Shuting Zhao
|
7e936e77ea
|
update vendor
|
2019-11-12 19:02:12 -08:00 |
|
Shuting Zhao
|
dfd41774f0
|
add namespace pv controller
|
2019-11-12 19:01:48 -08:00 |
|
Shuting Zhao
|
4a85aaa9ad
|
Merge branch '455_namespace_pv' of https://github.com/nirmata/kyverno into 455_namespace_pv
|
2019-11-12 16:20:17 -08:00 |
|
Shuting Zhao
|
944685d392
|
rebase with branch policy_store
|
2019-11-12 16:19:31 -08:00 |
|
Shuting Zhao
|
8b5ddb66e3
|
integrate with pv genreator
|
2019-11-12 16:15:40 -08:00 |
|
Shuting Zhao
|
6a8e07d779
|
create namespaced pv on resource owner
|
2019-11-12 16:15:14 -08:00 |
|
Shuting Zhao
|
cde14c66b6
|
update crd
|
2019-11-12 16:14:47 -08:00 |
|
Shuting Zhao
|
162a9ee754
|
create namespace pv when validate policy fails
|
2019-11-12 16:14:47 -08:00 |
|
Shuting Zhao
|
7fa812dbc3
|
rename policyviolation related package/function to clusterpolicyviolation
|
2019-11-12 16:11:34 -08:00 |
|
Shuting Zhao
|
d675774278
|
add namespace cluster policyviolation crd
|
2019-11-12 16:04:14 -08:00 |
|
Jim Bugwadia
|
e0097c0fb7
|
use negation anchor
|
2019-11-12 16:04:14 -08:00 |
|
Jim Bugwadia
|
7c68e59a15
|
fix disallow_host_network_hostport policy
|
2019-11-12 16:04:14 -08:00 |
|
Shuting Zhao
|
799c417ae2
|
integrate with pv genreator
|
2019-11-12 16:04:00 -08:00 |
|
shivkumar dudhani
|
f271af95cc
|
use store to hold values and queue for keys
|
2019-11-12 16:01:09 -08:00 |
|
Shuting Zhao
|
778a246d28
|
Merge commit 'ccbb6e33a5599b8fbb9315f9a55e1ed1ef18bbb7' into 455_namespace_pv
# Conflicts:
# main.go
# pkg/namespace/report.go
# pkg/policy/report.go
# pkg/policyviolation/clusterpv.go
# pkg/webhooks/validation.go
|
2019-11-12 15:11:58 -08:00 |
|
Shuting Zhao
|
d294c1fa94
|
create namespaced pv on resource owner
|
2019-11-12 14:58:38 -08:00 |
|
shivkumar dudhani
|
ccbb6e33a5
|
introduce policy violation generator
|
2019-11-12 14:41:29 -08:00 |
|
Shuting Zhao
|
a67306f106
|
update crd
|
2019-11-12 13:32:50 -08:00 |
|
Shuting Zhao
|
4734dba10f
|
create namespace pv when validate policy fails
|
2019-11-12 13:32:30 -08:00 |
|
Shuting Zhao
|
14769936a2
|
rename policyviolation related package/function to clusterpolicyviolation
|
2019-11-12 11:22:06 -08:00 |
|
Shuting Zhao
|
1f2b71ace8
|
add namespace cluster policyviolation crd
|
2019-11-12 11:21:23 -08:00 |
|
shivkumar dudhani
|
f788f0e526
|
introduce policy store
|
2019-11-11 11:10:25 -08:00 |
|
Jim Bugwadia
|
1c5db668e0
|
Merge pull request #462 from nirmata/451_fix_disallow_host_net_port
fix disallow_host_network_hostport policy
|
2019-11-10 20:20:34 -08:00 |
|
Jim Bugwadia
|
0fa95d71d0
|
use negation anchor
|
2019-11-10 16:12:47 -08:00 |
|
shivkumar dudhani
|
f11a05a652
|
create event on webhook status update
|
2019-11-10 13:30:15 -08:00 |
|
Shivkumar Dudhani
|
1613434c46
|
458 cleanup (#464)
* cleanup of policy violation on policy spec changes + refactoring
* remove unused code
* remove duplicate types
* cleanup references
* fix info log and clean code
* code clean
* remove dead code
|
2019-11-08 20:45:26 -08:00 |
|
Jim Bugwadia
|
a0d3f728da
|
fix disallow_host_network_hostport policy
|
2019-11-08 18:26:58 -08:00 |
|
Shivkumar Dudhani
|
687c0c6470
|
Merge pull request #418 from nirmata/391_feature
Check if mutating webhook admission control is enabled
|
2019-11-08 12:55:28 -08:00 |
|
Jim Bugwadia
|
913803a285
|
Merge pull request #459 from nirmata/450_fix_host_pid_ipc_policy
fix policy
|
2019-11-08 10:25:26 -08:00 |
|
Jim Bugwadia
|
ab2e671df5
|
update test scenario and change rule to audit mode
|
2019-11-07 19:28:48 -08:00 |
|
Jim Bugwadia
|
a06313b11c
|
update policy YAML
|
2019-11-07 19:20:51 -08:00 |
|
Jim Bugwadia
|
4aac8f43a9
|
fix test
|
2019-11-07 19:19:33 -08:00 |
|
Jim Bugwadia
|
43e76e1237
|
fix policy
|
2019-11-07 19:03:09 -08:00 |
|
shuting
|
fa7d4a8868
|
Merge pull request #441 from nirmata/432_Improve_validation_messages
432 improve validation messages
|
2019-11-07 12:43:47 -08:00 |
|
Shuting Zhao
|
0c59894690
|
Merge branch '432_Improve_validation_messages' of https://github.com/nirmata/kyverno into 432_Improve_validation_messages
# Conflicts:
# pkg/engine/validation.go
# pkg/engine/validation_test.go
# test/scenarios/other/scenario_validate_disallow_default_serviceaccount.yaml
# test/scenarios/other/scenario_validate_selinux_context.yaml
# test/scenarios/samples/best_practices/scenario_valiadate_require_image_tag_not_latest_deny.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_default_namespace.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_docker_sock_mount.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_helm_tiller.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_host_filesystem.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_host_network_hostport.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_hostpid_hostipc.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_new_capabilities.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_node_port.yaml
# test/scenarios/samples/best_practices/scenario_validate_disallow_priviledged_privelegesecalation.yaml
# test/scenarios/samples/best_practices/scenario_validate_probes.yaml
# test/scenarios/samples/best_practices/scenario_validate_require_pod_requests_limits.yaml
# test/scenarios/samples/best_practices/scenario_validate_require_readonly_rootfilesystem.yaml
# test/scenarios/samples/more/scenario_validate_container_capabilities.yaml
# test/scenarios/samples/more/scenario_validate_sysctl_configs.yaml
|
2019-11-07 12:34:38 -08:00 |
|
Shuting Zhao
|
ec331b8d17
|
remove resource info in the validation error
|
2019-11-07 12:30:58 -08:00 |
|
Shuting Zhao
|
59fb1c90cd
|
fix test
|
2019-11-07 12:13:35 -08:00 |
|
Shuting Zhao
|
a30b8a604d
|
update format
|
2019-11-07 12:13:35 -08:00 |
|
Shuting Zhao
|
443619757e
|
update tests/scenario
|
2019-11-07 12:13:35 -08:00 |
|
Shuting Zhao
|
15895d3852
|
- aggregate resource info per rule; - remove resource info in each success message;
|
2019-11-07 12:13:35 -08:00 |
|
Shuting Zhao
|
2dec70cc72
|
make expected message optional in scenario file
|
2019-11-07 12:13:34 -08:00 |
|
Shuting Zhao
|
98fa90bf1e
|
update validation_test.go
|
2019-11-07 12:13:34 -08:00 |
|
Shuting Zhao
|
58054ef5b6
|
remove duplicate test
|
2019-11-07 12:13:34 -08:00 |
|
Shuting Zhao
|
de9ebd899b
|
improve validation error message; update scenario files
|
2019-11-07 12:13:34 -08:00 |
|
Shuting Zhao
|
e3c9282e6a
|
fix edit failure blocked by annotation change
- as we change the patches key in annotation to "policies.kyverno.io/patches" in commit bdb3f40f15
|
2019-11-07 12:13:34 -08:00 |
|
shuting
|
9f604dc057
|
Merge pull request #445 from nirmata/413_known_ingress
413 known ingress
|
2019-11-07 12:08:37 -08:00 |
|
Shuting Zhao
|
38f1f3bbb9
|
Merge branch '414_mutate_safe-to-evict_emptydir' into 413_known_ingress
|
2019-11-06 17:58:09 -08:00 |
|
Shuting Zhao
|
8496a483dc
|
- remove resource info per rule; - add resource info in each failed admission request
|
2019-11-06 17:14:32 -08:00 |
|
Shuting Zhao
|
42150f95da
|
Merge commit '0a5ce9afbca2d8cab1e9442a02c47f2e8173d9e8' into 414_mutate_safe-to-evict_emptydir
# Conflicts:
# samples/best_practices/add_safe-to-evict_annotation.yaml
# test/scenarios/samples/best_practices/scenario_mutate_safe-to-evict.yaml
|
2019-11-06 16:51:57 -08:00 |
|
shuting
|
0a5ce9afbc
|
Merge pull request #447 from nirmata/446_cleanup
remove unused yamls
|
2019-11-06 16:44:48 -08:00 |
|