Charles-Edouard Brétéché
|
5b89e2e5f8
|
refactor: make policy context immutable and fields private (#5523)
* refactor: make policy context immutable and fields private
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: make policy context immutable and fields private
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2022-12-02 16:14:23 +08:00 |
|
Charles-Edouard Brétéché
|
83bbf87ff6
|
feat: use admission review v1 (#5464)
* feat: use admission review v1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* patch type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
|
2022-11-30 23:37:42 +08:00 |
|
Charles-Edouard Brétéché
|
1ea4a0db19
|
refactor: use internal cmd package in kyverno (#5507)
|
2022-11-30 13:37:53 +00:00 |
|
Charles-Edouard Brétéché
|
ff9ba81440
|
feat: add webhook type to admission metrics (#5493)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-30 17:30:24 +08:00 |
|
Charles-Edouard Brétéché
|
c3be9e36a5
|
feat: propagate context to dynamic client (#5495)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2022-11-29 13:59:40 +00:00 |
|
Charles-Edouard Brétéché
|
938df21d4d
|
fix: panic when response is nil (#5502)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-29 11:39:44 +00:00 |
|
Charles-Edouard Brétéché
|
c2549898c9
|
refactor: move metrics closer to the code that use them (#5492)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-28 19:11:11 +01:00 |
|
Charles-Edouard Brétéché
|
dfded5cc60
|
feat: propagate context to the metrics package (#5479)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-28 10:30:14 +00:00 |
|
Charles-Edouard Brétéché
|
a09d2a77e5
|
feat: add allowed label to admission metrics (#5478)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-28 08:59:05 +00:00 |
|
Charles-Edouard Brétéché
|
e03f48128a
|
refactor: metrics configuration code (#5475)
* refactor: metrics configuration
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-25 13:14:55 +00:00 |
|
Charles-Edouard Brétéché
|
fa88f4a2ff
|
feat: add new filtering handlers (#5472)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-25 08:58:13 +00:00 |
|
Charles-Edouard Brétéché
|
67bd7b1edc
|
fix: remove filtering for policy admission handlers (#5462)
* fix: remove filtering for policy admission handlers
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* move kyverno filtering
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
|
2022-11-25 09:21:39 +01:00 |
|
Charles-Edouard Brétéché
|
56aae9f505
|
fix: admission reports stacking up (#5457)
* fix: admission reports stacking up
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* utils
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* warmup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix logger
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nits
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-24 14:21:08 +01:00 |
|
Charles-Edouard Brétéché
|
f4c2f24208
|
feat: improve handlers tracing code (#5442)
* feat: improve handlers tracing code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-23 06:50:55 +00:00 |
|
Diego Nicacio
|
b0f5b2f537
|
logging action (#5416)
Signed-off-by: diegonicacio <diegoonicacio@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
|
2022-11-21 21:39:20 +05:30 |
|
Charles-Edouard Brétéché
|
58933452c1
|
fix: typo (#5415)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-21 12:37:47 +05:30 |
|
Charles-Edouard Brétéché
|
ce94187bd3
|
feat: make traces better (#5412)
* feat: make traces better
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* error
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-20 14:42:57 +01:00 |
|
Charles-Edouard Brétéché
|
9983e82770
|
feat: add tracing middleware (#5397)
* feat: add tracing middleware
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add middleware
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add tracing to middlewares
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2022-11-18 09:18:00 +00:00 |
|
Charles-Edouard Brétéché
|
fdf5b840b6
|
refactor: propagate context through admission handlers (#5392)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-17 15:17:52 +00:00 |
|
Charles-Edouard Brétéché
|
ebe8618cdc
|
refactor: improve tracing package (#5391)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-17 14:41:49 +00:00 |
|
Prateek Pandey
|
2b4ff1ef6d
|
fix: synchronize source resource update to clone list resource (#5317)
* fix: synchronize source resource update to clone list target resource
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* add kuttl test to verify the clone list synchronized behavior
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* refactor functions parameters
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* fix the kuttl test description and behavior README
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* Use entire content to compare
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
|
2022-11-11 19:30:54 +00:00 |
|
Charles-Edouard Brétéché
|
cc8f643767
|
refactor: admission metrics (counter and latency) (#5245)
* refactor: move all middlewares in handlers sub package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: admission metrics (counter and latency)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* builder
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-09 18:52:20 +08:00 |
|
Charles-Edouard Brétéché
|
80c78a5439
|
fix: keep admission warnings (#5269)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
|
2022-11-08 16:52:57 +00:00 |
|
Charles-Edouard Brétéché
|
b71c0004d0
|
fix: account for error rules in mutation webhook (#5264)
* fix: account for error rules in mutation webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-08 12:36:13 +01:00 |
|
Charles-Edouard Brétéché
|
060f7bb873
|
refactor: admission response utils (#5234)
- refactor: admission response utils
- unit tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-08 09:35:08 +00:00 |
|
Charles-Edouard Brétéché
|
a08c8b03fe
|
refactor: move all middlewares in handlers sub package (#5244)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-07 14:53:40 +00:00 |
|
shuting
|
da84b777bc
|
fix: too much information for the Policy Rule Execution Latency metric (#5208)
* remove general_rule_latency_type
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove resource_request_operation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove resource_namespace
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove resource_kind
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
|
2022-11-04 14:31:23 +08:00 |
|
Charles-Edouard Brétéché
|
a64475a6db
|
refactor: health check system (#5176)
* refactor: health check system
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* filter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
|
2022-11-03 11:19:38 +01:00 |
|
Charles-Edouard Brétéché
|
f52da91b72
|
fix: early return in policy validation (#5200)
* fix: early return in policy validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-03 09:05:23 +00:00 |
|
shuting
|
3fc157717a
|
feat: support disabling schema validation on the patched resource (#5197)
* Support disable schema validation on the patched resource
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update api doc
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2022-11-03 08:12:44 +00:00 |
|
Charles-Edouard Brétéché
|
0696e54378
|
fix: content type in log (#5177)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-11-01 13:51:20 +00:00 |
|
Charles-Edouard Brétéché
|
d2658a1bc8
|
refactor: support Audit and Enforce validation failure actions (#5152)
* feat: remove policy mutation code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: support Audit and Enforce failure actions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update changelog
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
|
2022-11-01 09:56:52 +00:00 |
|
shuting
|
cf2b8dafa6
|
skip generating events on empty rule response (#5158)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2022-10-27 08:34:55 +00:00 |
|
Charles-Edouard Brétéché
|
e4bf66e756
|
feat: remove policy mutation for auto-gen rules (#5123)
* feat: remove policy mutation code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2022-10-25 23:43:46 +00:00 |
|
yinka
|
822dbdc011
|
feat: enable/disable Debug mode which shows entire AdmissionReview payload (#5024)
* work in progress PR
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add custom request struct
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* pass debug mode option through constructor and replace logger with klogr
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* make changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add another test case
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* removed unused function
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-10-21 16:17:49 +00:00 |
|
Charles-Edouard Brétéché
|
73712f3738
|
feat: add webhook server logger (#5063)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-10-19 13:12:55 +00:00 |
|
Charles-Edouard Brétéché
|
a0bcf7a966
|
fix: configure idle timeout in server (#5062)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-10-19 12:09:04 +00:00 |
|
Charles-Edouard Brétéché
|
6070092b6a
|
fix: image verification reports missing in admission mode (#5037)
* fix: image verification reports missing in admission mode
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
|
2022-10-19 11:25:47 +00:00 |
|
Charles-Edouard Brétéché
|
c4b3301ab0
|
fix: go routines not gracefully shut down in controllers (#5022)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
|
2022-10-19 08:54:48 +00:00 |
|
Pratik Shah
|
632bd99612
|
Fixed issue-4655: verifyImages is executed before mutate (#4996)
Signed-off-by: Pratik Shah <pratik@infracloud.io>
|
2022-10-18 08:38:28 +00:00 |
|
Vyankatesh Kudtarkar
|
f5748b1e70
|
remove RBACInfo check (#5015)
|
2022-10-17 14:47:06 +00:00 |
|
Charles-Edouard Brétéché
|
6270d40f50
|
fix: global anchor warning (#4962)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2022-10-17 17:15:57 +05:30 |
|
Vyankatesh Kudtarkar
|
f3e40efcd7
|
fix principal and role variables are not substituted (#5000)
|
2022-10-17 05:16:14 +00:00 |
|
Charles-Edouard Brétéché
|
ea1b64ab08
|
fix: skip admission in dry run requests (#4994)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
|
2022-10-17 04:01:06 +00:00 |
|
Charles-Edouard Brétéché
|
afe9036347
|
fix: add user info in admission request logs (#4969)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-10-14 16:29:48 +00:00 |
|
Charles-Edouard Brétéché
|
f0703a5c6b
|
fix: don't produce empty admission reports (#4966)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-10-14 15:55:51 +00:00 |
|
Charles-Edouard Brétéché
|
47780bf37f
|
fix: improve banned types management in reports (#4953)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
|
2022-10-14 23:20:30 +08:00 |
|
XDRAGON2002
|
03c41e7746
|
[Cleanup] Disable PolicySkipped events (#4913)
* remove skip events
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* update conditions
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* improve conditions
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* remove redundant function
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
|
2022-10-13 08:32:20 +00:00 |
|
Charles-Edouard Brétéché
|
b3021f5a57
|
refactor: openapi controller part 2 (#4910)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2022-10-12 22:24:16 +05:30 |
|
Charles-Edouard Brétéché
|
de67a507cd
|
refactor: openapi controller part 1 (#4901)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
|
2022-10-12 11:38:48 +00:00 |
|