Charles-Edouard Brétéché
7de8503e87
chore: increase setup-build-env timeout ( #8187 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 20:44:51 +00:00
Charles-Edouard Brétéché
31bed97806
fix: kyverno test doesn't fail when mutated YAML != patchedResource YAML ( #8183 )
...
* fix: kyverno test doesn't fail when mutated YAML != patchedResource YAML
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 19:37:15 +00:00
Mariam Fahmy
fb166d4f0e
feat: support vap variables in the CLI ( #8182 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-30 18:03:00 +00:00
Charles-Edouard Brétéché
a6bc35b740
fix: allow kyverno test variables directly in test ( #8168 )
...
* fix: allow kyverno test variables directly in test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* strict
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 16:17:28 +00:00
Charles-Edouard Brétéché
23ef95a79c
fix: website docs generation ( #8181 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 15:17:50 +00:00
Charles-Edouard Brétéché
383c2b422d
chore: improve verification of generated docs ( #8180 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 13:45:43 +00:00
Florian Ströger
a558c4cb48
fix: extend retry function to mutate rules ( #8100 )
...
Uses the UpdateRetryAnnotation mechanism already implemented in generate rules for mutate rules.
This fixes the issue that UpdateRequests keep existing indefinitely when the original trigger resource was deleted.
Signed-off-by: Ströger Florian <stroeger@youniqx.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-08-30 12:24:57 +00:00
Charles-Edouard Brétéché
e248757798
feat: add cli docs command ( #8179 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 11:26:26 +00:00
Charles-Edouard Brétéché
8840be78ce
refactor: refactor cli filters and add unit tests ( #8177 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 10:24:43 +00:00
Charles-Edouard Brétéché
ce8729e1e1
chore: fix go.mod indirect deps ( #8175 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 09:37:35 +00:00
Charles-Edouard Brétéché
1068fea0ff
feat: bump otel libs ( #8159 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 08:36:58 +00:00
Amit kumar
6d8ae16afa
added verify image ristretto cache implementation ( #7969 )
...
* updated flags
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added ristretto_cache impl
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added bufferSize
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* small nits
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* made cache as private member
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* made cache as private member
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added logger.withValues
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added verify image cache
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* small nits
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added cache tests
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* fixed lint issue
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added chaged policy test
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* cache time should be entered in minutes
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* removed cache.wait()
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* small nits
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* removed client.go logs and added in imageVerifier
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added level to the logs
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added notary image cache verification
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* replace intVar by flag.DurationVar()
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* removed lock from cache clinet
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* updated cosign tests
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added execution latencies comparision
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added assert.Error()
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added error assertion util
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added error log
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* Update pkg/engine/internal/imageverifier.go
Signed-off-by: shuting <shutting06@gmail.com>
* lint fixes
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* removed logs from unit tests
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added ristretto_cache impl
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* removed cache.wait()
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* small nits
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* added asssertions in tests
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* fixed conflicts
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* lint fix
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
* renamed variabls
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
---------
Signed-off-by: hackeramitkumar <amit9116260192@gmail.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-08-30 07:26:40 +00:00
Vishal Choudhary
62634af6aa
feat: migrate ignoreSCT from rekor to ctlog ( #8166 )
...
* feat: migrate ignoreSCT from rekor to ctlog
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: update tests for new crd
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-30 08:39:49 +02:00
Charles-Edouard Brétéché
414c3c77dd
chore: add cli path utils unit tests ( #8167 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 21:49:32 +00:00
Charles-Edouard Brétéché
c5eb3d2525
fix: check caSecretName and tlsSecretName flags ( #8155 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 21:06:15 +00:00
Charles-Edouard Brétéché
3a2c71c4ba
fix: remove cli manifest commands ( #8165 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 19:28:26 +00:00
Charles-Edouard Brétéché
afd736428f
chore: create cli pathutils package ( #8164 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 18:20:17 +00:00
Charles-Edouard Brétéché
4c05c2833c
fix: support fully-qualified file paths in cli test command ( #8163 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 17:08:20 +00:00
Charles-Edouard Brétéché
4d39fba931
fix: add description to CLI create command ( #8160 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 15:37:47 +00:00
Charles-Edouard Brétéché
e616f63268
chore: bump kuttl to use stopOnFirstFailure feature ( #8161 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 14:36:26 +00:00
Mariam Fahmy
b2f8677909
fix kuttl test ( #8156 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-29 12:19:46 +00:00
Mariam Fahmy
d0d6871a11
chore: enable admissionregistration v1alpha1 in kind config ( #8154 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-29 11:10:56 +00:00
Charles-Edouard Brétéché
06d942f462
refactor: remove logger from tls package ( #8157 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 10:31:56 +00:00
Charles-Edouard Brétéché
f9cd20be91
fix: build cli in conformance tests ( #8143 )
...
* fix: build cli in conformance tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 09:58:27 +00:00
Charles-Edouard Brétéché
147e3197c4
chore: add a timeout to setup-build-env action ( #8153 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-29 08:39:43 +00:00
dependabot[bot]
af786b1504
chore(deps): bump go.opentelemetry.io/otel/metric from 1.16.0 to 1.17.0 ( #8147 )
...
Bumps [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.16.0...v1.17.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/metric
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-29 07:29:57 +00:00
Charles-Edouard Brétéché
bb3df218ed
fix: validate the YAML test file syntactically and schematically ( #8145 )
...
* fix: validate the YAML test file syntactically
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* schema validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 18:04:00 -04:00
Charles-Edouard Brétéché
ecc7b87df6
chore: remove old comment from helm chart ( #8142 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 20:35:08 +00:00
Mariam Fahmy
5c9f78e627
chore: add kind config file for v1beta1 of validating admission policies ( #8139 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-28 19:19:04 +00:00
Mariam Fahmy
8118e0213a
fix: vscode debug config ( #8138 )
...
* fix: vscode debug config
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: modify vscode launch json file
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-28 17:58:36 +00:00
Ved Ratan
daadd36c72
[Feat]: Perform permissions check when TTL label is observed ( #8128 )
...
* added permissions check
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* lint fix
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* lint fix
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* issue_8091
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* log fix
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* refactor
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
Signed-off-by: Ved Ratan <82467006+VedRatan@users.noreply.github.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 16:18:48 +00:00
Mariam Fahmy
94aa1f18c6
feat: support namespaced parameter resources for CEL expressions in Kyverno policies ( #8084 )
...
* feat: support namespaced parameter resources for CEL expressions in Kyverno policies
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix lint issue
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix kuttl test
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-28 14:43:09 +00:00
Charles-Edouard Brétéché
0f9fe30c08
feat: allow overriding ca and tls secret names ( #8137 )
...
* feat: allow overriding ca and tls secret names
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 14:05:49 +00:00
Vishal Choudhary
b374c05517
fix: update certmanager and config to take common name and namespace as arguments ( #8129 )
...
* feat: add namespace and common name args
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: remove unnecessary dns name
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 12:04:37 +00:00
Charles-Edouard Brétéché
ce66667779
chore: add .helmignore to .helmignore ( #8136 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 10:57:13 +00:00
Charles-Edouard Brétéché
93d01b3f36
feat: add ttl manager metric for tracked resources ( #8134 )
...
* feat: add ttl manager metric for tracked resources
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* lock
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-28 10:24:53 +00:00
dependabot[bot]
2fefc825ed
chore(deps): bump kyverno/action-install-cli from 0.1.0 to 0.2.0 ( #8133 )
...
Bumps [kyverno/action-install-cli](https://github.com/kyverno/action-install-cli ) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/kyverno/action-install-cli/releases )
- [Commits](a3d781ac3f...fcee92fca5
2023-08-28 07:35:53 +00:00
Charles-Edouard Brétéché
e4370f296a
fix: nancy ignore file ( #8132 )
...
* fix: nancy ignore file
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-27 20:48:49 +00:00
Sarthak Negi
fa5cb41a56
the renkor version in go mod file is v1.2.2. But nancy-ignore file is not updated ( #8131 )
...
Signed-off-by: sarthaksarthak9 <sarthaknegi908@gmail.com>
2023-08-27 19:34:00 +00:00
Charles-Edouard Brétéché
ff8129fdba
chore: bump kustomize ( #8126 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-08-25 22:15:23 +00:00
Charles-Edouard Brétéché
1be6eeda91
fix: misleading warning about matching on status ( #8127 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-25 21:44:08 +00:00
Ved Ratan
ebd9506f87
[Feat] TTL controller log improvements ( #8112 )
...
* upgraded verbose and enhanced label
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* enhancements
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* fix
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
* fix
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
---------
Signed-off-by: Ved Ratan <vedratan8@gmail.com>
2023-08-25 22:32:56 +02:00
shuting
c751f1de58
fix: renew tls cert when ca cert is deleted ( #8114 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-08-25 16:15:14 +00:00
Charles-Edouard Brétéché
58bf667f61
chore: bump a couple of deps ( #8125 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-25 14:25:58 +00:00
Charles-Edouard Brétéché
ab6fc0ad1b
fix: reduce tls package dependencies (part 2) ( #8109 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-25 11:24:52 +00:00
dependabot[bot]
da086a252a
chore(deps): bump k8s.io/cli-runtime from 0.28.0 to 0.28.1 ( #8124 )
...
Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) from 0.28.0 to 0.28.1.
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.28.0...v0.28.1 )
---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-25 09:36:28 +00:00
Charles-Edouard Brétéché
ba2a787434
fix: conditions v2beta1 help ( #8115 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-08-25 08:49:24 +00:00
dependabot[bot]
9c322f209d
chore(deps): bump k8s.io/pod-security-admission from 0.28.0 to 0.28.1 ( #8123 )
...
Bumps [k8s.io/pod-security-admission](https://github.com/kubernetes/pod-security-admission ) from 0.28.0 to 0.28.1.
- [Commits](https://github.com/kubernetes/pod-security-admission/compare/v0.28.0...v0.28.1 )
---
updated-dependencies:
- dependency-name: k8s.io/pod-security-admission
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-25 08:06:52 +00:00
dependabot[bot]
410c02b36f
chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 ( #8119 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](c85c95e3d7...f43a0e5ff2
2023-08-25 07:17:21 +00:00
dependabot[bot]
4700566966
chore(deps): bump fluxcd/flux2 from 2.0.1 to 2.1.0 ( #8118 )
...
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 2.0.1 to 2.1.0.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](9b3162495c...22cf986a79
2023-08-25 06:46:11 +00:00
