dependabot[bot]
8edfc37a9e
chore(deps): bump actions/checkout from 2.4.0 to 3.1.0 ( #5564 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.4.0 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-05 09:43:16 +01:00
dependabot[bot]
70f9aebf0a
chore(deps): bump actions/cache from 3.0.8 to 3.0.11 ( #5565 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.8 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](fd5de65bc8...9b0c1fce7a
2022-12-05 08:58:10 +01:00
dependabot[bot]
bd0b9389c8
chore(deps): bump stefanprodan/helm-gh-pages from 1.5.0 to 1.7.0 ( #5534 )
...
Bumps [stefanprodan/helm-gh-pages](https://github.com/stefanprodan/helm-gh-pages ) from 1.5.0 to 1.7.0.
- [Release notes](https://github.com/stefanprodan/helm-gh-pages/releases )
- [Commits](b43a8719cc...0ad2bb3773
2022-12-02 12:52:56 +00:00
dependabot[bot]
b4a7873550
chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions ( #5532 )
...
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions ) from 1.3.0 to 2.0.1.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases )
- [Commits](6ca5574367...af2eb32266
2022-12-02 13:23:12 +01:00
dependabot[bot]
ad2bc5a8e6
chore(deps): bump github/codeql-action from 1.0.26 to 2.1.35 ( #5536 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1.0.26 to 2.1.35.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5f53256358...b2a92eb56d
2022-12-02 11:21:16 +00:00
shuting
ee9078a96a
bump slsa GH generator to 1.4.0 ( #5530 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-02 10:50:32 +00:00
dependabot[bot]
40ef481f78
chore(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 ( #5535 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3.1.0...83fd05a356d7e2593de66fc9913b3002723633cb )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 10:19:44 +00:00
dependabot[bot]
1baa59d2b2
chore(deps): bump sigstore/cosign-installer from 2.8.0 to 2.8.1 ( #5533 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](7cc35d7fdb...9becc61764
2022-12-02 10:47:04 +01:00
Charles-Edouard Brétéché
6e695f7cc1
chore: enable dependabot ( #5531 )
2022-12-02 08:56:09 +00:00
Charles-Edouard Brétéché
83bbf87ff6
feat: use admission review v1 ( #5464 )
...
* feat: use admission review v1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* patch type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-11-30 23:37:42 +08:00
Charles-Edouard Brétéché
987489d800
chore: stop using set-output in gh actions ( #5500 )
...
* chore: stop using set-output in gh actions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add quotes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add quotes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-30 11:53:30 +00:00
Prateek Pandey
48ebe0f4c6
ci: cancel redundant builds of workflow on push ( #5427 )
...
Use concurrency to ensure that only a single job or
workflow using the same concurrency group will run
at a time. A concurrency group can be any string or
expression.
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-11-23 21:29:57 +08:00
shuting
060d60de5a
udpate slsa to v1.3.0 ( #5419 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-11-21 22:26:53 +00:00
Chip Zoller
815a0e4297
Update version drop-downs; bump Trivy ( #5425 )
...
* bump Trivy scanner
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add 1.8.2 to version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-21 13:21:09 +00:00
Chip Zoller
987e6d1cf6
Fix incorrect step ID reference ( #5388 )
...
- remove unnecessary test files
- fix incorrect step ID reference
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-17 18:48:01 +05:30
Chip Zoller
e3d3f1d0fb
fix digest variable ( #5356 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-15 16:59:58 +00:00
Ian Lewis
d52c287cb0
Update SLSA generator workflow to v1.2.2 ( #5323 )
...
* Update SLSA generator workflow to v1.2.2
Signed-off-by: Ian Lewis <ianlewis@google.com>
* Allow slsa-github-generator workflows to use tags
Signed-off-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: Ian Lewis <ianlewis@google.com>
2022-11-15 06:08:09 +00:00
Charles-Edouard Brétéché
75080d297e
test: add kuttl debug failure ( #5339 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-14 20:34:56 +00:00
Charles-Edouard Brétéché
4e22ad26bf
chore: add kuttl in makefile ( #5254 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-07 18:01:25 +00:00
Charles-Edouard Brétéché
01b28abf91
fix: remove /approve from prow actions ( #5243 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-07 11:10:22 +00:00
XDRAGON2002
25f8d4498b
[Feature] Pin Dependencies by Hash ( #5168 )
...
* pin dependencies by hash
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* pin scripts
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-07 08:59:26 +00:00
Chip Zoller
da18305015
add kuttl tests ( #5204 )
...
- add kuttl tests
- try rekor: {url: "https://rekor.sigstore.dev "}
- add rekor{} object to last two policies
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-04 14:00:31 +00:00
Rishit Dagli
a41ceedd17
Add ability to use commands in comments ( #5154 )
...
* Add ability to use commands in comments
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Fix typo
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* reset resource version on update (#5157 )
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* skip generating events on empty rule response (#5158 )
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Fixed issue-5102: Show rule count and type in output (#5106 )
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* feature: SLSA Level 3 provenance generation for Kyverno images: kyverno init, kyverno and kyvernopre (#4268 )
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Pin action to specific hash
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Add `/approve`
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* fix: configure klog and global logger to use zapr in json mode (#5144 )
* configure klog and global logger to use zapr in json mode
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* make zapr compatible with klog's -v argument
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* remove changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* remove logLevel flag
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Pratik Shah <pratik@infracloud.io>
Co-authored-by: Zahid Khan <zahid.chashma@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: yinka <holayinkajr@gmail.com>
2022-10-31 10:34:17 +00:00
Zahid Khan
1fef873762
feature: SLSA Level 3 provenance generation for Kyverno images: kyverno init, kyverno and kyvernopre ( #4268 )
...
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-10-28 14:19:15 +00:00
Charles-Edouard Brétéché
e4bf66e756
feat: remove policy mutation for auto-gen rules ( #5123 )
...
* feat: remove policy mutation code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-25 23:43:46 +00:00
Stefan Prodan
7812626e61
ci: Fix install manifests publishing with Flux ( #5110 )
...
- use the correct version to tag artifacts
- add only the generated install.yaml to the artifact contents
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-21 12:29:55 +00:00
Stefan Prodan
96f0523d5a
ci: Use the Docker login action for GHCR auth ( #5091 )
...
Use the `docker/login-action` action and the default `GITHUB_TOKEN` for setting up the GHCR credentials for Flux and Cosign to be able to push OCI artifacts to ` ghcr.io/kyverno/manifests/kyverno`.
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-20 18:23:27 +00:00
Charles-Edouard Brétéché
ad2cbd3b33
feat: add simple conformance tests ( #5073 )
...
* feat: add simple conformance tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-20 12:17:33 +00:00
Abhiyant Gwalani
16f9003f7c
Created configuration file for Openssf scorecard ( #4778 )
...
Signed-off-by: Abhiyant Gwalani <71189932+abhiyant-10@users.noreply.github.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-19 12:57:45 +05:30
shuting
4741241054
fix env ( #5046 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-10-18 13:45:29 +00:00
shuting
994d207eb6
fix: Attempt to fix the CI failure, extract CI job push-sign-install-manifest ( #5035 )
...
* extract CI job push-sign-install-manifest
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix indent
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update env
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-10-18 09:31:31 +00:00
Batuhan Apaydın
29a26e54f7
chore: Push and sign install manifests to GHCR ( #4895 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Stefan Prodan <@stefanprodan>
Co-authored-by: Charles-Edouard Brétéché <@eddycharly>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-10-14 12:48:32 +00:00
Chip Zoller
b7247b5935
Update issue templates and scan for vulns action ( #4952 )
...
* update version drop-down
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add workflow to detect and report on image vulnerabilities
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* pin deps
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump JasonEtco/create-an-issue
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump versions in drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix background mode scan with request.operation
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Revert "bump versions in drop-downs"
This reverts commit 5fcea048ddf0d44c7aca
2022-10-13 22:11:58 +00:00
Batuhan Apaydın
38a15a948f
chore: add COSIGN_REPOSITORY env to ko-publish-dev step ( #4922 )
2022-10-13 10:55:39 +00:00
Batuhan Apaydın
f45584bfd6
chore: signing helm releases ( #4801 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-12 20:14:44 +00:00
Chip Zoller
5346bce5ca
Add workflow to detect and report on image vulns ( #4850 )
...
* update version drop-down
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add workflow to detect and report on image vulnerabilities
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* pin deps
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-10 15:10:16 +02:00
Charles-Edouard Brétéché
7e0884ca36
fix: publish yaml manifests in release instead of repo ( #4738 )
...
* fix: publish yaml manifests in release instead of repo
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* ignore
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* pin actions
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* messages
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix helm gen crds
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chart app version
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 15:12:43 +00:00
Batuhan Apaydın
e258004e76
chore: change charts registry url ( #4768 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 20:20:33 +00:00
Charles-Edouard Brétéché
c28c0f2f42
docs: add policy cache controller docs ( #4714 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-09-28 13:08:26 +00:00
Charles-Edouard Brétéché
332a5aa01f
chore: enable overriding images repo ( #4694 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-27 17:47:59 +00:00
Charles-Edouard Brétéché
e8839a3ff7
chore: bump minimum go version ( #4677 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-25 10:11:28 +00:00
Batuhan Apaydın
e35da69c92
chore: publish sbom result to a different repositry from an image ( #4665 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-21 22:06:34 -05:00
Shubham Gupta
f00c12e954
Integrate Sonarcloud and Nancy github action ( #3491 )
...
* Integrate Sonarcloud and Nancy github action
Integrate Sonarcloud for static code analysis and Nancy for analysing
dependencies
Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>
* fix: pin actions to commit sha
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix auth for pr
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-09-14 07:25:14 +00:00
shuting
c3e91fb357
update helm releases path ( #4596 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-09-12 07:36:46 +00:00
Chip Zoller
f7853bb699
update version drop-down ( #4579 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-09-10 09:45:00 -04:00
Charles-Edouard Brétéché
a0eba5bfeb
chore: preserve pr title in cherry picks ( #4573 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-09 18:03:43 +00:00
Batuhan Apaydın
ff7ed78b09
chore: add kocache ( #4482 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-09 09:00:25 +00:00
shuting
9297efa55f
add new patterns for releases ( #4552 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-09-08 17:34:09 +00:00
Vyankatesh Kudtarkar
aa6abd99f2
Support V2beta1 Version ( #4514 )
...
introduce new version V2beta1 which remove deprecated CRD
types from version v1.
Signed-off-by: Vyankatesh <vyankateshkd@gmail.com>
2022-09-08 11:19:16 +00:00
Charles-Edouard Brétéché
92e223b7ff
fix: api reference docs ( #4490 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-07 14:25:57 +08:00
Charles-Edouard Brétéché
3beb4fee28
chore: test for k8s 1.25 ( #4503 )
...
* chore: test for k8s 1.25
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* remove 1.21 tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-09-06 16:48:53 +02:00
Charles-Edouard Brétéché
870462cc6d
chore: add unit tests for pkg/utils/os ( #4509 )
...
* chore: add unit tests for pkg/utils/os
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* review
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-06 07:19:29 +00:00
Charles-Edouard Brétéché
5e5627e81f
refactor: verify codegen targets in makefile ( #4494 )
2022-09-02 09:49:35 +00:00
Charles-Edouard Brétéché
caafbb74b9
fix: fetch history in pre-checks job ( #4491 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-02 16:55:41 +08:00
Batuhan Apaydın
cd0d87542a
chore: publish helm charts to ghcr.io ( #4479 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-01 19:15:33 +00:00
Charles-Edouard Brétéché
b65d9fc5c6
chore: bump cache action and improve paths ( #4485 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 17:41:48 +00:00
Charles-Edouard Brétéché
89ccf7998f
chore: relax auto update PRs conditions ( #4486 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 17:14:57 +00:00
Charles-Edouard Brétéché
b8e2d69693
fix: release workflow ( #4483 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 16:19:19 +00:00
Charles-Edouard Brétéché
0c40cd8814
fix: auto update pr workflow ( #4478 )
2022-09-01 10:54:23 +00:00
Charles-Edouard Brétéché
6173013a6c
chore: enable cherry-pick bot ( #4470 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-31 19:12:00 +00:00
Charles-Edouard Brétéché
8ddc72d792
refactor: clearly separate makefile docker targets for build and publish ( #4454 )
...
* refactor: clearly separate makefile ko targets for build and publish
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: clearly separate makefile docker targets for build and publish
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-31 12:22:46 +08:00
Charles-Edouard Brétéché
fc79ca96a2
refactor: clearly separate makefile ko targets for build and publish ( #4450 )
...
* refactor: clearly separate makefile ko targets for build and publish
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-30 17:30:28 +02:00
Charles-Edouard Brétéché
2b495c7ef3
chore: fix workflows related to ko recent changes ( #4438 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-08-30 12:59:08 +08:00
Chip Zoller
1f6e7b17ce
Update issue template drop-down version numbers ( #4446 )
...
* add chipzoller to CODEOWNERS
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add explanation section
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump versions in issue template drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-08-29 21:41:04 +00:00
Charles-Edouard Brétéché
c35e73e39c
fix: ko login ( #4425 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 16:56:27 +00:00
Charles-Edouard Brétéché
e0da0c996c
fix: ko login ( #4424 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:54:48 +00:00
Charles-Edouard Brétéché
ce4377a54e
fix: ko login ( #4423 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 23:01:50 +08:00
Charles-Edouard Brétéché
5915f37f4d
fix: ko login ( #4422 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-26 14:25:30 +00:00
Charles-Edouard Brétéché
9e49b25484
refactor: makefile build targets ( #4418 )
...
* refactor: makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: makefile build targets
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:23:04 +08:00
Jason Hall
6055713dfc
Use ko to build images ( #4366 )
...
This updates Makefile targets to build images using `docker buildx
build` to use `ko build` instead.
End-to-end tests are accomplished by building and loading the image
directly into the KinD cluster via ko.
Also:
- use GitHub Actions token to push to ghcr.io (setup-ko sets this up for us)
- allow forks to push to their forked repo's packages (useful for testing)
Signed-off-by: Jason Hall <jason@chainguard.dev>
Signed-off-by: Jason Hall <jason@chainguard.dev>
2022-08-25 20:32:40 +02:00
Charles-Edouard Brétéché
cf0ee93de8
feat: enable autogen internals by default ( #4381 )
...
* feat: enable autogen internals by default
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* change e2e tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* change e2e tests matrix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-25 23:01:43 +08:00
Prateek Pandey
34fe6c9058
bump cosign deps version to 1.11.1 ( #4408 )
...
* bump cosign deps version to 1.11.1
to accommodate latest attestation verification fixes
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* bump github action go version to 1.18
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-08-25 08:24:49 +00:00
shuting
e2b77641cb
bump cosign version to 1.11.0 ( #4398 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-08-24 15:24:44 +00:00
Charles-Edouard Brétéché
91373e1329
fix: goimports check not working in ci job ( #4387 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-08-24 13:38:49 +00:00
Charles-Edouard Brétéché
144985ee5a
chore: fix golangcilint timeout ( #4388 )
...
* chore: fix golangcilint timeout
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix commit sha
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add .gitattributes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-24 21:08:24 +08:00
Charles-Edouard Brétéché
3d9417a58a
chore: add workflow to ensure github actions are pinned to a commit SHA ( #4390 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-23 22:02:13 +02:00
Charles-Edouard Brétéché
8fc1754df7
chore: fix fossa ci job ( #4382 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-23 13:30:32 +00:00
Tushar Dahiya
71af968eac
Update pr_documentation.md ( #4361 )
...
Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>
Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>
2022-08-21 22:05:00 +00:00
Chip Zoller
fbde1fbcbe
Template updates ( #4150 )
...
* add chipzoller to CODEOWNERS
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add explanation section
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-23 13:33:22 +00:00
Chip Zoller
d1f0671fee
update drop-downs ( #4081 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-06-06 23:54:35 +08:00
Prateek Pandey
0d44003386
refactor: bump KIND version to use v1.24.0 k8s release ( #3877 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-01 14:39:55 +00:00
Charles-Edouard Brétéché
8175fc15c9
chore: add previous pod logs in case of job failure ( #3978 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-20 20:34:55 +05:30
shuting
bccce5d9e3
Remove permissions in helm-release workflow ( #3901 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-05-12 08:12:17 +00:00
Charles-Edouard Brétéché
4107140a8d
chore: enable golangci-lint in ci ( #3852 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-10 10:22:34 +00:00
Sambhav Kothari
266bfa1077
Fix PR update flow and allow updates from release branches ( #3780 )
...
Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
2022-05-03 16:03:43 +08:00
Sambhav Kothari
0a9bcd5407
Auto-update PRs which are enabled for auto-merging ( #3766 )
2022-05-02 18:04:43 +00:00
treydock
0ae671ca7a
Cherry-pick release-1.6 Helm changes ( #3689 )
...
* Support releasing kyverno and kyverno-policies chart separately (#3672 )
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Add DELETE precondition back (#3657 )
* Add DELETE precondition back
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Add another example and test for 'any'
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-27 03:52:45 +00:00
Chip Zoller
029b69fa6b
Show warnings in Helm chart installation; update issue templates ( #3673 )
...
* add cherry pick requirement
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* adopt github issue forms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update PR template with test checklist reminders
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add "other" issue template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add "triage" label to all new issues
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* notes change
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* show warnings
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version numbers in issue templates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add CI file per comments
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* new line for linting
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* stop being smart
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* remove ci file
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-04-27 01:45:22 +00:00
Charles-Edouard Brétéché
2e1534bd9d
fix: api reference docs link ( #3664 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-25 21:07:42 +08:00
Charles-Edouard Brétéché
201e55fcfb
chore: remove e2e tests for kube 1.20 ( #3665 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-04-25 11:43:11 +08:00
shuting
8d24582286
Update GH workflow config ( #3588 )
2022-04-12 07:37:37 -07:00
Shubham Gupta
f70cd4222f
Update hash of dependencies instead of mutable version ( #3582 )
...
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-04-12 10:22:38 +01:00
Charles-Edouard Brétéché
975f6ba7c8
test: pass lock by value ( #3481 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-04-05 15:52:13 +00:00
Abhi Kapoor
18d4dadab6
Do not generate preconditions not met warning for audit policies ( #3487 )
...
* Do not generate preconditions not met warning for audit policies
Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>
* Update PR template to reeference the closing keyword
Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>
* Update pkg/engine/validation.go
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
* Update pkg/engine/validation.go
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-05 10:08:01 +00:00
Prateek Pandey
1b2a3c1085
fix: use github repo env instead of hardcoded repo name ( #3513 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-03-31 17:36:21 +08:00
Charles-Edouard Brétéché
80d1ccb26d
chore: add autogen internals e2e tests ( #3492 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-29 16:35:27 +00:00
Charles-Edouard Brétéché
20069c13c3
feat: stop mutating rules ( #3410 )
...
* feat: stop adding autogen annotation
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: stop mutating rules
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: stop mutating rules
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: use toggle
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: review comments
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-28 22:01:27 +08:00
Chip Zoller
e454c71aa6
PR and issue template updates per contributors' meetings ( #3428 )
...
* add cherry pick requirement
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* adopt github issue forms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update PR template with test checklist reminders
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add "other" issue template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add "triage" label to all new issues
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-03-19 21:31:54 -04:00
Charles-Edouard Brétéché
33df85cc0c
chore: remove check-helm-docs workflow ( #3408 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-03-16 13:55:21 -07:00
Abhinav Sinha
9bb7238a22
Add codecov to CI ( #3382 )
...
* Add `codecov` to CI
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
* Add `codecov` badge for `main` to `README.md`
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
* Addressed code review
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
2022-03-14 16:21:27 +08:00
Charles-Edouard Brétéché
51501cce9d
chore: check helm docs are up to date ( #3310 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-08 15:10:53 +00:00
Charles-Edouard Brétéché
8187b9331e
fix: invalid path in helm-test workflow ( #3344 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Sambhav Kothari <skothari44@bloomberg.net>
2022-03-08 01:08:46 +00:00
Charles-Edouard Brétéché
51db68ba20
chore: verify codegen in CI ( #3343 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-03-07 15:13:36 +05:30
Prateek Pandey
4846bd0293
fetch tag across all branches instead of current branch ( #3324 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-03-01 11:59:28 -08:00
Naman Lakhwani
fd7addd2fa
add separate step for digest ( #3321 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-03-01 20:05:14 +05:30
Naman Lakhwani
985e2cc158
adding check for digest and update git command
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-03-01 18:36:16 +05:30
Naman Lakhwani
378a1d6b95
Fix workflow using regex in main ( #3306 )
...
* using regex
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* added condition
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-02-25 08:48:11 +00:00
Naman Lakhwani
af98c00724
arranging permissions ( #3293 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-02-25 08:11:22 +00:00
Sambhav Kothari
c4075af3d1
Improve CLI test times by instantiating openapi controller once ( #3297 )
...
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-02-24 23:34:12 +08:00
skuethe
bf662b1ed4
fix: add support for other platforms before executing docker buildx ( #3296 )
2022-02-24 11:36:10 +00:00
Sambhav Kothari
e9e96e7b1c
Run E2E tests on all supported k8s versions ( #3256 )
2022-02-23 15:52:08 +00:00
Naman Lakhwani
a9c9b25bb5
latest will point to main ( #3285 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-02-23 15:30:49 +00:00
Naman Lakhwani
81ab535433
update trivy scanning ( #3284 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-02-23 10:40:07 +08:00
treydock
99efd8136f
Fix Helm releasing to preserve creation timestamps ( #3268 )
2022-02-21 15:50:42 +00:00
Sambhav Kothari
8c7f037c72
Improve E2E test CI timings ( #3250 )
...
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-02-17 17:47:35 -08:00
Chip Zoller
3dcf165d77
Issue forms and PR template adjustment ( #3213 )
...
* add cherry pick requirement
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* adopt github issue forms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-02-12 16:51:05 +00:00
treydock
4e0d8ca612
Update kyverno-policies chart with latest pod-security policies ( #3126 )
...
* Update kyverno-policies chart with latest pod-security policies
Fixes #3063
Fixes #2277
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update README to have better example
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use chart testing during e2e to test against ci values
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix e2e tests for Helm chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix Kyverno chart testing to actually test values, and fix networkpolicy template
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update README for exclusion
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Allow adding 'other' policies via Helm
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update Chart.yaml for kyverno-policies
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Bump minimum Kubernetes version in charts
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update kyverno-policies chart readme
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use version that should catch all pre-releases
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use version that should catch all pre-releases (part 2)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use same logic to get git tag by using Makefile target for updating Helm values
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
2022-02-04 14:47:36 +08:00
shuting
ae4d148318
Update dev image tag in Make targets ( #3159 )
...
* - update dev images tag; - update chart testing
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update to use dev tag when setting up e2e tests infra
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* default chart test image tag for busybox to latest
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* set image tag to latest for chart testing
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* correct tag
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove test tag in e2e.yaml
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-02-03 15:41:58 +08:00
shuting
c479b41d34
update workflow configurations to fix CI failure ( #3060 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-01-24 04:39:15 +00:00
Mritunjay Kumar Sharma
cdedf11a1c
bumps k8s libraries for k8s v1.23 upgrade for kyverno ( #3043 )
...
* bumps k8s libraries for k8s v1.23 upgrade for kyverno
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* fixes kustomize version
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* updates golang to v1.17 to test fails
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* updates logr package to 1.2.2
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* Fixed tests for `pkg/cosign` and `pkg/webhooks/generation`
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
* fix go-logr deps version issue
Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>
* fix kube-openapi commit hash
Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Abhinav Sinha <abhinav@nirmata.com>
Co-authored-by: prateekpandey14 <prateekpandey14@gmail.com>
2022-01-22 20:26:53 +08:00
Naman Lakhwani
73a02a5df3
fixing bildx version ( #3023 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-01-19 22:14:48 +08:00
Sambhav Kothari
8ddfcacd79
Fix permissions for image publish workflows ( #3021 )
...
All of the jobs in this workflow use the same set of permissions and this workflow is only run on pushes to master. Adding the appropriate permissions to read repository contents, publish packages and ID token for cosign.
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-19 11:39:51 +00:00
Naman Lakhwani
1580837526
refactoring github actions to remove duplication and enhancement for versioned sbom's ( #2979 )
...
* initial commit
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* adding docker-buildx-builder to makefile
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* reverting git describe in makefile
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* uploading sbom for each kyverno image
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* small nits
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* scanning image before pushing and removed cosign.pub
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-01-18 15:07:59 -08:00
Roee Landesman
665d2022d8
add top level permissions to remaining github workflows ( #2995 )
...
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
2022-01-16 03:57:35 +00:00
Roee Landesman
3e524b5586
Add github token permissions to improve ossf scorecard ( #2992 )
...
* Fix autogen issue with cronjob generator and foreach pod generator (#2989 )
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
* Add baseline read-all permissions
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
* remove extra read-all
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
* Add arm64 goarch to go releaser (#2991 )
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-15 17:14:22 -08:00
Jim Bugwadia
116f36622b
move guidelines up ( #2976 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-01-13 18:33:24 +08:00
Shubham Palriwala
1257388b97
feat: pin dependencies in gh actions ( #2952 )
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-01-13 05:23:05 +00:00
Naman Lakhwani
8350aadc58
Fix: CI job to release images ( #2929 )
...
* making required changes in images workflow
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* making required changes in release workflow
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2022-01-10 14:10:44 +00:00
Sambhav Kothari
9a9326928c
Fix the PR template checkboxes to render empty instead of brackets ( #2942 )
...
The current PR template doesn't render the checkboxes by default as unticked and instead as square brackets. This change
allows contributors to use the rendered UI to check boxes instead of manually fixing markdown.
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-09 12:02:57 -08:00
Naman Lakhwani
68c8790139
adding permissions in jobs ( #2924 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 19:35:45 +00:00
Naman Lakhwani
2f8bfc78b1
removing spaces ( #2923 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 17:12:11 +00:00
Naman Lakhwani
cda6310249
fix in image workflow ( #2921 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 22:48:20 +08:00
Naman Lakhwani
f330886af7
fixing cosign command ( #2915 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-05 13:02:17 -08:00
Naman Lakhwani
d126280184
keyless signing kyverno images with digest ( #2896 )
...
* signing with digest
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* keyless signing
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* adding annotations
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* keyless image signing with digest in release workflow
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-04 08:08:28 -08:00
Abhinav Sinha
2076f07b9f
added support for --git-branch flag and directory in git path for kyverno test cmd ( #2763 )
...
* added support for --git-branch flag and directory in git path for kyverno test cmd
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* added cli tests
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* replaced hard-coded Makefile test-cmd branch names with var GIT_BRANCH
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* moved `test-cmd` job from Makefile to github workflow
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* added `release*` branch to `e2e` workflow
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2021-12-20 14:09:53 +08:00
shuting
f4614213e5
Test publishing dev-test images ( #2848 )
...
* publish dev-* images
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add LD_FLAGS_DEV
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add IMAGE_TAG_LATEST_DEV
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove test statement
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2021-12-17 02:46:59 +00:00
Shubham Palriwala
ea3529f2d0
Trivy now scans local images ( #2744 )
...
* fix: trivy now scans entire container
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
* update github.com/docker/cli package for vulnerabilities
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix go.mod vulnerabilities
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2021-11-22 20:57:51 +08:00
Chip Zoller
7c5142b26a
Contributors updates, Kyverno CLI acknowledgements ( #2644 )
...
* add platform to bug template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Helm value updates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* linting, formatting, link updates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* linting, formatting, updates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Updates per contributors meeting; linting, fixes
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Updated templates with acknowledgement of CLI parity
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* git => GitHub
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-11-06 11:08:42 -04:00
Jose Armesto
831a9826d1
Restructure project to follow standards ( #2632 )
...
Signed-off-by: Jose Armesto <github@armesto.net>
2021-10-29 18:13:20 +02:00
Marcus Noble
a923dce631
Cleanup imports ( #2635 )
...
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-29 12:24:26 +02:00
Vinod Anandan
a07274f234
Update gh-gomod-generate-sbom
...
Signed-off-by: Vinod Anandan <vinod@owasp.org>
2021-10-23 14:41:05 +01:00
ShubhamPalriwala
5417b9d3c1
feat: shift sigs and sbom
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-13 21:34:04 +05:30
NoSkillGirl
0ff18dca6f
removed log for e2e test
...
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 16:21:32 +05:30
NoSkillGirl
37b91245cb
corrected metric server name
...
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 15:48:53 +05:30
NoSkillGirl
d1a78e14f3
debugging
...
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-10-11 15:48:53 +05:30
Shubham Palriwala
ae4fb488bf
fix: sign kyverno-cli ( #2480 )
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-05 22:28:40 -07:00
Jim Bugwadia
8437582622
Merge branch 'main' into sign-and-generate-sbom
2021-10-05 14:49:06 -07:00
ShubhamPalriwala
92ca609c7c
ci: scan kyverno-image on each build
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-10-05 16:38:55 +05:30
ShubhamPalriwala
187f054809
feat: add SBOM using cosign
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
ShubhamPalriwala
f3318767d8
feat: sign images using cosign on release
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
ShubhamPalriwala
614975b1c6
feat: sign images using cosign on build
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
2021-09-27 15:26:11 +05:30
treydock
e1daf2085d
Switch Helm CRDs back to kyverno chart and move Policies to dedicated chart ( #2357 )
...
* Switch Helm CRDs back to kyverno chart and move Policies to dedicate chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix policies chart labels
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Remove README items moved to kyverno-policies chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-09-22 13:56:10 -07:00
Pooja Singh
adb785831f
fix | e2e test cases are failing with busybox image ( #2422 )
...
* removing charts from push and pull ignore
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* updated tag replace logic
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* linting fix
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-09-21 13:07:46 -07:00
Anita-ihuman
afae554a7b
Fixed a typo in config file ( #2407 )
...
* create configuration for behaviour bot
Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
* adding contributor images
Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
* fixed typo in config.yml
Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
* including config file to ignore.
Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
2021-09-20 15:04:16 -07:00
Anita-ihuman
ac7082d76e
configured Behaviour bot. ( #2402 )
...
* create configuration for behaviour bot
Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
* adding contributor images
Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
2021-09-16 13:34:07 -07:00
shuting
e288ed7fd2
Fix upgrade issue from 1.4.2 to 1.4.3-rc1 ( #2387 )
...
* update git command to get tag in 'v*' format
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add label "appVersion" to report change request
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix linter issue
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update git hash
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-09-14 01:06:56 -07:00
treydock
1f756c37ac
Only release Helm charts on tags ( #2281 )
...
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-08-20 15:06:58 -07:00
treydock
45e95c2217
Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted ( #2218 )
...
* Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Make E2E tests work with new chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Seems Helm lint needs values.yaml
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Can't use ct install for the CRDs because will end up getting uninstalled after test
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Ensure helm release accounts for new CRD chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update CRD chart versions
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Make CRD chart version match main kyverno chart version
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Bump chart versions
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-08-12 13:54:17 -07:00
shuting
6ba341ff9b
- update Make target; - update release workflow config; - update PR template ( #2257 )
...
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-08-12 09:58:25 -07:00
Vyankatesh Kudtarkar
adb0170001
Automate CLI binaries releases ( #2236 )
...
* fix issue
* fix comment
* fix comment
* fix comment
* add md file
* ignore /release
* fix issue
2021-08-10 09:07:46 -07:00
Chip Zoller
bbee030b75
add platform to bug template ( #2246 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-08-09 14:37:58 -07:00
shuting
4c99b51fb7
Remove GitHub Releaser & Add app version in Helm notes ( #2191 )
...
* - remove github releaser
- add app version in Helm notes
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update chart var
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-27 10:28:28 -07:00
georgekaz
c73a14eba2
add tests before release ( #2174 )
...
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-20 17:06:56 -07:00
shuting
3de6128147
Bugfixes/helm release ( #2173 )
...
* bump helm version
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update helm-release trigger paths
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* disable linting
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* disable linting
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 12:49:37 -07:00
shuting
2de0af635e
Bump Helm version ( #2167 )
...
* bump helm version
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update helm-release trigger paths
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-07-20 00:15:33 -07:00
georgekaz
216a4e13bf
Fix helm-release workflow ( #2150 )
...
* add checkout step to helm releaser.
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
Increment version
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
* disable version check, revert version no. to last released
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-19 13:01:17 -07:00
georgekaz
b9e77575be
Chart changes merged,not deployed,iterate version ( #2111 )
...
* Chart changes merged,not deployed,iterate version
kyverno#2073 - Updates chart version to v1.4.2 - merged 13 days ago but not deployed
kyverno#2081 - Fix Helm release during tag - merged 9 days ago
kyverno#2037 - updated chart contents but not chart version - not released - merged 7 days ago
kyverno#2103 - updated chart contents but not chart version - not released - merged 3 hours ago
Status - main branch shows chart version is v1.4.2, git tag is v1.4.1 and latest helm chart on artifacthub.io/packages/helm/kyverno/kyverno is v1.4.1
This PR just iterates the chart version so that it's built, but I think chart versions should be incremented as part of the normal PR/merge process if chart elements are changed
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
* break the helm release out into it's own workflows
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
* workflow fixes
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
* don't run helm-release on PR. Remove git config bit
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-07-14 12:10:41 -07:00
Jim Bugwadia
13caaed8b7
Feature/cosign ( #2078 )
...
* add image verification
* inline policy list
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* cosign version and dependencies updates
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add registry initialization
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add build tag to exclude k8schain for cloud providers
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add build tag to exclude k8schain for cloud providers
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* generate deep copy and other fixtures
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix deep copy issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* mutate images to add digest
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add certificates to Kyverno container for HTTPS lookups
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* align flag syntax
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update docs
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update dependencies
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update dependencies
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* patch image with digest and fix checks
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* hardcode image for demos
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add default registry (docker.io) before calling reference.Parse
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix definition
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* increase webhook timeout
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix args
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* run gofmt
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* rename for clarity
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix HasImageVerify check
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* align make test commands
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* align make test commands
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* align make test commands
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter error
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* format
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* handle API conflict and retry
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* format
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix reviewdog issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix make for unit tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* improve error message
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix durations
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* handle errors in tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* print policy name
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add retries and duration to error log
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix time check in tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* round creation times in test
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix retry loop
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove timing check for policy creation
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix e2e error - policy not found
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update string comparison method
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix test Generate_Namespace_Label_Actions
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add debug info for e2e tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix error
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix generate bug
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix format
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add check for update operations
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* increase time for deleteing a resource
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix check
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Shuting Zhao <shutting06@gmail.com>
2021-07-09 18:01:46 -07:00
treydock
c479517c53
Fix Helm release during tag ( #2081 )
...
Fixes #2057
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-29 13:36:30 -07:00
Arsh Sharma
9efd58f667
deleted bot ( #2059 )
...
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-23 00:23:33 -07:00
Arsh Sharma
431b36f34e
updating the bot to auto label issues and PRs ( #2042 )
...
* changed labeler bot
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
* fixed label for hold
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 12:10:25 -07:00
shuting
6d5e988ebe
BugFix - update the annotation lastRequestTimestamp from active instances ( #2019 )
...
* fix webhook monitor - inactive instance did not get latest request timestamp
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add checks for registered webhook configs
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update veridy_deployment.sh
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add debug steps in e2d workflow
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix CI errors
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-15 18:39:22 -07:00
RinkiyaKeDad
4e6cdb9005
moved bot yaml to workflows
...
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-15 12:44:23 +05:30
Arsh Sharma
15e4a4e4ca
initial commit ( #2005 )
...
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-14 23:35:40 -07:00
treydock
f1491fe6d3
Allow metrics service annotations to be defined separate from main service ( #1988 )
...
* Allow metrics service annotations to be defined separate from main service
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Add test for metrics during Helm deployment testing
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Make services separate for kustomize
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Run 'make kustomize-crd'
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix e2e tests for metrics
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix Helm chart for metrics service
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix helm chart testing
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-10 13:53:29 -07:00
Pooja Singh
e227636271
1947/e2e generate policy ( #1951 )
...
* fixed generate flow
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added test for generate policy with clone
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* small conflict fix
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* print logs for e2e
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* changing log level
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added wait while creating policy
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* remove log level from e2e
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added a clusterpolicy check while creating a namespaced resource in e2e tests
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* updated the github_action name for e2e tests
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* changing waiting time to 1 sec
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* remove log
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
Co-authored-by: Shuting Zhao <shutting06@gmail.com>
2021-06-07 12:36:00 -07:00
Yashvardhan Kukreja
b0ef84c581
added e2e tests: ensuring the availability of kyverno's prometheus metrics-server
...
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-05-24 08:09:17 +05:30
Nicolas Lamirault
d298bd2403
Fix: Link to pr_documentation file ( #1872 )
...
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2021-05-04 09:47:11 -07:00
Chip Zoller
e2c522f4c6
fix link to PR doc ( #1803 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-04-15 10:34:02 -07:00
treydock
67973c2776
Add Helm tests to Github Actions ( #1793 )
...
This reverts commit 2749280b6c
2021-04-13 10:39:27 -07:00
shuting
2749280b6c
Revert "Add Helm tests to Github Actions ( #1790 )" ( #1792 )
...
This reverts commit 9c7f7019f3
2021-04-12 21:57:21 -07:00
treydock
9c7f7019f3
Add Helm tests to Github Actions ( #1790 )
...
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-04-12 20:55:13 -07:00
Chip Zoller
fae48094d8
add PR docs guide ( #1788 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-04-12 18:00:29 -07:00
treydock
0131f375f1
Register webhooks only once service endpoint is ready ( #1741 )
...
* Register webhooks only once service endpoint is ready
Fixes #1740
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Wait for webhook to become ready in main loop
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Better error handling and logging around checking endpoint
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Log soft failure as info, remove redundant return
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-03-30 13:46:01 -07:00
Vyankatesh Kudtarkar
04dc3ddfe3
Remove sample Dir and Remove testcases from test_runner ( #1686 )
...
* remove sample Dir and remove testcases form test_runner
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
* change git URL for test
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
* fix fmt issue
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
* remove unused policy and test yamls
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
* fix yaml path issue
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
2021-03-16 14:35:32 -07:00
shuting
c816cf3d69
Add certificate renewer in webhook registration controller ( #1692 )
...
* load TLS pair from existing secret, if applicable
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* remove Kyverno managed secrets during shutdown
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* - add certificate renewer; - re-structure certificate package
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* commit un-saved file
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* eliminate throttling requests while registering webhook configs
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* disable webhook monitor (in old pod) during rolling update
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* remove webhook cleanup logic from init container
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update PR template
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update link to the website repo
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update repo name
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-03-16 11:31:04 -07:00
Raj Babu Das
08643773c3
removing go.sum from github workflow and adding unused pkg check ( #1698 )
...
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
2021-03-11 10:14:46 -08:00
Jim Bugwadia
16a61978c9
add issue configuration
2021-03-07 14:31:18 -08:00
Jim Bugwadia
0e9d3c8456
Delete scenario-to-support.md
2021-03-07 14:24:23 -08:00
Jim Bugwadia
94970c7632
Update issue templates
2021-03-07 13:45:27 -08:00
Raj Babu Das
7a1629aa9d
Adding parallel GitHub pipeline to reduce the build time ( #1635 )
...
* refactoring github workflow
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
* refactoring github workflow
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
* stage-pipeline
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
* Refactoring release and push github workflow
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
* refactoring github workflow
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
* adding release-cli-via-krew
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
2021-02-22 14:48:11 -08:00
Raj Babu Das
0b832a038d
Adding multi arch support in all kyverno components (AMD6 and ARM64) ( #1542 )
...
* Adding multi arch support
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* Adding multi arch support
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* minor refactors
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* adding buildx action in e2e.yaml
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* Adding kyvernopre
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* Adding kyvernopre
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* Adding amd build
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* Adding go env
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* minor fix
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* removing docker tag
Signed-off-by: Raj Das <mail.rajdas@gmail.com>
* Adding local dockerfile build command
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
2021-02-18 18:09:01 -08:00
Chip Zoller
6d2d2e3c1b
Actually fix contributor link in PR template ( #1575 )
...
* update links and formatting in PR template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update policy submission request template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* actually fix contrib guidelines
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* actually fix contrib guidelines
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-02-10 08:57:43 -08:00
Chip Zoller
4dbfb9490b
update links and formatting in PR template ( #1573 )
...
* update links and formatting in PR template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update policy submission request template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-02-09 15:02:15 -08:00
Yashvardhan Kukreja
426475b16c
added: gofmt check over the existing github workflows ( #1553 )
...
* added: gofmt check over the existing github workflows
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
* added: gofmt check with logs added
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-02-09 11:34:13 -08:00
shuting
54d49ed412
revet GitHub action change for krew ( #1484 )
...
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-01-20 14:17:39 -08:00
Shuting Zhao
f95771a3b8
add dependency to go.sum
2021-01-08 18:47:28 -08:00
Jim Bugwadia
947ebf135b
ignore docs
2021-01-07 21:17:03 -08:00
Ihor Dvoretskyi
ee31fabcbc
FOSSA scanning added ( #1407 )
...
Signed-off-by: GitHub <noreply@github.com>
2020-12-17 10:48:24 -08:00
Yuvraj
5ecdfda4e0
Improve github action ( #1385 )
...
* Improve github action
Improve the github action
fix issue
Trigger Krew on relese and skip prerelease
Updated create infrastructure script
* More changes
* More changes
* Added check for prerelease
* Added check for prerelease
* Revert change
2020-12-15 11:46:53 -08:00
