1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

6600 commits

Author SHA1 Message Date
gcp-cherry-pick-bot[bot]
8b60e37ff1
Revert "add secrets name in background-controller's role (#8721)" (#8752) (#8757)
This reverts commit 580c02ce76.

Co-authored-by: shuting <shuting@nirmata.com>
2023-10-27 08:20:51 +00:00
Vishal Choudhary
4c9f5b8f28
feat: disable validate maintainer for helm gha (#8747) (#8748)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-26 13:34:53 +00:00
gcp-cherry-pick-bot[bot]
d25b07c930
fix: revert maintainers in helm charts (#8737) (#8746)
* fix: revert maintainers in helm charts



* feat: codegnen



* fix: revert helm release changes



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-26 11:38:01 +00:00
shuting
526d4895b7
fix: fetch correct branch name in helm-release workflow (#8744) (#8745)
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Signed-off-by: shuting <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-26 09:30:29 +00:00
Vishal Choudhary
f9fccbd0bf
fix: replace base_ref with ref_name in helm test GHA (#8735) (#8736)
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-25 14:35:24 +00:00
Vishal Choudhary
407ffa79de
fix: dynamically get branch name in helm test (#8732) (#8734)
* fix: dynamically get branch name in helm test



* fix: add env variable branch name



* fix: use head ref



* cleanup: remove debug statements



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-25 11:09:41 +00:00
shuting
023ac8635a
release v1.11.0-rc.4 (#8723)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-24 10:54:21 +00:00
gcp-cherry-pick-bot[bot]
662a254520
add secrets name in background-controller's role (#8721) (#8722)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-24 09:48:17 +00:00
shuting
573d589c49
cherry-pick 8707 (#8717)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-24 04:30:54 +00:00
Vishal Choudhary
b321490e7b
[Helm] AdmissionReport cleanup job tag bump (#8708) (#8714)
* update chart metadata



* bump tag



* adjust name



* do not validate maintainers



* feat: update codegen



* feat: update codegen



* feat: update kubeversion in helm template



---------

Signed-off-by: chipzoller <chipzoller@gmail.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: chipzoller <chipzoller@gmail.com>
2023-10-23 15:36:21 +00:00
gcp-cherry-pick-bot[bot]
0e0bef1ebe
fix: add permissions to secrets for background controller role (#8690) (#8715)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-23 22:53:02 +08:00
shuting
899a9f0a3a
release v1.11.0-rc.3 (#8706)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-20 10:42:45 +00:00
shuting
de673f07e6
feat: generate events for CEL policies that generate VAPs (#8564) (#8705)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-20 09:48:30 +00:00
shuting
452392c05b
fix typo (#8666) (#8704)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-20 11:57:48 +03:00
gcp-cherry-pick-bot[bot]
c3db00b154
feat: fix outdated description of imageregistrycredentials (#8688) (#8699)
* feat: fix outdated description of imageregistrycredentials



* feat: generate crd



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-20 12:30:54 +08:00
gcp-cherry-pick-bot[bot]
2212201553
fix: add codegen-cli-crds target to codegen-crds-all (#8692) (#8695)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-19 15:42:03 +00:00
gcp-cherry-pick-bot[bot]
6fcf2bc22b
feat: Implement global values for image registry in Kyverno Helm chart (#8625) (#8694)
* feat: Add image registry to global values



* Fix indentation



* Update documentation



---------

Signed-off-by: Franco <franco@giantswarm.io>
Co-authored-by: Franco Hielpos <48300215+fhielpos@users.noreply.github.com>
2023-10-19 14:30:17 +00:00
gcp-cherry-pick-bot[bot]
cf65fc2f48
fix: allow cleanup controller to update the policy status (#8681) (#8684)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-19 15:16:46 +08:00
gcp-cherry-pick-bot[bot]
2c570e007e
remove duplicated log messages (#8673) (#8676)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-18 11:49:38 +08:00
gcp-cherry-pick-bot[bot]
28c504a3c1
feat: add support for days in ttl labels (#8660) (#8662)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-10-16 13:58:04 +00:00
gcp-cherry-pick-bot[bot]
d5c25fcdc2
fix(helm): add values for declaratively enabling PDBs (#8652) (#8658)
* fix(helm): add values for declaratively enabling PDBs



* update codegen docs



---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
2023-10-16 09:22:21 +00:00
gcp-cherry-pick-bot[bot]
456a164a30
fix(helm): add missing policyexceptions RBAC to background-controller (#8648) (#8657)
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-16 08:34:25 +00:00
shuting
6be88f3646
release v1.11.0-rc.2 (#8643)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-13 09:08:32 +00:00
shuting
a4e47ef6df
bump Go 1.21.3 (#8638)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 16:44:36 +00:00
gcp-cherry-pick-bot[bot]
4ba272452c
chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#8626) (#8636)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 15:54:11 +00:00
shuting
762f9396e1
release v1.11.0-rc.1 (#8634)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 13:39:14 +00:00
gcp-cherry-pick-bot[bot]
783b27d032
chore: bump cleanup policies to v2beta1 (#8621) (#8632)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-12 12:42:13 +00:00
gcp-cherry-pick-bot[bot]
26b99ceb82
feat: move crds to a subchart (#8623) (#8630)
* feat: move crds to a subchart



* update codegen



* update crd configs: annotations and install options



* update default crd installation configuration to true



* reset annotations



* update chart readme



* remove subchart crd install option



* update crd chart version



* configure crds labels



* fix chart yaml file



* revert crd subchart version to 0.0.0



* update install.yaml



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
2023-10-12 11:19:53 +00:00
gcp-cherry-pick-bot[bot]
63b2376873
fix: allow dropping metrics, labels and configuring histogram bucket boundaries to avoid high cardinality. (#8569) (#8629)
Signed-off-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Co-authored-by: Rodrigo Fior Kuntzer <rodrigo@miro.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-12 10:34:16 +00:00
gcp-cherry-pick-bot[bot]
6594e11caa
feat: move grafana dashboard to a subchart (#8619) (#8620)
* feat: move grafana dashboard to a subchart



* fix codegen



* fix: add dependencies



* fix codegen



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-11 22:35:34 +08:00
gcp-cherry-pick-bot[bot]
52f1452ec6
Revert "chore: bump cleanup policies to v2beta1 (#8594)" (#8609) (#8610)
This reverts commit fff3ad047e.

Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 15:53:22 +00:00
gcp-cherry-pick-bot[bot]
da29e0277a
chore: bump cleanup policies to v2beta1 (#8594) (#8607)
* chore: bump cleanup policies to v2beta1



* chore: remove the support of v2alpha1 cleanup policies



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 12:22:38 +00:00
gcp-cherry-pick-bot[bot]
b087eb8f18
refactor: common remote authenticator for notary and cosign (#8494) (#8605)
* refactor: common remote authenticator for notary and cosign



* fix: add user agent



* refactor: move getGCRRemoteOption out of BuildGCRRemoteOption



---------

Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-10-09 09:40:06 +00:00
gcp-cherry-pick-bot[bot]
a8cdb5a23b
refactor: use GetKind() from the cleanup policy interface (#8565) (#8604)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 09:01:58 +00:00
gcp-cherry-pick-bot[bot]
12df4bf32d
fix: use v2beta1 of policy exceptions (#8587) (#8603)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-10-09 08:11:47 +00:00
gcp-cherry-pick-bot[bot]
a848dafe7f
Refactor fuzzing utils and add 3 fuzzers (#8555) (#8586)
* Refactor fuzzing utils and add 3 fuzzers



* Fix lint issues



* use latest go-jmespath



* Check layer size (#8552)

* fix excessive logs



* check fetched layer size



* check sig layer size



---------




* fix lint issues



---------

Signed-off-by: AdamKorcz <adam@adalogics.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-10-06 08:00:13 +08:00
gcp-cherry-pick-bot[bot]
65527e2b4e
chore: bump kubectl-validate (#8548) (#8551)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 22:39:47 +02:00
Charles-Edouard Brétéché
0ac6b0bf61
release: v1.11.0-beta.4 (#8549)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 19:25:28 +00:00
gcp-cherry-pick-bot[bot]
468692a5b6
chore: enable policy exceptions by default (#8545) (#8550)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 18:20:04 +00:00
gcp-cherry-pick-bot[bot]
7d3bb309a0
refactor: remove openapi package (#8538) (#8547)
* refactor: openapi package



* kubectl validate



* rm



* fix



* fix



* go mod



* fix vscode



---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 17:25:20 +00:00
gcp-cherry-pick-bot[bot]
44859d9c47
fix: make tuf feature in chart consistent with others (#8542) (#8546)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:50:31 +00:00
gcp-cherry-pick-bot[bot]
f8d7d622af
fix(helm): skip deployment replicas validation in non-int value (#8539) (#8543)
* fix(helm): skip deployment replicas validation in non-int value



* fix



---------

Signed-off-by: Erik Godding Boye <egboye@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Erik Godding Boye <egboye@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-27 13:22:54 +02:00
gcp-cherry-pick-bot[bot]
febc017b52
refactor: get the last execution time from the cleanup policy interface (#8531) (#8541)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-27 07:29:39 +00:00
gcp-cherry-pick-bot[bot]
a9f93134d5
fix: remove cronjobs from cleanup controller rbac (#8529) (#8534)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 17:45:52 +02:00
gcp-cherry-pick-bot[bot]
7dfb538568
fix: creating ClusterAdmissionReports fails for resources with colon in name (#8530) (#8532)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-26 12:21:00 +00:00
gcp-cherry-pick-bot[bot]
e788bf0c95
feat: remove the creation of cronjobs in cleanup controller (#8526) (#8528)
* feat: remove the creation of cronjobs in cleanup controller



* fix: use lastExecutionTime instead of nextExecutionTime



---------

Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-26 10:49:33 +00:00
Charles-Edouard Brétéché
ed7b2ec36e
release: v1.11.0-beta.3 (#8527)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-25 20:04:26 +00:00
gcp-cherry-pick-bot[bot]
1cd5d2d733
fix: only fetch pub keys when tlogs and scts are not ignored (cherry-pick #8521) (#8524)
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-25 09:00:21 +00:00
Charles-Edouard Brétéché
39b8a2f5c2
release: 1.11.0-beta.2 (#8517)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 14:37:40 +00:00
gcp-cherry-pick-bot[bot]
974f45b43a
fix: image cache panic and cleanup (#8512) (#8514)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 13:42:07 +00:00