1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

5993 commits

Author SHA1 Message Date
dependabot[bot]
575cc7066a
chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#7511)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](5f1fec7010...639cd343e1)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 08:29:47 +00:00
dependabot[bot]
0af0944f87
chore(deps): bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#7510)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](f82d6c1c34...336e29918d)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 08:00:25 +00:00
Charles-Edouard Brétéché
b6209da108
fix: use RawClient in context loader (#7499)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-12 16:03:17 +00:00
Charles-Edouard Brétéché
1401bcf2fb
feat: use context for toggles management (#7501)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-12 17:36:12 +02:00
Marc Brugger
3d5ed2b4e5
fix: log kind/namespace/name in scan errors (#7498)
Signed-off-by: bakito <github@bakito.ch>
2023-06-12 16:17:15 +02:00
dependabot[bot]
92989dcf94
chore(deps): bump github/codeql-action from 2.3.6 to 2.13.4 (#7495)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.6 to 2.13.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](83f0fe6c49...cdcdbb5797)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-12 12:36:19 +00:00
dependabot[bot]
43d9f64d94
chore(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 (#7494)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.11.0 to 0.11.2.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](b43daad0c3...41f05d9ecf)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 09:08:28 +00:00
dependabot[bot]
5f73d2b796
chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 (#7493)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8e5e7e5ab8...c85c95e3d7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 08:11:03 +00:00
Charles-Edouard Brétéché
9387d20443
fix: propagate context when listing resources (#7487)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-11 13:57:21 +02:00
Charles-Edouard Brétéché
42657f672f
refactor: introduce abstract client interface in engine (#7377)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-10 09:20:34 +00:00
Charles-Edouard Brétéché
123ba5f9d8
feat: sign released artifacts (#7478)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-09 16:05:45 +00:00
shuting
37dfdaeeab
fix (#7473)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-09 08:51:42 +00:00
Charles-Edouard Brétéché
dc97a4386b
fix: image pull secrets in admission controller (#7474)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-09 16:20:19 +08:00
Charles-Edouard Brétéché
271a568693
feat: obey the order field in patchStrategicMerge method (#7336)
* feat: obey the order field in patchStrategicMerge method

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* default

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-08 17:54:55 +00:00
Charles-Edouard Brétéché
60fd1ccda9
fix: add missing webhook timeouts (#7435)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-08 11:00:59 +00:00
Charles-Edouard Brétéché
3d5341949b
feat: switch json patch lib for real (#7452)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-08 10:23:20 +00:00
Charles-Edouard Brétéché
d4a6d4fc8e
fix: rule name not required in the crd schema (#7464)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-08 09:54:58 +00:00
dependabot[bot]
baa05b704f
chore(deps): bump slsa-framework/slsa-github-generator (#7462)
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 08:23:12 +00:00
dependabot[bot]
4bfe5e3e8d
chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#7463)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](f4ef78c080...465a07811f)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-08 07:31:25 +00:00
shuting
9a12f09648
fix flaky tests (#7460)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-08 07:55:26 +02:00
Charles-Edouard Brétéché
ea98b08951
fix: autogen not generating the correct kind (#7455)
* fix: autogen not generating the correct kind

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix kuttl tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* add kuttl test

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-07 20:32:35 +02:00
shuting
0c3351887a
fix: the same source cannot be used for multiple targets with a generate clone rule (#7436)
* add source labels to targets

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* handle multiple triggers/targets for the same clone source

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add source labels to targets

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix test

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove unused code

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* rename the test

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* split apiversion label into version and group

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-07 13:50:47 +00:00
Charles-Edouard Brétéché
f20c0ed417
chore: add buffer unit tests (#7453)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-07 13:48:50 +02:00
Charles-Edouard Brétéché
1d2b50bc03
chore: add engine api stats unit tests (#7451)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-07 10:11:46 +00:00
Charles-Edouard Brétéché
a345e15511
refactor: remove json patches from engine response (#7449)
* refactor: remove json patches from engine response

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* remove filtering

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-07 17:45:11 +08:00
Frank Jogeleit
5c3da75306
chore: remove unused deperected patches from RuleResponse (#7450)
Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>
2023-06-07 09:10:57 +00:00
dependabot[bot]
e358bf3867
chore(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#7448)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.27.7 to 1.27.8.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.27.7...v1.27.8)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-07 07:39:55 +00:00
Charles-Edouard Brétéché
b6795239ba
refactor: remove json patches from mutation tests (#7447)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-07 13:35:58 +08:00
Charles-Edouard Brétéché
945cb1a809
chore: remove last-applied-patches annotation (#7438)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-07 04:51:02 +00:00
Charles-Edouard Brétéché
6e462446b8
refactor: remove json patches from rule response in tests (#7443)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 17:52:26 +00:00
Fabian Sabau
9f76a65eb1
fixed typo in admission controller chart template (#7440)
* fix: typo in admission controller chart template

Signed-off-by: Fabian-Daniel Sabau <fabian-daniel.sabau@1und1.de>

* generate manifests

Signed-off-by: Fabian-Daniel Sabau <fabian-daniel.sabau@1und1.de>

---------

Signed-off-by: Fabian-Daniel Sabau <fabian-daniel.sabau@1und1.de>
Co-authored-by: Fabian-Daniel Sabau <fabian-daniel.sabau@1und1.de>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 16:52:20 +00:00
Ved Ratan
c4e7c5f854
[Feature] Enhance devcontainer (#7175)
* added minikube and docker support

Signed-off-by: Ved Ratan <vedratan8@gmail.com>

* added docs

Signed-off-by: Ved Ratan <vedratan8@gmail.com>

---------

Signed-off-by: Ved Ratan <vedratan8@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 16:17:23 +00:00
Charles-Edouard Brétéché
248e6be073
fix: error reported when sanity check fails (#7439)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 15:47:28 +00:00
Marc Brugger
c92605b7a6
fix: abort validation if value could be processed (#7307)
* fix: abort validation if value could be processed

Signed-off-by: bakito <github@bakito.ch>

* add test to verify compareString is not executed for quantities

Signed-off-by: bakito <github@bakito.ch>

---------

Signed-off-by: bakito <github@bakito.ch>
2023-06-06 14:41:20 +00:00
Charles-Edouard Brétéché
9078acb92a
fix: exceptions not considered on delete (#7433)
* fix: helm template for cleanup jobs image

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix: exceptions not considered on delete

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* kuttl test

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 22:15:10 +08:00
Charles-Edouard Brétéché
c11db51836
fix: helm template for cleanup jobs image (#7430)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 13:04:36 +00:00
Charles-Edouard Brétéché
9d0d2491b5
fix: reports discovery error (#7428)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 11:55:47 +00:00
dependabot[bot]
b4014b4c90
chore(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 (#7426)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](e5f43133f6...b43daad0c3)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 11:10:36 +00:00
shuting
7b7d64dcf2
fix: array element removal should be synced to the downstream resource with a generate data sync rule (#7417)
* refactor

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix downstream update

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix flaky test

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-06 12:07:07 +02:00
Charles-Edouard Brétéché
863ed5c384
fix: stop recording json patches in rule responses (part 2) (#7422)
* fix: stop recording json patches in rule responses (part 2)

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix test

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix test

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-06 00:41:46 +08:00
Charles-Edouard Brétéché
6bc3761b7a
refactor: stop recording json patches but generate them on demand (part 1) (#7394)
* refactor: stop recording json patches but generate them on demand

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* changed lib

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix verify images

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* image verif tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* unit tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-06-05 12:33:23 +00:00
Charles-Edouard Brétéché
ff7cda2694
feat: add config exclusions in the engine (#7420)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-05 13:47:46 +02:00
Frank Jogeleit
5d5011d5d9
feat: hold custom labels (#7416)
* feat: hold custom labels

Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>

* fix: remove unnecessary SetLabels

Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>

---------

Signed-off-by: Frank Jogeleit <frank.jogeleit@lovoo.com>
2023-06-05 10:37:28 +00:00
zirain
424b98a747
charts: changes validationFailureAction default value (#7411)
* charts: changes validationFailureAction default value

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>

* fix helm docs

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>

---------

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>
2023-06-05 08:58:19 +00:00
Charles-Edouard Brétéché
c013ccbc65
fix: json patch unit tests (#7415)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-05 08:12:13 +00:00
dependabot[bot]
2706c764fe
chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#7414)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](08e2f20817...5f1fec7010)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 07:29:19 +00:00
Jim Bugwadia
7aedbe001c
expose JSON Pointer in Images variable for extension services (#7413)
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-06-05 14:11:52 +08:00
Chip Zoller
df641106a1
update migration guide with generate guidance (#7409)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2023-06-03 23:55:55 +02:00
Charles-Edouard Brétéché
210fb3ca0b
fix: missing extraEnvVars in helm chart (#7403)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-03 12:47:34 +00:00
Charles-Edouard Brétéché
07ef7da0c4
fix: replace mattbaird/jsonpatch with appscode/jsonpatch (#7401)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-06-03 20:08:58 +08:00