07 -08:00
shuting
6953aa86bc
compare policy status before actually update it (#1523) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-05 09:58:24 -08:00
shuting
39b27a16ed
Reduce throttling requests (GET) (#1522) 
* add resource lister to even handler

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* use lister to get Kyverno deployment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add lister for webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-05 09:58:10 -08:00
Shuting Zhao
7788ae3dba update chart version 2021-02-03 16:21:15 -08:00
Shuting Zhao
a00d9b1cc9 release v1.3.2-rc2 2021-02-03 14:19:46 -08:00
Jim Bugwadia
ba9d003774
update APICall docs (#1534) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-02-03 13:10:02 -08:00
Pooja Singh
32522e7827
namespace selector (#1532) 
* updated crd with namespace selector

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added logic for validate

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added condition in utils for namespace labels

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added function for extracting namespace label using lister

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added logic for generate

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added lister in generate

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* commented generate controller changes

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns lister

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label in apply.go

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label in generation.go

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label in mutation.go

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label for validation

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* using dynaminc informer

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-02-03 13:09:42 -08:00
vyankatesh_neualto
2f92b95015 #1513 [BUG] CLI Panic when assigning variables 
Signed-off-by: vyankatesh_neualto <vyankatesh@neualto.com>
 2021-02-03 18:27:45 +05:30
Jim Bugwadia
f2478921e9
Merge pull request #1526 from kyverno/feature/api_server_lookups_2 
redo changes reverted by merge
 2021-02-02 11:19:47 -08:00
vyankatesh_neualto
18f20abbf9 fix engine.PolicyContext issue 
Signed-off-by: vyankatesh_neualto <vyankatesh@neualto.com>
 2021-02-02 20:02:07 +05:30
vyankyGH
27f9b4747a
Merge branch 'main' into test_cli 2021-02-02 18:57:05 +05:30
vyankatesh_neualto
ce9ab9ef69 adding kyverno test command with git support 
Signed-off-by: vyankatesh_neualto <vyankatesh@neualto.com>
 2021-02-02 18:45:38 +05:30
Jim Bugwadia
0be7903c47 fix tests 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-02-02 00:20:03 -08:00
Jim Bugwadia
2bb812aa2d redo changes reverted by merge 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-02-01 23:22:19 -08:00
vyankatesh_neualto
01ac9058d9 code indentation 
Signed-off-by: vyankatesh_neualto <vyankatesh@neualto.com>
 2021-02-02 09:25:22 +05:30
vyankatesh_neualto
7482c5c1fe initial commit for kyverno test command 
Signed-off-by: vyankatesh_neualto <vyankatesh@neualto.com>
 2021-02-02 09:25:22 +05:30
Yashvardhan Kukreja
b4ab5413fd
added: hostNetwork toggle and dnsPolicy option to the dep. and values manifests (#1511) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-02-01 17:44:11 -08:00
Yashvardhan Kukreja
03c77e4145
feat: validation 'value' field under 'deny.conditions' in a rule object (#1510) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-02-01 13:27:16 -08:00
Jim Bugwadia
e8e3b93a5f
api server lookups (#1514) 
* initial commit for api server lookups

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* initial commit for API server lookups

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* Enhancing dockerfiles (multi-stage) of kyverno components and adding non-root user to the docker images (#1495)

* Dockerfile refactored

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* Adding non-root commands to docker images and enhanced the dockerfiles

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* changing base image to scratch

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* Minor typo fix

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* changing dockerfiles to use /etc/passwd to use non-root user'

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* minor typo

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* minor typo

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* revert cli image name (#1507)

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* Refactor resourceCache; Reduce throttling requests (background controller) (#1500)

* skip sending API request for filtered resource

* fix PR comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fixes https://github.com/kyverno/kyverno/issues/1490

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix bug - namespace is not returned properly

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* reduce throttling - list resource using lister

* refactor resource cache

* fix test

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix label selector

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix build failure

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix merge issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix unit test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add nil check for API client

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Raj Babu Das <mail.rajdas@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
 2021-02-01 12:59:13 -08:00
shuting
c692263177
Refactor resourceCache; Reduce throttling requests (background controller) (#1500) 
* skip sending API request for filtered resource

* fix PR comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fixes https://github.com/kyverno/kyverno/issues/1490

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix bug - namespace is not returned properly

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* reduce throttling - list resource using lister

* refactor resource cache

* fix test

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix label selector

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix build failure

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-29 17:38:23 -08:00
Raj Babu Das
ac3a42d441
revert cli image name (#1507) 
Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-29 12:42:14 -08:00
Raj Babu Das
9da94d5220
Enhancing dockerfiles (multi-stage) of kyverno components and adding non-root user to the docker images (#1495) 
* Dockerfile refactored

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* Adding non-root commands to docker images and enhanced the dockerfiles

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* changing base image to scratch

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* Minor typo fix

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* changing dockerfiles to use /etc/passwd to use non-root user'

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* minor typo

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* minor typo

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-29 11:58:07 -08:00
Pooja Singh
0396d5278e
added logic for generate policy with data (#1463) 
* added logic for generate policy with data

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* debuging data of configmap

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed few print statements

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* logic for configmap

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* logic for pod

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* logic for pod

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* restructured

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed println

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added comments

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added test cases

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* function rename

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed comment

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small improvement

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* extract annotation and label

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* fixed test cases

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* extract annotation and label from updated target resource

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated test cases

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-01-27 10:11:22 -08:00
Jim Bugwadia
81c7205e42
Merge pull request #1493 from rajdas98/helm-psp 
Adding cluster policies(default, restricted) to kyverno helm charts
 2021-01-26 10:28:15 -08:00
Jim Bugwadia
35c9a5a5bf
Merge pull request #1499 from MnrGreg/patch-1 
Update adopters.md
 2021-01-25 22:30:20 -08:00
Gregory May
5f3c779acd
Update adopters.md 2021-01-25 10:12:18 -08:00
Shuting Zhao
7d8c404922 generate 1.3.2-rc1 2021-01-24 21:06:30 -08:00
Jim Bugwadia
05da4190f8
handle discovery errors for metrics API group (#1494) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-01-24 11:34:02 -08:00
Raj Babu Das
5d7d7157ad Changing policyType to podSecurityStandard 
Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-24 14:05:50 +05:30
Raj Babu Das
bb9e73a316 Adding policies(default, restricted) to kyverno helm charts 
Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-24 05:09:47 +05:30
shuting
e54776ee7e
Bug fix - namespace is not returned properly (#1491) 
* skip sending API request for filtered resource

* fix PR comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fixes https://github.com/kyverno/kyverno/issues/1490

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix bug - namespace is not returned properly

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-22 17:56:41 -08:00
shuting
62a4a3a7da
Reduce throttling - skip sending API request for filtered resources (#1489) 
* skip sending API request for filtered resource

* fix PR comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fixes https://github.com/kyverno/kyverno/issues/1490

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-21 18:58:53 -08:00
Jim Bugwadia
42879683d8
Merge pull request #1488 from chipzoller/main 
Update adopters
 2021-01-21 14:36:42 -08:00
Chip Zoller
1a5d4dc5b4 clean 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-01-21 17:33:14 -05:00
Chip Zoller
889f5ae27a Update ADOPTERS.md 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-01-21 17:33:14 -05:00