shuting
abb51348cf
skip inserting auto-gen annotation to podController on UPDATE admission request ( #953 )
2020-06-25 17:24:10 -07:00
Shuting Zhao
a1d7816c10
fix violation updates when there's no change
2020-06-01 19:37:48 -07:00
Jim Bugwadia
838d02c475
Bugfix/659 support wildcards for namespaces ( #871 )
...
* - support wildcards for namespaces
* do not annotate resource, unless policy is an autogen policy
* close HTTP body
* improve messages
* remove policy store
Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.
We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.
* handle wildcard namespaces in background processing
* fix unit tests 1) remove platform dependent path usage 2) remove policy store
* add test case for mutate with wildcard namespaces
2020-05-26 10:36:56 -07:00
Shuting Zhao
bc981f9a11
fix 869
2020-05-20 13:42:23 -07:00
Shuting Zhao
9eb2534d63
- fix pending delete for denying deletion rule - revert timeoutHandler - update log level
2020-05-19 00:14:23 -07:00
Shuting Zhao
ad4f06f22d
Merge branch 'master' into 744_deny_requests
...
# Conflicts:
# pkg/webhooks/mutation.go
# pkg/webhooks/server.go
# pkg/webhooks/validation.go
2020-05-18 12:32:42 -07:00
Jim Bugwadia
8c4c98d1a4
Merge pull request #855 from nirmata/bugfix/fixes_791_792_832
...
Bugfix/fixes 791 792 832
2020-05-17 19:30:11 -07:00
Jim Bugwadia
304c75403e
- skip resource schema validation when no mutate rules are applied
...
- cleanup webhook registration logic and logs
2020-05-17 14:37:05 -07:00
Shuting Zhao
0952ccec82
set log to higher level
2020-05-15 14:49:34 -07:00
Shuting Zhao
ddf89b4803
- fix 811; - suppress log
2020-05-15 13:11:28 -07:00
shravan
2451756651
744 tested prototype
2020-04-10 23:24:54 +05:30
shravan
6efe0252a3
765 save commit
2020-03-27 19:06:06 +05:30
shivkumar dudhani
4320111c5c
fix logs api
2020-03-20 11:43:21 -07:00
shivkumar dudhani
e6e5bbb603
Merge branch 'master' into access_check
2020-03-17 17:23:18 -07:00
shivkumar dudhani
1b1ab78f77
logs & access
2020-03-17 11:05:20 -07:00
shravan
892f8c7040
527 resolving merge conflicts
2020-03-13 10:01:50 +05:30
shravan
9656975b5a
527 renamed package and send listner instead of entire sync object
2020-03-07 12:53:37 +05:30
shravan
7aa1e1515b
522 supporting crd validation
2020-03-05 22:50:32 +05:30
shravan
044d55600a
522 fixed tests and added validation of mutated resources
2020-03-04 19:27:08 +05:30
shravan
6206852262
527 redesigned implementation so that package variables are not used across packages
2020-03-04 15:45:20 +05:30
shravan
38b92a0d34
527 making status listner into a buffered channel instead of go routines
2020-03-04 13:35:49 +05:30
shravan
e324967405
527 resolving merge conflicts
2020-02-29 23:12:39 +05:30
shravan
40e92ebacf
527 decoupling sender and reciever
2020-02-29 22:39:27 +05:30
shuting
a97bf0ffca
Merge pull request #713 from nirmata/710_bug_eventreporting
...
refactor events
2020-02-26 16:06:46 -08:00
shravan
2a9b6a8f69
527 removed uneeded statements
2020-02-26 07:36:19 +05:30
shravan
ac37ec66f0
527 minor fixes
2020-02-23 20:40:00 +05:30
shravan
592df74c57
527 tested mutate needs further testing
2020-02-22 23:35:02 +05:30
shravan
a15a741cb4
527 save commit
2020-02-22 16:57:00 +05:30
shivkumar dudhani
9b38289a84
remove openapi validation(manual revert)
2020-02-20 15:09:20 -08:00
shivkumar dudhani
e499264ea9
refactor events
2020-02-19 19:24:34 -08:00
shravan
e9fc19142a
527 save commit
2020-02-19 09:27:39 +05:30
shravan
b5e5f3eeda
527 save commit
2020-02-15 16:38:59 +05:30
shravan
e1b9a13590
resolving merge conflicts
2020-01-25 14:55:36 +05:30
shravan
78cae242c5
522 restructured files
2020-01-25 14:53:12 +05:30
Shivkumar Dudhani
f4406bbefc
linter fixes ( #656 )
...
* cleanup phase 1
* linter fixes phase 2
* linter fixes
* linter fixes
2020-01-24 16:27:51 -08:00
Shivkumar Dudhani
8c1d79ab28
linter suggestions ( #655 )
...
* cleanup phase 1
* linter fixes phase 2
2020-01-24 12:05:53 -08:00
shravan
fa7c522b5c
522 minor changes from tests
2020-01-24 09:51:40 +05:30
Shuting Zhao
24f3659b03
update debug info log level
2020-01-16 14:37:01 -08:00
Shuting Zhao
5d3d27cafd
report violation for mutation failure only, not block the creation
2020-01-16 14:29:44 -08:00
Shuting Zhao
ba8030bec0
change to use validationFailureAction for the mutation failure action
2020-01-16 11:57:28 -08:00
Shuting Zhao
7e59e8e484
mutation failure to not block resource creation
2020-01-15 21:46:58 -08:00
Shuting Zhao
77a6408f30
pass in patchedResource inside the same mutation rule
2020-01-15 18:15:48 -08:00
Shuting Zhao
f618bbcff3
pass in ctx to mutation and generation
2020-01-10 18:25:16 -08:00
Shuting Zhao
f78ca61859
generate violation in mutation when substitute path not present
2020-01-09 12:24:37 -08:00
Shuting Zhao
472fa29fce
move mutation to subpackage pkg/engine/mutate
2020-01-07 17:06:17 -08:00
Shivkumar Dudhani
3cf9141f4d
593 feature ( #594 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* initial commit
* fix trailing quote in patch
* remove comments
* initial condition (equal & notequal)
* initial support for conditions
* initial support fo conditions in generate
* support precondition checks
* cleanup
* re-evaluate GR on namespace update using dynamic informers
* add status for generated resources
* display loaded variable SA
* support delete cleanup of generate request main resources
* fix log
* remove namespace from SA username
* support multiple variables per statement for scalar values
* fix fail variables
* add check for userInfo
* validation checks for conditions
* update policy
* refactor logs
* code review
* add openapispec for clusterpolicy preconditions
* Update documentation
* CR fixes
* documentation
* CR fixes
* update variable
* fix logs
* update policy
* pre-defined variables (serviceAccountName & serviceAccountNamespace)
* update test
2020-01-07 15:13:57 -08:00
Shuting Zhao
08491df046
Merge commit 'ffd2179b0332738a088b362e94147a981f0d02ed' into 600_bug
...
# Conflicts:
# pkg/webhooks/mutation.go
2020-01-07 14:17:25 -08:00
Shivkumar Dudhani
ffd2179b03
538 ( #587 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* cleanup
* CR fixes
* fix logs
2020-01-07 10:33:28 -08:00
Shuting Zhao
c97b3ce5b0
fetch annotation from resource annotation map
2020-01-06 19:24:24 -08:00
Shivkumar Dudhani
5b8ab3842b
Support variable substitution ( #549 )
...
* initial commit
* variable substitution
* update tests
* update test
* refactor engine packages for validate & generate
* update vendor
* update toml
* support variable substitution in overlay mutation
* missing update
* fix indentation in logs
* store context values as single JSON document using merge patches.
* remove duplicate functions
* fix message string
* Handle processing of policies in background (#569 )
* remove condition check while generating mutation patch as conditions are verified in the first iteration
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* fix order to correct policy registration
* update comment
Co-authored-by: shuting <shutting06@gmail.com>
* refactor
Co-authored-by: shuting <shutting06@gmail.com>
2019-12-30 17:08:50 -08:00
