Charles-Edouard Brétéché
73712f3738
feat: add webhook server logger ( #5063 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 13:12:55 +00:00
Charles-Edouard Brétéché
a0bcf7a966
fix: configure idle timeout in server ( #5062 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 12:09:04 +00:00
Charles-Edouard Brétéché
6070092b6a
fix: image verification reports missing in admission mode ( #5037 )
...
* fix: image verification reports missing in admission mode
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-19 11:25:47 +00:00
Charles-Edouard Brétéché
c433242cd3
fix: setup max procs with correct logger ( #5059 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 10:44:29 +00:00
Charles-Edouard Brétéché
eac23af077
fix: detection of kyverno going down ( #5055 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-19 10:06:48 +00:00
Charles-Edouard Brétéché
749c1bab3b
fix: do not update reports when they are identical ( #5056 )
...
* fix: do not update reports when they are identical
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 09:32:43 +00:00
Charles-Edouard Brétéché
c4b3301ab0
fix: go routines not gracefully shut down in controllers ( #5022 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-19 08:54:48 +00:00
Charles-Edouard Brétéché
cdfac95cdb
fix: account for policy/rule deletion in aggregated reports ( #5048 )
...
* fix: account for policy/rule deletion in aggregated reports
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* reduce delay
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-19 08:16:28 +00:00
Abhiyant Gwalani
16f9003f7c
Created configuration file for Openssf scorecard ( #4778 )
...
Signed-off-by: Abhiyant Gwalani <71189932+abhiyant-10@users.noreply.github.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-19 12:57:45 +05:30
Charles-Edouard Brétéché
5aec07215f
feat: add image verification support to background scan ( #5047 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-18 15:23:02 +00:00
Charles-Edouard Brétéché
5a09a78350
feat: add controller logger helper ( #5029 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-18 14:42:43 +00:00
shuting
4741241054
fix env ( #5046 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-10-18 13:45:29 +00:00
Charles-Edouard Brétéché
e7fac3a57f
fix: lease log message ( #5030 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-18 12:46:09 +00:00
Charles-Edouard Brétéché
a15853910b
feat: make shutdown more graceful ( #5031 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-18 10:55:33 +00:00
Charles-Edouard Brétéché
583a27da3d
fix: lower default qps/burst ( #5034 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-18 10:18:16 +00:00
shuting
994d207eb6
fix: Attempt to fix the CI failure, extract CI job push-sign-install-manifest ( #5035 )
...
* extract CI job push-sign-install-manifest
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix indent
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update env
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-10-18 09:31:31 +00:00
Pratik Shah
632bd99612
Fixed issue-4655: verifyImages is executed before mutate ( #4996 )
...
Signed-off-by: Pratik Shah <pratik@infracloud.io>
2022-10-18 08:38:28 +00:00
Charles-Edouard Brétéché
4b3a7b7da8
fix: add more infos in reports printers ( #5027 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-18 09:56:14 +02:00
Brian Provenzano
382c8c4ca0
Enable adding annotations to configmaps in the helm chart ( #4984 )
...
* fix: add user info in admission request logs (#4969 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Brian Provenzano <bproven@gmail.com>
* fix: missing autogen rules in status (#4971 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Brian Provenzano <bproven@gmail.com>
* fix: config reloading not working correctly (#4951 )
* fix: config reloading not working correctly
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nits
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Brian Provenzano <bproven@gmail.com>
* enable adding annotations to configmaps in the helm chart
Signed-off-by: Brian Provenzano <bproven@gmail.com>
* add entry to artifacthub.io release notes in Chart.yaml
Signed-off-by: Brian Provenzano <bproven@gmail.com>
* change name of annotation keys; codegen the readme docs
Signed-off-by: Brian Provenzano <bproven@gmail.com>
* feat: Add container registry setting on Helm Chart (#4281 )
To make the customization of the container registries easier, eg.
a custom private registry, this change adds a new property on the
images configuration to allow setting a custom image registry
without needing to customize the repository of the image.
Signed-off-by: Samuel Torres <samuelpirestorres@gmail.com>
Signed-off-by: Brian Provenzano <bproven@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Brian Provenzano <bproven@gmail.com>
Signed-off-by: Samuel Torres <samuelpirestorres@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Samuel Torres <samuelpirestorres@gmail.com>
2022-10-18 08:52:57 +02:00
Shivansh Yadav
becf73227b
validate patchJSON6902 ( #4469 )
...
* validate patchJSON6902
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
* validate patchJSON6902
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
* test: validateJSON6902 tests
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
* validate patchJSON6902
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
* test: validate patchJSON6902
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
Signed-off-by: Shivansh-yadav13 <yadavshivansh@gmail.com>
Signed-off-by: Shivansh Yadav <yadavshivansh@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-17 15:25:03 +00:00
Vyankatesh Kudtarkar
f5748b1e70
remove RBACInfo check ( #5015 )
2022-10-17 14:47:06 +00:00
Charles-Edouard Brétéché
cb0410dcf1
fix: policy not denied when kinds set is empty ( #5016 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-17 14:10:42 +00:00
Charles-Edouard Brétéché
6270d40f50
fix: global anchor warning ( #4962 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-17 17:15:57 +05:30
Charles-Edouard Brétéché
a89fbac333
fix: don't process non background policies in background scan ( #5008 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-17 13:01:41 +02:00
Charles-Edouard Brétéché
02e832a771
fix: update policy status ( #5006 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-17 09:28:33 +00:00
Prateek Pandey
2bd6c62b55
fix: use default retry with retryfunc for a conflict ( #4973 )
...
DefaultRetry is the recommended retry for a conflict
where multiple clients are making changes to the same resource
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-17 08:18:52 +00:00
Chip Zoller
b522274d74
updates with case insensitivity guarantee ( #4954 )
...
* updates with case insensitivity guarantee
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix syntax
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-17 07:43:12 +00:00
Charles-Edouard Brétéché
3ebb6284cc
refactor: add update status helper ( #4985 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-17 05:52:54 +00:00
Vyankatesh Kudtarkar
f3e40efcd7
fix principal and role variables are not substituted ( #5000 )
2022-10-17 05:16:14 +00:00
Charles-Edouard Brétéché
ea1b64ab08
fix: skip admission in dry run requests ( #4994 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-17 04:01:06 +00:00
Charles-Edouard Brétéché
aedaa412a0
fix: webhooks not registering when using name override ( #4992 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-17 01:21:43 +00:00
Charles-Edouard Brétéché
b732158831
feat: add metrics server and kube-prometheus-stack to argocd lab ( #4995 )
...
* feat: add policy-reporter to argocd lab
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: add metrics server and kube-prometheus-stack to argocd lab
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-16 17:34:58 +00:00
Charles-Edouard Brétéché
ac3b5eed22
feat: add startup probes support ( #4896 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: treydock <tdockendorf@osc.edu>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
2022-10-16 18:50:28 +02:00
Charles-Edouard Brétéché
7aefa89839
feat: add policy-reporter to argocd lab ( #4988 )
...
* feat: add policy-reporter to argocd lab
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* readme
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
2022-10-16 17:39:43 +02:00
Charles-Edouard Brétéché
3686f6506c
docs: add resource exclusions note in helm docs ( #4989 )
...
* docs: add resource exclusions note in helm docs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-16 06:58:56 -04:00
Charles-Edouard Brétéché
42b224aa26
chore: add myself in approvers ( #4990 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-15 23:55:00 +00:00
Samuel Torres
8dc56d3f68
feat: Add container registry setting on Helm Chart ( #4281 )
...
To make the customization of the container registries easier, eg.
a custom private registry, this change adds a new property on the
images configuration to allow setting a custom image registry
without needing to customize the repository of the image.
Signed-off-by: Samuel Torres <samuelpirestorres@gmail.com>
2022-10-15 11:48:36 -04:00
Charles-Edouard Brétéché
5f6b04ca69
fix: config reloading not working correctly ( #4951 )
...
* fix: config reloading not working correctly
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nits
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 17:36:46 +00:00
Charles-Edouard Brétéché
1f3c429cd7
fix: missing autogen rules in status ( #4971 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 17:02:10 +00:00
Charles-Edouard Brétéché
afe9036347
fix: add user info in admission request logs ( #4969 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 16:29:48 +00:00
Charles-Edouard Brétéché
f0703a5c6b
fix: don't produce empty admission reports ( #4966 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 15:55:51 +00:00
Charles-Edouard Brétéché
47780bf37f
fix: improve banned types management in reports ( #4953 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-14 23:20:30 +08:00
Charles-Edouard Brétéché
e749907302
fix: missing watchers in resource report controller ( #4967 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 13:55:50 +00:00
Batuhan Apaydın
29a26e54f7
chore: Push and sign install manifests to GHCR ( #4895 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Stefan Prodan <@stefanprodan>
Co-authored-by: Charles-Edouard Brétéché <@eddycharly>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-10-14 12:48:32 +00:00
Pratik Shah
caab013a86
Fixed issue-4530: Added separate attestor type for secrets and KMS ( #4733 )
...
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Vyankatesh <vyankateshkd@gmail.com>
2022-10-14 09:40:46 +00:00
Charles-Edouard Brétéché
064980bd9a
fix: admission reports printer ( #4950 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 08:22:00 +00:00
Charles-Edouard Brétéché
7ceea1a08f
chore: bump a few deps ( #4943 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-14 07:13:19 +00:00
Pratik Shah
8a0083105d
Added support to specify key signature algorithm in verifyImages ( #4855 )
...
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Pratik Shah <pratik@infracloud.io>
2022-10-14 05:39:57 +00:00
Charles-Edouard Brétéché
16aca2816f
fix: don't report ready until certs are valid ( #4934 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-10-14 04:23:42 +00:00
Chip Zoller
b7247b5935
Update issue templates and scan for vulns action ( #4952 )
...
* update version drop-down
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add workflow to detect and report on image vulnerabilities
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* pin deps
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump JasonEtco/create-an-issue
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump versions in drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix background mode scan with request.operation
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Revert "bump versions in drop-downs"
This reverts commit 5fcea048ddf0d44c7aca
2022-10-13 22:11:58 +00:00
