mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
3800 commits 15 branches 540 tags 276 MiB
Commit graph

3800 commits

This branch
This branch
All branches
Author SHA1 Message Date
Vyankatesh Kudtarkar
5c50191d8a
change matchGVK logic (#2736) 
* change matchGVK logic

* fix issue

* add testcases

* add testcase core

* format code

* fix comment
 2021-11-24 22:17:32 +08:00
Igor Urazov
9e10eef422
Don't check for Prom Operator apiVersion (#2723) 
`.Capabilities.APIVersions.Has` function has limitations when running with
`helm template`, which is common step in multiple CD tools. In order to
properly resolve `Capabilities.APIVersions` `helm template` has to run
with `--validate` option and connect to cluster that has Prom Operator
CRDs installed.

As this template is opt-in and user has to set value to enable this,
apiVersion check doesn't provide much value and can be removed.

Signed-off-by: Ihor Urazov <iurazov@healthjoy.com>
 2021-11-23 15:12:43 -05:00
Jim Bugwadia
3c9430d2fc
handle missing predicate type (#2743) 
* handle missing predicate type

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update github.com/docker/cli package for vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix go.mod vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-22 10:49:21 -08:00
Vyankatesh Kudtarkar
4c28540f83
fix crd sync issue (#2634) 2021-11-22 21:52:45 +08:00
Shubham Palriwala
ea3529f2d0
Trivy now scans local images (#2744) 
* fix: trivy now scans entire container

Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>

* update github.com/docker/cli package for vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix go.mod vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-22 20:57:51 +08:00
Jim Bugwadia
8a0d465d90
fix signature (#2740) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-19 16:12:12 +08:00
Jim Bugwadia
189c6f8cda
fix dependabot issue and remove stale entries in go.mod (#2741) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-19 16:11:38 +08:00
vivek kumar sahu
3e7c469d2e
set default value of "request.operation" to "CREATE" (#2688) 
* set default value of "request.operation" equals to "CREATE"

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* handles the value of "request.operation" as "CREATE" in the CLI

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* fixed the failing e2e test case

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* Added logs

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* Added test case

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
 2021-11-18 16:09:35 +01:00
Kumar Mallikarjuna
7f95bee23c
Added time_since() custom JMESPath function (#2680) 
* Added time_since() custom JMESPath function

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Remove time.Layout (not supported in Go 1.16)

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Modify time_since() for 3 arguments

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Add tests for functions_test.go

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Timestamp literals and tabulated tests

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Remove layout map and default to RFC3339

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-11-17 21:17:17 +01:00
Jose Armesto
1ff16ba5d4
Do not log error when resource is not namespaced (#2730) 
Signed-off-by: Jose Armesto <github@armesto.net>
 2021-11-17 15:09:00 +01:00
Steven E. Harris
f90b982903
Allow use of "pods/binding" subresource (#2721) 
For cases where a policy matches the "Bindings" kind in the "core/v1"
API group and version, adjust the pertinent Webhook configuration rule
to use the "pods/binding" subresource.

Doing so allows observing and reacting to the Kubernetes
scheduler (and its "extenders") assigning pods to nodes, before any
other system actors observe that assignment. This is an opportune
moment in between the pod' creation and a kubelet starting it running.

Signed-off-by: Steven E. Harris <seh@panix.com>
 2021-11-16 22:26:22 +01:00
Vyankatesh Kudtarkar
fa95132806
Fix: Hard-coded ClusterRoleName in OwnerRef breaks (#2718) 
* fix hardcoded clusterrole name

* Fix label
 2021-11-16 19:32:42 +08:00
Kumar Mallikarjuna
e3c17972a8
Update CHANGELOG (#2727) 
Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-11-16 19:31:36 +08:00
Anushka Mittal
94395ac243
Wildcard values (#2692) 
* wildcard-support

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* Added unit tests

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* improvements in anyin and allin

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-11-15 15:02:46 +01:00
Anushka Mittal
497514fd94
Fixes in new operators (#2704) 
* fixes in operators to in many-to-one comparison

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* corrected allnotin

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* correction for duplicates

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-11-12 11:15:16 +01:00
Anushka Mittal
7d423f97c4
added check for misspelled fields in condition (#2707) 
* added check for misspelled fields in condition

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>

* corrections in error message

Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
 2021-11-11 17:57:18 +01:00
Batuhan Apaydın
b5615b6380
feat: create new builder for buildx (#2703) 
Co-authored-by: Erkan Zileli <erkan.zileli@trendyol.com>
Co-authored-by: Furkan Turkal <furkan.turkal@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Co-authored-by: Erkan Zileli <erkan.zileli@trendyol.com>
Co-authored-by: Furkan Turkal <furkan.turkal@trendyol.com>
 2021-11-10 21:07:40 +01:00
Kumar Mallikarjuna
17e671bf53
Remove redundant PDB (#2598) 
* Remove field podDisruptionBudget.enabled

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Update CHANGELOG.md

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Update CRDs

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Update CHANGELOG to 1.5.2-rc1

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Remove enabled flag

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-11-09 09:15:28 -08:00
Marcus Noble
8690f8b142
Handle reports with missing result property (#2696) 
* Handle reports with missing result property

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Make use of type structs

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Fix import

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Fix cast from map to struct

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-11-09 12:03:15 +01:00
Bricktop
ef553e6e78
Add CODEOWNERS file for maintainers (#2686) 
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-11-09 09:28:52 +01:00
Pooja Singh
5195bc5bf2
added skip status for generate (#2657) 2021-11-08 20:11:29 -08:00
Danny__Wei
84c44c0827
obtain webhook config name dynamically (#2698) 2021-11-08 20:09:19 -08:00
shuting
0f0c070072
Fix memory issue - RCR conversion (#2678) 2021-11-08 15:53:21 -08:00
Pooja Singh
0e8341166d
ignoring generate kinds from mutate webhook (#2656) 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-11-06 23:06:00 +05:30
Chip Zoller
7c5142b26a
Contributors updates, Kyverno CLI acknowledgements (#2644) 
* add platform to bug template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Helm value updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting, formatting, link updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting, formatting, updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Updates per contributors meeting; linting, fixes

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Updated templates with acknowledgement of CLI parity

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* git => GitHub

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-11-06 11:08:42 -04:00
Pritish Samal
4810dda3e9
fix typo in comments (#2685) 
Signed-off-by: CIPHERTron <pritish.samal918@gmail.com>
 2021-11-06 16:05:31 +01:00
Jim Bugwadia
50cb1859c3
add keyless verification (#2677) 
* add keyless verification

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* run make fmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix linter warning

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* wrap error with details

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-04 23:26:22 -07:00
Jim Bugwadia
e5e849acfe
Fix image var in cmdline (#2673) 
* add image substitution

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rm foreach test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add error checks

Signed-off-by: ShutingZhao <shutting06@gmail.com>

Co-authored-by: ShutingZhao <shutting06@gmail.com>
 2021-11-03 14:06:47 -07:00
shuting
04189e450c
bump chart version to release fix for https://github.com/kyverno/kyverno/pull/2655 (#2672) 
Signed-off-by: ShutingZhao <shutting06@gmail.com>
 2021-11-03 16:15:01 -04:00
Jim Bugwadia
5c16ee738a
redo variable validation (#2647) 
* redo variable validation

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle quotes for JMESPath - escaping

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix tests and linter issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix fmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-03 11:16:55 -07:00
Yulia Nedyalkova
40d30df726
Fix bug in event creation for failed policies (#2652) 
Signed-off-by: yulianedyalkova <julianedialkova@gmail.com>
 2021-11-03 11:55:58 +01:00
Batuhan Apaydın
4eab46fb7d
feat: support other key methods (#2607) 
* feat: support other key methods

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Furkan Turkal <furkan.turkal@trendyol.com>
Co-authored-by: Erkan Zileli <erkan.zileli@trendyol.com>

* feat: support fetch attestations from repository

Signed-off-by: Furkan <furkan.turkal@trendyol.com>
Co-authored-by: Batuhan <batuhan.apaydin@trendyol.com>
Signed-off-by: Furkan <furkan.turkal@trendyol.com>

* fix: parameter type

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

* fix error check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Furkan Turkal <furkan.turkal@trendyol.com>
Co-authored-by: Erkan Zileli <erkan.zileli@trendyol.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-03 00:45:35 -07:00
treydock
5d24070422
Add OSC related adopters (#2658) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-11-03 00:45:02 -07:00
Vyankatesh Kudtarkar
6eb7cf57f7
bug fix : Kyverno policies block uninstall of Kyverno (#2659) 
* bug fix uninstall kyverno  issue

* rename the methods
 2021-11-02 23:44:32 -07:00
Kumar Mallikarjuna
8f6028701e
Add nil checks in custom deep copy function (#2664) 
Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-11-02 14:05:57 -07:00
Kumar Mallikarjuna
57d32e4883
Fix deep copy methods (#2651) 
* Fix deep copy methods

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Implemented deep copy for apiextensions.JSON

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>

* Resolve redundant type assertions

Signed-off-by: Kumar Mallikarjuna <kumarmallikarjuna1@gmail.com>
 2021-11-01 21:48:02 -07:00
treydock
6c46ffffd9
Allow Helm CRD management to be disabled (#2655) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-11-01 19:21:10 -07:00
Jim Bugwadia
e701b7aceb
re-apply policies to managed pods (#2648) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-01 11:08:24 -07:00
Jim Bugwadia
de9fb567f0
Merge pull request #2643 from yashvardhan-kukreja/issue-2629/metrics-result-fix-up 
Fix: RuleResult label to be correctly populated while registering respective metrics
 2021-10-31 02:19:51 -07:00
Bricktop
f42144b929
Improve consistency in jmesPath functions test file (#2640) 
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
 2021-10-29 14:45:03 -07:00
Jim Bugwadia
675b3608a4
Merge pull request #2630 from JimBugwadia/handle_cosign_payload_variations 
handle Cosign payload variations
 2021-10-29 14:36:29 -07:00
Yashvardhan Kukreja
43d4b549ab
Fix: RuleResult label to be correctly populated while registering respective metrics 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-10-30 02:56:04 +05:30
Jim Bugwadia
4019d6b8b2 merge main and fmt 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-10-29 09:18:47 -07:00
Jose Armesto
831a9826d1
Restructure project to follow standards (#2632) 
Signed-off-by: Jose Armesto <github@armesto.net>
 2021-10-29 18:13:20 +02:00
Marcus Noble
1966c82c6d
Fix various go lint issues (#2639) 
* Fix various go lint issues

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Fix if mistake

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>

* Simplified returns

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 17:06:03 +02:00
Lukasz Jakimczuk
40b579ccd7
Improving readability (#2638) 
Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>
 2021-10-29 14:48:22 +02:00
Marcus Noble
373420aa6d
Fix go vet errors (#2637) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 14:09:11 +02:00
Lukasz Jakimczuk
ca975b8e99
*Range Operators (#2622) 
* Range operator: first iteration

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Changing hyphen to colon

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Accounting for negative numbers

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* View on the second version

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Adding tests to the operator

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Renoving negative support

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Adding comment

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Signing

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Going for the regexp version of operator

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>

* Adding negative range operator

Signed-off-by: Łukasz Jakimczuk <lukasz.j@giantswarm.io>
 2021-10-29 13:48:23 +02:00
Marcus Noble
a923dce631
Cleanup imports (#2635) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 12:24:26 +02:00
Marcus Noble
9932525c3c
Tidy up some of the apply command output code (#2633) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 12:16:13 +02:00