1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-15 17:51:20 +00:00
Commit graph

45 commits

Author SHA1 Message Date
Shivkumar Dudhani
5b8ab3842b
Support variable substitution (#549)
* initial commit

* variable substitution

* update tests

* update test

* refactor engine packages for validate & generate

* update vendor

* update toml

* support variable substitution in overlay mutation

* missing update

* fix indentation in logs

* store context values as single JSON document using merge patches.

* remove duplicate functions

* fix message string

* Handle processing of policies in background (#569)

* remove condition check while generating mutation patch as conditions are verified in the first iteration

* initial commit

* background policy validation

* correct message

* skip non-background policy process for add/update

* fix order to correct policy registration

* update comment

Co-authored-by: shuting <shutting06@gmail.com>

* refactor

Co-authored-by: shuting <shutting06@gmail.com>
2019-12-30 17:08:50 -08:00
shuting
ded0183aa2
Merge pull request #478 from nirmata/472_update_apiversion
472 update apiversion
2019-11-13 15:19:27 -08:00
Shuting Zhao
b67577994a update apiversion to v1 in code 2019-11-13 13:41:08 -08:00
Shivkumar Dudhani
7a12e12cb5
skip validation if the resource updates dont violate policy rules (#477) 2019-11-13 13:13:07 -08:00
Shuting Zhao
81ac13cb05 lookup policies from policy store in webhook 2019-11-13 12:15:51 -08:00
Shuting Zhao
5a3ed62b13 Merge branch 'master' into 345_support_usergroup_info
# Conflicts:
#	pkg/engine/validation_test.go
#	pkg/webhooks/annotations.go
#	pkg/webhooks/annotations_test.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
2019-11-11 19:19:08 -08:00
Shuting Zhao
586b197b00 user sharedInformer for rolebindings and clusterrolebindings 2019-11-11 15:43:13 -08:00
Shuting Zhao
03e85c2266 make getRoleRef a separate package 2019-11-11 14:52:09 -08:00
Shuting Zhao
8496a483dc - remove resource info per rule; - add resource info in each failed admission request 2019-11-06 17:14:32 -08:00
shuting
5c38c28904
Merge pull request #369 from nirmata/368_bug
update engineResponse Name
2019-10-08 16:02:07 -07:00
shivkumar dudhani
70ff2fa177 update engineResponse Name 2019-10-08 10:57:24 -07:00
Shuting Zhao
2077409c85 fix 365 annotation_bug 2019-10-07 18:31:14 -07:00
shivkumar dudhani
2669b0ae6b set default ValidationFailureAction to 'audit' 2019-09-06 10:18:45 -07:00
shivkumar dudhani
b66c1b7f0c remove exlude kind checks 2019-09-04 10:40:49 -07:00
shivkumar dudhani
fa53519e2a change CRD Name to ClusterPolicy & ClusterPolicyViolations 2019-09-03 14:51:51 -07:00
shivkumar dudhani
d43b4d93c2 rebase with master 2019-08-30 01:08:54 -07:00
shivkumar dudhani
116203282d fix patches 2019-08-26 16:10:19 -07:00
shivkumar dudhani
5b80da32ba replace policyInfo with engineResponse 2019-08-26 13:34:42 -07:00
shivkumar dudhani
b062d70e29 initial redesign 2019-08-23 18:34:23 -07:00
Shuting Zhao
a83e5c1d05 Merge commit '2192703df1bb26cb8b30a1aece6f9afeed09b214' into 254_dynamic_webhook_configurations
# Conflicts:
#	pkg/engine/generation.go
#	pkg/engine/overlay.go
#	pkg/engine/utils.go
#	pkg/engine/utils_test.go
#	pkg/gencontroller/controller.go
#	pkg/gencontroller/generation.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
2019-08-19 16:44:38 -07:00
shivkumar dudhani
44db8b064e resource description: support list of namespaces 2019-08-17 09:45:57 -07:00
Shuting Zhao
a110efb96c Merge branch 'policyViolation' into 254_dynamic_webhook_configurations
# Conflicts:
#	main.go
#	pkg/annotations/annotations.go
#	pkg/annotations/controller.go
#	pkg/controller/controller.go
#	pkg/controller/controller_test.go
#	pkg/engine/engine.go
#	pkg/engine/generation.go
#	pkg/engine/mutation.go
#	pkg/engine/validation.go
#	pkg/event/controller.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/policyvalidation.go
#	pkg/webhooks/report.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
2019-08-14 19:00:37 -07:00
Shuting Zhao
e87c72291f - Patch resource between every rule application - move mutation & validation to mutate webhook 2019-08-14 11:51:01 -07:00
shivkumar dudhani
aed0ed0dc1 clean up 2019-08-14 10:01:47 -07:00
shivkumar dudhani
1e621146be test policy engine on admission requests 2019-08-09 16:55:43 -07:00
shivkumar dudhani
373d9a45ad clean up mutation 2019-08-09 12:59:37 -07:00
shivkumar dudhani
94a6f1a71a match % exclude resources 2019-07-23 23:34:03 -04:00
shivkumar dudhani
b839d4f134 change flag field 2019-07-23 18:29:44 -04:00
shuting
ba7ae52a90
Merge pull request #227 from nirmata/226_bug
hack to ignore selfLink generation
2019-07-23 11:02:22 -07:00
shivkumar dudhani
8a24798ca0 hack to ignore selfLink generation 2019-07-23 13:24:21 -04:00
shivkumar dudhani
4e40a49133 comments 2019-07-23 00:55:45 -04:00
shivkumar dudhani
63ef0f8fe4 cleanup 2019-07-23 00:38:04 -04:00
shivkumar dudhani
a7aab6fdc6 annotatiosn and name key change 2019-07-23 00:10:18 -04:00
shivkumar dudhani
d5979e8387 comment debug logs 2019-07-22 20:39:41 -04:00
shivkumar dudhani
2554919dc3 fallback if status not found 2019-07-22 20:10:06 -04:00
shivkumar dudhani
658fd18a95 set kind, reset seflink,annotations,resourceVersion, generation & observerd generation before comparions for annotation changes 2019-07-22 18:50:09 -04:00
shivkumar dudhani
3cb978c16f clean up + fix bugs 2019-07-19 20:30:55 -07:00
shivkumar dudhani
d68c4ea033 check for annotattions for resource updates only 2019-07-19 13:53:36 -07:00
shivkumar dudhani
9fcb4b7b10 bypass annotation additions 2019-07-19 12:47:20 -07:00
shivkumar dudhani
f9b5ac9a27 flag, violations 2019-07-18 10:22:20 -07:00
shivkumar dudhani
a36ed10425 change flag & corrections 2019-07-16 15:53:14 -07:00
shivkumar dudhani
f47910da53 update flag & support ValidationFailureAction flag 2019-07-15 19:14:42 -07:00
shivkumar dudhani
68a6751990 restructure webhooks pkg 2019-07-15 16:07:56 -07:00
shivdudhani
39a17911c3 code review corrections 2019-06-19 14:05:23 -07:00
shivdudhani
50b0da48a1 support comma seperated kinds 2019-06-18 11:47:45 -07:00