1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Commit graph

6212 commits

Author SHA1 Message Date
Mathew Wicks
35e378358d
fix: chart app.kubernetes.io/instance label value (#7315)
Signed-off-by: Mathew Wicks <thesuperzapper@users.noreply.github.com>
2023-05-27 00:33:29 +02:00
Alok Naushad
ad1c2d6bca
test: pod restart on configmap/secret update (#7306)
* test: pod restart on secret update

Signed-off-by: Alok N <alokme123@gmail.com>

* fix: requested changes

Signed-off-by: Alok N <alokme123@gmail.com>

* fix: debug remove, secret

Signed-off-by: Alok N <alokme123@gmail.com>

---------

Signed-off-by: Alok N <alokme123@gmail.com>
2023-05-26 11:06:13 -04:00
Charles-Edouard Brétéché
f74eac4e52
fix: tls cipher suites (#7308)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-26 13:15:12 +00:00
Charles-Edouard Brétéché
cb56913364
fix: do not use release name in chart (#7303)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-26 11:01:48 +00:00
Chip Zoller
303e3fd76f
update note (#7298)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2023-05-26 10:37:59 +00:00
dependabot[bot]
fd7a25d0e3
chore(deps): bump github/codeql-action from 2.3.4 to 2.3.5 (#7302)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f0e3dfb303...0225834cc5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 15:53:56 +08:00
dependabot[bot]
e636eb99c5
chore(deps): bump github.com/notaryproject/notation-core-go (#7292)
Bumps [github.com/notaryproject/notation-core-go](https://github.com/notaryproject/notation-core-go) from 1.0.0-rc.3 to 1.0.0-rc.4.
- [Release notes](https://github.com/notaryproject/notation-core-go/releases)
- [Commits](https://github.com/notaryproject/notation-core-go/compare/v1.0.0-rc.3...v1.0.0-rc.4)

---
updated-dependencies:
- dependency-name: github.com/notaryproject/notation-core-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 01:47:34 +00:00
shuting
0938003aee
add kuttl tests (#7283)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-26 01:16:50 +00:00
Chip Zoller
64e3dde6ff
update versions (#7297)
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2023-05-26 08:53:28 +08:00
Marcus Vaal
a29582af2a
Fix: [Bug] registry is not defaulted to ghcr.io for backgroundController (#7286)
Signed-off-by: mvaal <mvaal@expediagroup.com>
2023-05-25 16:50:50 +00:00
dependabot[bot]
6133f4fbc3
chore(deps): bump oras.land/oras-go/v2 from 2.1.0 to 2.2.0 (#7290)
Bumps [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](https://github.com/oras-project/oras-go/compare/v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: oras.land/oras-go/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-25 16:17:14 +00:00
dependabot[bot]
580e01e625
chore(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (#7288)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](29b1f65c5e...f0e3dfb303)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 15:36:22 +00:00
dependabot[bot]
c2045a1496
chore(deps): bump actions/setup-python from 4.6.0 to 4.6.1 (#7289)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](57ded4d7d5...bd6b4b6205)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 23:02:47 +08:00
dependabot[bot]
22e9dd8a82
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#7274)
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.6.1 to 5.7.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 12:18:39 +00:00
Charles-Edouard Brétéché
492a6761f8
feat: add yaml util to check empty document (#7276)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-24 09:58:43 +00:00
dependabot[bot]
44a53d3bd7
chore(deps): bump sigs.k8s.io/controller-runtime from 0.14.6 to 0.15.0 (#7272)
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.14.6 to 0.15.0.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.14.6...v0.15.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 08:50:49 +00:00
dependabot[bot]
8160a44400
chore(deps): bump svenstaro/upload-release-action from 2.5.0 to 2.6.0 (#7270)
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](7319e4733e...58d5258088)

---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 08:23:24 +00:00
shuting
67cf3e1c96
fix latest version check (#7263)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-23 15:38:41 +00:00
Charles-Edouard Brétéché
f372adfa1a
fix: auto update webhooks not configuring fail endpoint (#7261)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-23 15:13:26 +00:00
Marc Brugger
2031134a28
quote image in error (#7259)
Signed-off-by: bakito <github@bakito.ch>
2023-05-23 16:47:47 +02:00
Jim Bugwadia
07be2d9d72
lazy evaluate vars in conditions (#7238)
* lazy evaluate vars in conditions

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove unnecessary conversion

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* Update test/conformance/kuttl/validate/clusterpolicy/standard/variables/lazyload/conditions/03-manifests.yaml

Signed-off-by: shuting <shutting06@gmail.com>

* Update test/conformance/kuttl/validate/clusterpolicy/standard/variables/lazyload/README.md

Signed-off-by: shuting <shutting06@gmail.com>

* added error check in test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

---------

Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2023-05-20 21:06:54 +00:00
dependabot[bot]
ccb6da143a
chore(deps): bump k8s.io/apiextensions-apiserver from 0.27.1 to 0.27.2 (#7242)
Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.27.1 to 0.27.2.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-20 07:24:37 +00:00
dependabot[bot]
05f411ba0d
chore(deps): bump k8s.io/kube-aggregator from 0.27.1 to 0.27.2 (#7241)
Bumps [k8s.io/kube-aggregator](https://github.com/kubernetes/kube-aggregator) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/kube-aggregator/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/kube-aggregator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 10:59:15 +00:00
dependabot[bot]
43f3ba5b84
chore(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#7239)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.27.6 to 1.27.7.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.27.6...v1.27.7)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 10:25:48 +00:00
dependabot[bot]
e2d79abb2d
chore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#7240)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 17:09:28 +08:00
shuting
ecd3d75704
fix: match logic misbehave (#7218)
* add rule name in ur for mutate existing

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix match logic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* linter fixes

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix the match logic to only apply to the new object, unless it's a delete request

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix unit tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-18 21:57:57 +00:00
dependabot[bot]
3ab84a2cb0
chore(deps): bump k8s.io/pod-security-admission from 0.27.1 to 0.27.2 (#7232)
Bumps [k8s.io/pod-security-admission](https://github.com/kubernetes/pod-security-admission) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/pod-security-admission/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/pod-security-admission
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-18 11:45:54 +00:00
dependabot[bot]
addfe22842
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#7229)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](03d0fecf17...dd6b2e2b61)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-18 11:04:23 +00:00
dependabot[bot]
e476e0c051
chore(deps): bump k8s.io/cli-runtime from 0.27.1 to 0.27.2 (#7228)
Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-18 09:41:34 +00:00
dependabot[bot]
80c9613436
chore(deps): bump k8s.io/apimachinery from 0.27.1 to 0.27.2 (#7227)
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.27.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.27.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-18 09:17:22 +00:00
Charles-Edouard Brétéché
a8aab34986
docs: add reports system design doc (#6949)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-18 07:19:02 +00:00
Charles-Edouard Brétéché
6cf0f36339
fix: do not exclude kube-system service accounts by default (#7225)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-17 22:23:30 +00:00
shuting
d99c000b17
fix: mutate existing auth check (#7219)
* fix auth check when using variables in ns

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add kuttl tests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-17 18:20:34 +02:00
Charles-Edouard Brétéché
1422fe6b44
fix: panic in reports controller (#7220)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-17 10:45:27 +00:00
dependabot[bot]
e56c795143
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#7215)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](204a51a57a...03d0fecf17)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-17 07:28:56 +00:00
dependabot[bot]
ea7a01c66e
chore(deps): bump codecov/codecov-action from 3.1.3 to 3.1.4 (#7207)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](894ff025c7...eaaf4bedf3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-16 20:56:50 +08:00
Ved Ratan
10ef443006
[Bug] Enforce message wrong (#7208)
* fix

Signed-off-by: Ved Ratan <vedratan8@gmail.com>

* fixed tests

Signed-off-by: Ved Ratan <vedratan8@gmail.com>

---------

Signed-off-by: Ved Ratan <vedratan8@gmail.com>
2023-05-16 09:54:26 +00:00
Jim Bugwadia
3af6ba90ac
handle Deny rules where conditions eval to true (#7204)
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-16 06:56:16 +00:00
Jim Bugwadia
26eb31a143
remove unused code (#7203)
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-05-16 13:30:07 +08:00
Charles-Edouard Brétéché
03df0f83a6
fix: http request metrics (#7197)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-15 19:26:17 +00:00
Charles-Edouard Brétéché
a3f3636bec
fix: cleanup controller metrics name (#7198)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-15 15:54:16 +00:00
Charles-Edouard Brétéché
12b6e0fc36
fix: remove policy-reporter from dev lab (#7196)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-15 15:13:42 +00:00
shuting
8e4dbe0729
fix: panic for policy variable validation (#7079)
* fix panic

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* check errors

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-15 14:27:45 +00:00
Charles-Edouard Brétéché
79a255a1e6
fix: use structured jsonpatch instead of byte arrays (#7186)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-13 16:56:54 +08:00
Charles-Edouard Brétéché
073309a8ae
fix: preconditions in mutate existing rules (#7183)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-12 15:43:36 +00:00
Charles-Edouard Brétéché
b3a56176e5
feat: add omit-events feature in helm chart (#7185)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-12 15:11:20 +00:00
Charles-Edouard Brétéché
83840a2462
refactor: hide json context from caller (#7139)
* refactor: hide json context from caller

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* unit tests

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-12 14:14:48 +00:00
Charles-Edouard Brétéché
4aabcafd12
feat: add logging feature to helm chart (#7181)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-05-12 12:09:01 +00:00
shuting
cbf15410c3
tweaks (#7166)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-12 11:27:02 +00:00
dependabot[bot]
e39fd9512e
chore(deps): bump github.com/distribution/distribution (#7178)
Bumps [github.com/distribution/distribution](https://github.com/distribution/distribution) from 2.8.1+incompatible to 2.8.2+incompatible.
- [Release notes](https://github.com/distribution/distribution/releases)
- [Commits](https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2)

---
updated-dependencies:
- dependency-name: github.com/distribution/distribution
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-12 10:52:44 +00:00