Jose Armesto
|
831a9826d1
|
Restructure project to follow standards (#2632)
Signed-off-by: Jose Armesto <github@armesto.net>
|
2021-10-29 18:13:20 +02:00 |
|
Frank Jogeleit
|
c522343c03
|
Update PolicyReport CRDs to wgpolicyk8s.io/v1alpha2 (#1825)
|
2021-08-21 10:35:17 -07:00 |
|
shuting
|
104cd310e8
|
Cleanup Report Change Requests (#2134)
* clean up RCRs if retry fails
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* cleanup report change request when background scan starts
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add verb deletecollection to ClusterRole kyverno:customresources
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
|
2021-07-14 09:57:16 -07:00 |
|
shuting
|
e9a972a362
|
feat: HA (#1931)
* Fix Dev setup
* webhook monitor - start webhook monitor in main process
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add leaderelection
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* - add isLeader; - update to use configmap lock
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* - add initialization method - add methods to get attributes
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* address comments
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* remove newContext in runLeaderElection
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add leader election to GenerateController
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* skip processing for non-leaders
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* skip processing for non-leaders
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add leader election to generate cleanup controller
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* Gracefully drain request
* HA - Webhook Register / Webhook Monitor / Certificate Renewer (#1920)
* enable leader election for webhook register
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* extract certManager to its own process
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* leader election for cert manager
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* certManager - init certs by the leader
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add leader election to webhook monitor
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update log message
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add leader election to policy controller
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add leader election to policy report controller
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* rebuild leader election config
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* start informers in leaderelection
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* start policy informers in main
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* enable leader election in main
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* move eventHandler to the leader election start method
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* address reviewdog comments
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add clusterrole leaderelection
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fixed generate flow (#1936)
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* - init separate kubeclient for leaderelection - fix webhook monitor
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* address reviewdog comments
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* cleanup Kyverno managed resources on stopLeading
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* tag v1.4.0-beta1
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix cleanup process on Kyverno stops
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* bump kind to 0.11.0, k8s v1.21 (#1980)
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
Co-authored-by: vyankatesh <vyankateshkd@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Pooja Singh <36136335+NoSkillGirl@users.noreply.github.com>
|
2021-06-08 12:37:19 -07:00 |
|
shuting
|
1412c1f84e
|
- update version to v1.3.6; - split Kustomization manifests; - revert release/install.yaml (#1945)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
|
2021-06-01 21:58:37 -07:00 |
|
Nicolas Lamirault
|
62c4cd7e3d
|
Recommanded Kubernetes labels and custom labels (#1873)
* Add: Recommanded Kubernetes labels
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Add: feature to add custom labels to resources metadata
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Add: manage labels with Kustomize
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Add: app label
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Add: app label for chart
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Update: make kustomize-crds
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Update: refactoring labels
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Fix: clean kustomize code
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Fix: typo
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Update: application version v1.3.6
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* Update: version v1.3.6
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
|
2021-06-01 11:54:33 -07:00 |
|
Yashvardhan Kukreja
|
8eae8ec492
|
feat: added support for exposing the metrics via kyverno-svc service
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
|
2021-05-24 08:06:40 +05:30 |
|
shuting
|
9dab21619f
|
Match endpoint to the exact Kyverno Pod's IP (#1787)
* update log message
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update printer column - validation failure action
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* match endpoint ip with the exact pod ip
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* - add tag "app.kubernetes.io/name"; - reduce throttling requests when deletes webhook configs
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* add [SelfSubjectAccessReview,*,*] to resource filters
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
|
2021-04-12 20:29:51 -07:00 |
|
Vyankatesh Kudtarkar
|
3ab75095b7
|
remove permission (#1758)
* remove permission
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
* remove duplicate resource
Signed-off-by: vyankatesh <vyankatesh@neualto.com>
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
|
2021-04-02 11:22:59 -07:00 |
|
Yuto Takahashi
|
e2cb30e752
|
Allow generatecontroller to handle Roles (#1739)
* Allow generateoperator to handle Roles
Signed-off-by: Yuto Takahashi <ytaka23dev@gmail.com>
* Restore the releasable manifest
Signed-off-by: Yuto Takahashi <ytaka23dev@gmail.com>
|
2021-03-29 22:48:41 -07:00 |
|
Shuting Zhao
|
77a94fda6b
|
add "watch" to cluster role kyverno:policycontroller
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
|
2021-02-08 17:35:35 -08:00 |
|
Shuting Zhao
|
1d512d7068
|
remove clusterrole/binding kyverno:policyviolations
|
2020-11-19 14:51:42 -08:00 |
|
Shuting Zhao
|
9474761026
|
update rabc in Helm charts
|
2020-11-19 14:29:37 -08:00 |
|
Shuting Zhao
|
a542c937ab
|
remove duplicate clusterroles
|
2020-11-19 14:22:54 -08:00 |
|