1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-13 11:18:47 +00:00
Commit graph

235 commits

Author SHA1 Message Date
shuting
5260b4f7bc
chore: bump k8s libs to 0.30 (#10285)
* chore: bump k8s libs to 0.30

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: update crds

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: bump kubectl-validate

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: fix tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: fix panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: fix linter

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: bump k8s

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix sum

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix: indent

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* chore: bump deps

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-04 15:09:44 +08:00
shuting
022620ef43
feat: add cleanup cronjobs for (cluster)ephemeralreports (#10325)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-05-29 12:19:57 +00:00
shuting
084336c5f5
feat: add a cleanup cronjob to delete urs (#10249)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-05-29 10:23:54 +00:00
Nicolas Lamirault
6bd52a28fb
feat(helm): GrafanaDashboard configuration (#10254)
* feat(helm): GrafanaDashboard configuration

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* feat(helm): documentation

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

---------

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2024-05-20 23:38:47 +08:00
Victor Boissiere
70eb981539
feat: add cronjob ttl support (#10083)
* feat: add cronjob ttl support

Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>

* fix: add artifacthub changes

Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>

* fix: run make codegen-helm-all

Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>

---------

Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>
2024-05-07 07:06:52 +00:00
André Bauer
693010563f
[kyverno helm chart] make webhook pod annotations configurable (#9875)
* make webhook pod annotations configurable

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* run make codegen-helm-all

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

---------

Signed-off-by: André Bauer <andre.bauer@staffbase.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-04-18 09:31:29 +00:00
rdark
0655f9c59d
Make ports configurable for background-controller & reports-controller (#9939)
Signed-off-by: Richard Clark <richard@rvvup.com>
Co-authored-by: Richard Clark <richard@rvvup.com>
2024-03-28 15:05:19 +00:00
Chip Zoller
299e4a0829
Default exclusions in webhooks (#9948) 2024-03-27 14:49:36 +01:00
Charles-Edouard Brétéché
7775541b46
fix: reports aggregation (#9697)
* chore: rename admission to ephemeral in reports aggregation controller

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix: reports aggregation

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* second queue

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* cleanup

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* nit

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* flag

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-08 10:36:01 +00:00
Charles-Edouard Brétéché
37340266ba
fix: add missing migrations (#9657)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-05 20:11:35 +01:00
Khaled Emara
589446da5d
chore(globalcontext): drop globalcontext flag (#9652)
Signed-off-by: Khaled Emara <mail@KhaledEmara.dev>
Co-authored-by: shuting <shuting@nirmata.com>
2024-02-05 16:31:08 +00:00
Charles-Edouard Brétéché
2b712107d2
feat: consider maxAPICallResponseLength (#9620)
* chore: move global context package out of engine

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* feat: consider maxAPICallResponseLength

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-02 15:35:57 +00:00
Charles-Edouard Brétéché
03af9831f3
feat: add global context support in helm chart (#9614)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-02 11:37:58 +00:00
Charles-Edouard Brétéché
1e0bac2d6f
feat: add global context crd to codegen (#9595)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-01 12:32:13 +00:00
Anushka Mittal
ce0c704086
Deploy specific controllers (#8849)
* Initial changes for deploy specific controllers

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>

* Include correct values in values.yaml

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>

* Remove check for other controllers

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>

* Sanity checks for other controllers

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>

* resolve lint errors

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>

* add separate flags for all crds; conditions for controller crd relation

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* rm global

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* rm global

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* values

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-02-01 10:14:05 +00:00
Sanskar Gurdasani
e738dd0124
configured backoff limit in chart cronjobs (#9569)
* configured backoff limit in chart cronjobs

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>

* Update charts/kyverno/values.yaml

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* Update charts/kyverno/values.yaml

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* codegen

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Sanskarzz <sanskar.gur@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-30 22:37:07 +00:00
Charles-Edouard Brétéché
9102753323
fix: make alternate reports storage transparent (#9553)
* fix: make alternate reports storage transparent

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* bg scan

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* aggregation

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* aggregation

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* rm manager

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* update

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-30 14:53:37 +00:00
Charles-Edouard Brétéché
3234d0c1df
replace wildcard permissions with explicit resources/operations (#9516)
* replace wildcard permissions with explicit resources/operations

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* core extra resources

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-29 13:35:05 +00:00
Charles-Edouard Brétéché
90cff77300
fix: CRDs codegen (#9542)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-29 09:45:52 +00:00
Brian Dunnigan
0ffb382282
#9529 Support adding extra elements to the default resourceFilters list (#9530)
Signed-off-by: Brian Dunnigan <bdunnigan@clarityinnovates.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
2024-01-26 22:46:20 +00:00
Vishal Choudhary
e6c39f31a5
feat: add a new API group reports.kyverno.io (#9521)
* feat: add new report interface

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* chore: reports.kyverno.io/v1 apigroup

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* chore: codegen

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* feat: add report manager

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* feat: add reports manager to reports controller

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* feat: add alternateReportStorage to helm chart

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: report utils deepcopy

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* init flag

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: wrong return value

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

---------

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-26 13:40:29 +00:00
Khaled Emara
3ef598c155
chore(helm): omit normal events by default (#9493)
* chore(helm): omit normal events by default

Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>

* fix(tests): fix tests related to events

Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>

---------

Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
2024-01-24 13:16:18 +01:00
Charles-Edouard Brétéché
2f4b823030
feat: improve crd migration helm hooks (#9481)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-22 14:13:29 +00:00
Mariam Fahmy
5fc7e96890
feat: migrate existing cleanup policies to the new storage version in helm hook (#9420)
* feat: migrate existing cleanup policies to the new storage version in helm hook

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix codegen

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix: use kyverno CLI migrate command

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-01-22 12:53:36 +01:00
Khaled Emara
566db3abfd
helm: add profiling support (#9338)
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
2024-01-22 02:08:43 +00:00
Mariam Fahmy
ea748276bb
feat: migrate existing policy exceptions to the new storage version in helm hook (#9412)
* feat: migrate existing policy exceptions to the new storage version in helm

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix: add permissions for the admission controller to patch exceptions

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* fix codegen

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* move migration hook to a separate directory

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* use cli

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix: update admission controller permissions

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-01-21 20:13:56 +00:00
shuting
6e5e7c745a
update bitnami/kubectl (#9408)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-01-16 06:04:29 +00:00
Mariam Fahmy
303fff21e3
feat: add podLabels to the hook jobs pod template (#9391)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-01-14 12:58:47 -05:00
treydock
cde4ac7154
Add global nodeSelector (#9339)
Allow a global node selector to apply to all pods in the kyverno Helm chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2024-01-05 23:28:16 +08:00
Frank Wittig
2a9262c325
Add imagePullSecrets to post-upgrade job (#9264)
Signed-off-by: Frank Wittig <frank@e5k.de>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2023-12-24 12:42:48 -05:00
treydock
8308a6c69c
Support setting global extraEnvVars (#9269)
Fixes #9243

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2023-12-22 22:07:11 +00:00
Mariam Fahmy
788a7a318c
fix: add tolerations and affinity to the post-upgrate hook (#9156)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-12-15 08:12:53 +00:00
Marc
7516e3494a
allow setting a priorityClassName for the cleanup job pods (#9106)
* allow setting a priorityClassName for the cleanup job pods

Signed-off-by: mheyer <heyer@babymarkt.de>

* fix README.md

Signed-off-by: mheyer <heyer@babymarkt.de>

---------

Signed-off-by: mheyer <heyer@babymarkt.de>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-12-07 14:58:41 +00:00
Zadkiel Aharonian
5e96b26a48
feat: webhook labels (#9015)
Signed-off-by: Zadkiel Aharonian <hello@zadkiel.fr>
Co-authored-by: shuting <shuting@nirmata.com>
2023-12-07 12:58:31 +00:00
Mariam Fahmy
a3279329eb
fix: add nodeSelector to the reports cleanup helm hook (#9065)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-12-04 06:38:28 +00:00
Mariam Fahmy
cb80329a79
fix: cleanup older policy reports (#9026)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-11-28 10:36:02 +00:00
treydock
7a55aca83d
Allow defining ca-certificates bundle for Kyverno deployments (#8969)
Document how to set proxy environment variables

Fixes #6749
Fixes #5205

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2023-11-21 15:47:32 +00:00
treydock
fcade6c88a
Allow excluding resources from config.resourceFilters (#8946)
Fixes #8860

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2023-11-21 14:41:16 +00:00
Dirk Pahl
d8c2c5818d
Make server ports configurable, resolves #7279 (#7728)
* Make server ports configurable, resolves #7279

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

* Make server ports configurable, resolves #7279

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

* Switch to flags instead of env vars

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

* Could not use internal package in webhooks pkg

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

* Add helm chart changes

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

* make codegen-docs-all

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

* make codegen-manifest-all

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>

---------

Signed-off-by: Dirk Pahl <dirk.pahl@deutschebahn.com>
Co-authored-by: Dirk Pahl <dirk.pahl@deutschebahn.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-11-17 14:19:53 +00:00
Matt Dainty
94281b0c95
fix: Add chart parameters for setting revisionHistoryLimit (#8907)
Signed-off-by: Matt Dainty <matt@bodgit-n-scarper.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
2023-11-16 18:50:17 +00:00
Vishal Choudhary
e1e521910e
[Helm] AdmissionReport cleanup job tag bump (#8708)
* update chart metadata

Signed-off-by: chipzoller <chipzoller@gmail.com>

* bump tag

Signed-off-by: chipzoller <chipzoller@gmail.com>

* adjust name

Signed-off-by: chipzoller <chipzoller@gmail.com>

* do not validate maintainers

Signed-off-by: chipzoller <chipzoller@gmail.com>

* feat: update codegen

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update codegen

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update kubeversion in helm template

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

---------

Signed-off-by: chipzoller <chipzoller@gmail.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: chipzoller <chipzoller@gmail.com>
2023-10-23 17:13:07 +08:00
Franco Hielpos
212445f2cf
feat: Implement global values for image registry in Kyverno Helm chart (#8625)
* feat: Add image registry to global values

Signed-off-by: Franco <franco@giantswarm.io>

* Fix indentation

Signed-off-by: Franco <franco@giantswarm.io>

* Update documentation

Signed-off-by: Franco <franco@giantswarm.io>

---------

Signed-off-by: Franco <franco@giantswarm.io>
2023-10-19 13:42:14 +00:00
Erik Godding Boye
1be3e6d763
fix(helm): add values for declaratively enabling PDBs (#8652)
* fix(helm): add values for declaratively enabling PDBs

Signed-off-by: Erik Godding Boye <egboye@gmail.com>

* update codegen docs

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
2023-10-16 16:44:20 +08:00
Mariam Fahmy
3d382e0e01
feat: move crds to a subchart (#8623)
* feat: move crds to a subchart

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* update codegen

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update crd configs: annotations and install options

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update default crd installation configuration to true

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* reset annotations

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update chart readme

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove subchart crd install option

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update crd chart version

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* configure crds labels

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix chart yaml file

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>

* revert crd subchart version to 0.0.0

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update install.yaml

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 10:22:49 +00:00
Rodrigo Fior Kuntzer
9c64b10cd2
fix: allow dropping metrics, labels and configuring histogram bucket boundaries to avoid high cardinality. (#8569)
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-12 09:50:27 +00:00
Mariam Fahmy
b80963374f
chore: enable policy exceptions by default (#8545)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 17:40:13 +00:00
Charles-Edouard Brétéché
4cabc3ce44
fix: make tuf feature in chart consistent with others (#8542)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:03:17 +00:00
Erik Godding Boye
8d2b68dc46
fix(helm): skip deployment replicas validation in non-int value (#8539)
* fix(helm): skip deployment replicas validation in non-int value

Signed-off-by: Erik Godding Boye <egboye@gmail.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 10:04:16 +00:00
Vishal Choudhary
d4d5d751b1
fix: disables TUF by default (#8509) 2023-09-22 14:32:57 +05:30
Vishal Choudhary
e2469415b7
feat: add support for custom sigstore using TUF (#8385)
* feat; add support for custom sigstore using TUF

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add kuttl test

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add commit hash

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add kyverno.yaml

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update kyverno deployment

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update ordering

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update deployment

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update create image step

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: remove wait step

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: install crane

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: set sha on install crane

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add cosign installer

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update custom deployment

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: helm chart linting

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update Chart.yaml

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* fix: helm values liniting error

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: remove step

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: kind-deploy-kyverno

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: create configmap in kyverno namespace

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update policy

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: create kyverno ns

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: use envfrom

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* fix: indentation

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update tuf root

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add sigstore volume

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: nit

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: remove tuf root

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: use default tuf instead :(

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update Create kind cluster

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: remove root

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update impl

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: nit

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: use custom test

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: remove force

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: cosign initialize

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: add yes flag

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* update manifest

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: move tuf to features

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: update comments

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* chore: helmchart generate

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: trailing white space

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: remove old fields

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* feat: decouple env config map from tuf

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* change the way we pass flags

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix: re add envConfigMap

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>

* fix env vars

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* remove envConfigMap

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-18 13:16:08 +00:00