mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-09 09:26:54 +00:00
Code Activity
3863 commits 17 branches 550 tags 290 MiB
Commit graph

3863 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jim Bugwadia
0153bd7c72
fix cmd line tests (#2502) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-07 15:25:44 -07:00
shuting
9dc2c2b4bf
Bugfixes - handle verifyImage rules for webhooks configurations (#2501) 
* dynamic webhooks for verifyImages rule

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add namespace env to the initContainer

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add debug log

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* update operator schema validation tag

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* set policy to ready if auto-update-webhook disabled

Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-07 13:50:30 -07:00
Kumar Mallikarjuna
f67f847901
Namespace env variable for initContainer (#2499) 
Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-10-07 10:58:31 -07:00
Jim Bugwadia
c16de81751
Merge pull request #2496 from vyankyGH/autogen_mutate_foreach 
Fix autogen issue for foreach mutate policy and foreach type issue
 2021-10-07 08:39:02 -07:00
Vyankatesh Kudtarkar
5164d833ed Fix autogen for varifyImage 2021-10-07 17:16:46 +05:30
Vyankatesh Kudtarkar
ee19d49a94 Fix autogen issue 2021-10-07 16:21:39 +05:30
Vyankatesh Kudtarkar
176f139f26 Fix autogen issue for Foreach mutate policy 2021-10-07 16:12:34 +05:30
Pooja Singh
80936fa2d8
Merge pull request #2492 from realshuting/bugfixes 
bugfixes - dynamic webhooks, e2e failure
 2021-10-07 13:11:13 +05:30
Jim Bugwadia
69bb7090a4
Merge pull request #2493 from JimBugwadia/feature/foreach_mutate 
Feature/foreach mutate
 2021-10-07 00:32:22 -07:00
Jim Bugwadia
510559cd3c
Merge pull request #2494 from kyverno/update_code_gen 
generate code and CRDs
 2021-10-07 00:26:50 -07:00
Jim Bugwadia
b56757ce2a generate code and CRDs 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 23:16:40 -07:00
Jim Bugwadia
1c0a303106 fix merge error 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 22:48:56 -07:00
Jim Bugwadia
7c761b4bc9 Merge branch 'main' into feature/foreach_mutate 2021-10-06 22:45:03 -07:00
ShutingZhao
a5c399bb15 e2e test - add retry when getting generated configmap 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-06 22:36:43 -07:00
Jim Bugwadia
4c63442028 separate MutateResourceWithImageInfo from buildContext and add comments 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 22:19:47 -07:00
ShutingZhao
6dbb529267 fix e2e test failure 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-06 22:12:48 -07:00
Jim Bugwadia
ed93a9bddf
Merge pull request #2487 from JimBugwadia/feature/cosign_attest 
Feature/cosign attest
 2021-10-06 22:10:03 -07:00
Jim Bugwadia
683543d8e2 fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 22:05:28 -07:00
Jim Bugwadia
fa1816d605 fix tests 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 21:50:26 -07:00
ShutingZhao
b42c44eff0 update policy status to false if error occurs 2021-10-06 20:48:36 -07:00
ShutingZhao
08d75245a2 matching resources should be updated separate for mutate and validate rules 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-06 20:43:19 -07:00
Jim Bugwadia
b9d4ee6876 fix tests 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 18:31:20 -07:00
Vyankatesh Kudtarkar
05a0737184
Fix Autogen issue for any/all block and new rule foreach (#2471) 
* Fix Autogen issue for any/all block and Support gvk in match kind block

* remove log and fix test

* Fix issues

* Fix cronjob issue

* Fix autogen for Foreach

* Fix autogen for For each

* Fix for each issue

* adding missing assignements

* Update autogen for foreach rule
 2021-10-06 16:19:55 -07:00
Pooja Singh
ac5929fc7a
added validation for generte resource (#2484) 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-06 16:18:28 -07:00
Kumar Mallikarjuna
254be4c1d3
Leader Election for initContainer (#2489) 
* Local build

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Leader Election for initContainer

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Lease deletion

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Use wrc client

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* log error out

Signed-off-by: ShutingZhao <shutting06@gmail.com>

Co-authored-by: ShutingZhao <shutting06@gmail.com>
 2021-10-06 16:12:07 -07:00
Anushka Mittal
efe0c28f6b
Fixes port names in flags (#2490) 
* fixed port names in flags

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* minor fixes

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-10-06 14:41:07 -07:00
treydock
b460490984
Improve init container to use DeleteCollection to remove policy reports (#2477) 
* Improve init container to use DeleteCollection to remove policy reports

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Do not use go routine for each namespace

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-10-06 11:25:38 -07:00
shuting
c2751828d1
update the flag to "autoUpdateWebhooks" (#2482) 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-06 11:24:51 -07:00
Jim Bugwadia
676bd5f4be fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 11:18:36 -07:00
Jim Bugwadia
0bb35aa302 merge main 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 10:51:43 -07:00
Anushka Mittal
3914c513a8
Changing flag names for consistency (#2467) 
* changing flag names for consistency

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* changes for backward compatibility

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* updated the CHANGELOG.md

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-10-06 10:32:48 -07:00
Anushka Mittal
7963263776
Adding log statements in context.go (#2483) 
* adding logs in context.go

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* minor modifications

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-10-06 10:29:28 -07:00
Jim Bugwadia
619ee6ac61 fix loop 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 09:55:23 -07:00
Jim Bugwadia
7c57ac24e6 update CRDs 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-06 00:58:45 -07:00
Jim Bugwadia
90edc69dcf merge and update 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-05 22:42:42 -07:00
Shubham Palriwala
ae4fb488bf
fix: sign kyverno-cli (#2480) 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-10-05 22:28:40 -07:00
shuting
b7473b018b
update deepcopy methods for types.fo (#2478) 2021-10-05 16:57:10 -07:00
Jim Bugwadia
04a7e5703c
Merge pull request #2438 from ShubhamPalriwala/sign-and-generate-sbom 
Sign images and generate and sign SBOM
 2021-10-05 14:49:58 -07:00
Jim Bugwadia
8437582622
Merge branch 'main' into sign-and-generate-sbom 2021-10-05 14:49:06 -07:00
Jim Bugwadia
b849341aee
Merge pull request #2472 from ShubhamPalriwala/scan-with-trivy 
Scan Kyverno images on build
 2021-10-05 14:46:45 -07:00
Shubham Palriwala
38f3eac4d7
Merge branch 'kyverno:main' into scan-with-trivy 2021-10-05 22:52:31 +05:30
Pooja Singh
ca62172b6f
Merge pull request #2462 from NoSkillGirl/feat/support_mutate_in_cli 
Kyverno CLI | Support mutate policies for `test` command
 2021-10-05 21:27:31 +05:30
ShubhamPalriwala
92ca609c7c ci: scan kyverno-image on each build 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-10-05 16:38:55 +05:30
NoSkillGirl
364174d372 removed print statements 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-05 14:57:48 +05:30
shuting
b10947b975
Dynamic webhooks (#2425) 
* support k8s 1.22, update admissionregistration.k8s.io/v1beta1  to admissionregistration.k8s.io/v1

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - add failurePolicy to policy spec; - fix typo

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - add schema validation for failurePolicy; - add a printer column

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* set default failure policy to fail if not defined

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* resolve conflicts

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix missing type for printerColumn

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* refactor policy controller

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add webhook config manager

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - build webhook objects per policy update; - add fail webhook to default webhook configurations

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix panic on policy update

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* build default webhook: match empty if autoUpdateWebhooks is enabled, otherwise match all

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* - set default webhook configs rule to empty; - handle policy deletion

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* reset webhook config if policies with a specific failurePolicy are cleaned up

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* handle wildcard pocliy

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* update default webhook timeout to 10s

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* cleanups

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* added webhook informer to re-create it immediately if missing

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* update tag webhookTimeoutSeconds description

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix e2e tests

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* fix linter issue

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* correct metric endpoint

Signed-off-by: ShutingZhao <shutting06@gmail.com>

* add pol.generate.kind to webhooks

Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-10-05 00:15:09 -07:00
NoSkillGirl
98f756fcdd change test case as master branch 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-05 12:42:23 +05:30
NoSkillGirl
0614c2db1f fixed rule pointer 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-05 12:39:58 +05:30
NoSkillGirl
5ca33ce902 Merge branch 'main' of github.com:kyverno/kyverno into feat/support_mutate_in_cli 2021-10-05 12:23:34 +05:30
NoSkillGirl
a2e106a87a fixed global variable test cases 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-05 11:11:54 +05:30
NoSkillGirl
8e0ac567e1 fixed test-validate-image-tag-ignore test case 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-05 11:11:54 +05:30