Shivkumar Dudhani
|
5b8ab3842b
|
Support variable substitution (#549)
* initial commit
* variable substitution
* update tests
* update test
* refactor engine packages for validate & generate
* update vendor
* update toml
* support variable substitution in overlay mutation
* missing update
* fix indentation in logs
* store context values as single JSON document using merge patches.
* remove duplicate functions
* fix message string
* Handle processing of policies in background (#569)
* remove condition check while generating mutation patch as conditions are verified in the first iteration
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* fix order to correct policy registration
* update comment
Co-authored-by: shuting <shutting06@gmail.com>
* refactor
Co-authored-by: shuting <shutting06@gmail.com>
|
2019-12-30 17:08:50 -08:00 |
|
shuting
|
ded0183aa2
|
Merge pull request #478 from nirmata/472_update_apiversion
472 update apiversion
|
2019-11-13 15:19:27 -08:00 |
|
Shuting Zhao
|
b67577994a
|
update apiversion to v1 in code
|
2019-11-13 13:41:08 -08:00 |
|
Shivkumar Dudhani
|
7a12e12cb5
|
skip validation if the resource updates dont violate policy rules (#477)
|
2019-11-13 13:13:07 -08:00 |
|
Shuting Zhao
|
81ac13cb05
|
lookup policies from policy store in webhook
|
2019-11-13 12:15:51 -08:00 |
|
Shuting Zhao
|
5a3ed62b13
|
Merge branch 'master' into 345_support_usergroup_info
# Conflicts:
# pkg/engine/validation_test.go
# pkg/webhooks/annotations.go
# pkg/webhooks/annotations_test.go
# pkg/webhooks/mutation.go
# pkg/webhooks/server.go
# pkg/webhooks/validation.go
|
2019-11-11 19:19:08 -08:00 |
|
Shuting Zhao
|
586b197b00
|
user sharedInformer for rolebindings and clusterrolebindings
|
2019-11-11 15:43:13 -08:00 |
|
Shuting Zhao
|
03e85c2266
|
make getRoleRef a separate package
|
2019-11-11 14:52:09 -08:00 |
|
Shuting Zhao
|
8496a483dc
|
- remove resource info per rule; - add resource info in each failed admission request
|
2019-11-06 17:14:32 -08:00 |
|
shuting
|
5c38c28904
|
Merge pull request #369 from nirmata/368_bug
update engineResponse Name
|
2019-10-08 16:02:07 -07:00 |
|
shivkumar dudhani
|
70ff2fa177
|
update engineResponse Name
|
2019-10-08 10:57:24 -07:00 |
|
Shuting Zhao
|
2077409c85
|
fix 365 annotation_bug
|
2019-10-07 18:31:14 -07:00 |
|
shivkumar dudhani
|
2669b0ae6b
|
set default ValidationFailureAction to 'audit'
|
2019-09-06 10:18:45 -07:00 |
|
shivkumar dudhani
|
b66c1b7f0c
|
remove exlude kind checks
|
2019-09-04 10:40:49 -07:00 |
|
shivkumar dudhani
|
fa53519e2a
|
change CRD Name to ClusterPolicy & ClusterPolicyViolations
|
2019-09-03 14:51:51 -07:00 |
|
shivkumar dudhani
|
d43b4d93c2
|
rebase with master
|
2019-08-30 01:08:54 -07:00 |
|
shivkumar dudhani
|
116203282d
|
fix patches
|
2019-08-26 16:10:19 -07:00 |
|
shivkumar dudhani
|
5b80da32ba
|
replace policyInfo with engineResponse
|
2019-08-26 13:34:42 -07:00 |
|
shivkumar dudhani
|
b062d70e29
|
initial redesign
|
2019-08-23 18:34:23 -07:00 |
|
Shuting Zhao
|
a83e5c1d05
|
Merge commit '2192703df1bb26cb8b30a1aece6f9afeed09b214' into 254_dynamic_webhook_configurations
# Conflicts:
# pkg/engine/generation.go
# pkg/engine/overlay.go
# pkg/engine/utils.go
# pkg/engine/utils_test.go
# pkg/gencontroller/controller.go
# pkg/gencontroller/generation.go
# pkg/webhooks/mutation.go
# pkg/webhooks/server.go
|
2019-08-19 16:44:38 -07:00 |
|
shivkumar dudhani
|
44db8b064e
|
resource description: support list of namespaces
|
2019-08-17 09:45:57 -07:00 |
|
Shuting Zhao
|
a110efb96c
|
Merge branch 'policyViolation' into 254_dynamic_webhook_configurations
# Conflicts:
# main.go
# pkg/annotations/annotations.go
# pkg/annotations/controller.go
# pkg/controller/controller.go
# pkg/controller/controller_test.go
# pkg/engine/engine.go
# pkg/engine/generation.go
# pkg/engine/mutation.go
# pkg/engine/validation.go
# pkg/event/controller.go
# pkg/webhooks/mutation.go
# pkg/webhooks/policyvalidation.go
# pkg/webhooks/report.go
# pkg/webhooks/server.go
# pkg/webhooks/validation.go
|
2019-08-14 19:00:37 -07:00 |
|
Shuting Zhao
|
e87c72291f
|
- Patch resource between every rule application - move mutation & validation to mutate webhook
|
2019-08-14 11:51:01 -07:00 |
|
shivkumar dudhani
|
aed0ed0dc1
|
clean up
|
2019-08-14 10:01:47 -07:00 |
|
shivkumar dudhani
|
1e621146be
|
test policy engine on admission requests
|
2019-08-09 16:55:43 -07:00 |
|
shivkumar dudhani
|
373d9a45ad
|
clean up mutation
|
2019-08-09 12:59:37 -07:00 |
|
shivkumar dudhani
|
94a6f1a71a
|
match % exclude resources
|
2019-07-23 23:34:03 -04:00 |
|
shivkumar dudhani
|
b839d4f134
|
change flag field
|
2019-07-23 18:29:44 -04:00 |
|
shuting
|
ba7ae52a90
|
Merge pull request #227 from nirmata/226_bug
hack to ignore selfLink generation
|
2019-07-23 11:02:22 -07:00 |
|
shivkumar dudhani
|
8a24798ca0
|
hack to ignore selfLink generation
|
2019-07-23 13:24:21 -04:00 |
|
shivkumar dudhani
|
4e40a49133
|
comments
|
2019-07-23 00:55:45 -04:00 |
|
shivkumar dudhani
|
63ef0f8fe4
|
cleanup
|
2019-07-23 00:38:04 -04:00 |
|
shivkumar dudhani
|
a7aab6fdc6
|
annotatiosn and name key change
|
2019-07-23 00:10:18 -04:00 |
|
shivkumar dudhani
|
d5979e8387
|
comment debug logs
|
2019-07-22 20:39:41 -04:00 |
|
shivkumar dudhani
|
2554919dc3
|
fallback if status not found
|
2019-07-22 20:10:06 -04:00 |
|
shivkumar dudhani
|
658fd18a95
|
set kind, reset seflink,annotations,resourceVersion, generation & observerd generation before comparions for annotation changes
|
2019-07-22 18:50:09 -04:00 |
|
shivkumar dudhani
|
3cb978c16f
|
clean up + fix bugs
|
2019-07-19 20:30:55 -07:00 |
|
shivkumar dudhani
|
d68c4ea033
|
check for annotattions for resource updates only
|
2019-07-19 13:53:36 -07:00 |
|
shivkumar dudhani
|
9fcb4b7b10
|
bypass annotation additions
|
2019-07-19 12:47:20 -07:00 |
|
shivkumar dudhani
|
f9b5ac9a27
|
flag, violations
|
2019-07-18 10:22:20 -07:00 |
|
shivkumar dudhani
|
a36ed10425
|
change flag & corrections
|
2019-07-16 15:53:14 -07:00 |
|
shivkumar dudhani
|
f47910da53
|
update flag & support ValidationFailureAction flag
|
2019-07-15 19:14:42 -07:00 |
|
shivkumar dudhani
|
68a6751990
|
restructure webhooks pkg
|
2019-07-15 16:07:56 -07:00 |
|
shivdudhani
|
39a17911c3
|
code review corrections
|
2019-06-19 14:05:23 -07:00 |
|
shivdudhani
|
50b0da48a1
|
support comma seperated kinds
|
2019-06-18 11:47:45 -07:00 |
|