158 commits

Author	SHA1	Message	Date
Jim Bugwadia	121b81a83b	update disallow new capabilities	2019-11-09 16:07:16 -08:00
Jim Bugwadia	4e848b48a2	add category and description	2019-11-08 20:08:23 -08:00
Jim Bugwadia	cba79c69a2	update disallow_priviledged	2019-11-08 20:04:42 -08:00
Jim Bugwadia	5ce8fd7a9a	update disallow_root_user	2019-11-08 19:25:43 -08:00
Jim Bugwadia	6baa678e27	rename add_safe_to_evict	2019-11-08 19:02:49 -08:00
Jim Bugwadia	a0d3f728da	fix disallow_host_network_hostport policy	2019-11-08 18:26:58 -08:00
Jim Bugwadia	ab2e671df5	update test scenario and change rule to audit mode	2019-11-07 19:28:48 -08:00
Jim Bugwadia	a06313b11c	update policy YAML	2019-11-07 19:20:51 -08:00
Jim Bugwadia	43e76e1237	fix policy	2019-11-07 19:03:09 -08:00
shivkumar dudhani	f33650a335	update name	2019-11-06 15:55:55 -08:00
Jim Bugwadia	1173e062c9	- add policy and test for known ingress ... - fix messages and remove unnecessary comments in testrunner/scenario.go	2019-11-05 19:07:44 -08:00
Jim Bugwadia	cd3e0f46f3	add policy doc	2019-11-05 16:45:37 -08:00
Jim Bugwadia	cab87f24ba	add tect case	2019-11-05 15:32:45 -08:00
Shuting Zhao	664a85363a	correct scenario test	2019-11-05 12:59:22 -08:00
Jim Bugwadia	5ded29f74e	temp update for debugging	2019-11-05 12:28:44 -08:00
Shuting Zhao	764d0fede2	Merge commit '35bed4bc6aef6622b89f0fc4dee9a175aa9768ff' into 158_array_validation	2019-11-05 09:50:32 -08:00
Shivkumar Dudhani	cfbd212093	Merge pull request #427 from nirmata/375_handle_json_numbers_resubmit ... 375 handle json numbers resubmit	2019-11-04 18:05:24 -08:00
Jim Bugwadia	35bed4bc6a	add safe-to-evict annotation	2019-11-04 17:55:13 -08:00
Jim Bugwadia	41afefbe8e	add disallow Helm tiller	2019-11-03 18:19:06 -08:00
Jim Bugwadia	3b1143c934	Merge pull request #436 from nirmata/411_no_docker_sock_mount ... 411 no docker sock mount	2019-11-01 15:38:40 -07:00
Jim Bugwadia	53aceab929	update README.md and markdown	2019-11-01 15:23:42 -07:00
shivkumar dudhani	a191bd67f4	update message string	2019-11-01 15:21:23 -07:00
Jim Bugwadia	1323a9a81e	add policy and test case	2019-11-01 15:19:26 -07:00
Jim Bugwadia	47fee49f36	Merge branch '410_no_new_capabilities' of https://github.com/nirmata/kyverno into 410_no_new_capabilities	2019-11-01 15:11:00 -07:00
Jim Bugwadia	764c353fdd	update markdown	2019-11-01 15:10:42 -07:00
Jim Bugwadia	8ddd9f036f	Merge branch 'master' into 410_no_new_capabilities	2019-11-01 14:53:56 -07:00
Jim Bugwadia	4fbc57bfed	update policy and test case	2019-11-01 14:37:17 -07:00
Jim Bugwadia	aa6b65480a	updated policy	2019-11-01 11:47:29 -07:00
Jim Bugwadia	d58113233c	update README.md	2019-10-31 18:43:06 -07:00
Jim Bugwadia	eebfab87e5	add YAML and description	2019-10-31 18:40:54 -07:00
shivkumar dudhani	ea9bfe32cb	update the policy	2019-10-31 13:29:16 -07:00
Shivkumar Dudhani	92c96aaf1f	Revert "use validatepattern in generate rule to check for subset existance"	2019-10-31 13:21:38 -07:00
shivkumar dudhani	61c1ea5a49	use validatepattern in generate rule to check for subset existance	2019-10-31 13:04:56 -07:00
shuting	a0f5419430	Merge pull request #416 from nirmata/158_array_validation ... update link to import policies	2019-10-30 13:20:39 -07:00
Shuting Zhao	55983e2223	add clone instuction	2019-10-30 13:14:59 -07:00
Jim Bugwadia	3438e84013	fix YAML syntax	2019-10-30 13:12:29 -07:00
Jim Bugwadia	3783ae0495	update policy	2019-10-30 12:59:51 -07:00
Jim Bugwadia	1dfccf99d4	update README.md	2019-10-30 12:52:45 -07:00
Jim Bugwadia	9f21e5898c	fix for https://github.com/nirmata/kyverno/issues/409	2019-10-30 12:51:07 -07:00
Shuting Zhao	3c26b60727	update doc	2019-10-30 12:36:00 -07:00
Shuting Zhao	65016ff455	correct link	2019-10-30 12:31:09 -07:00
Shuting Zhao	f25a336eeb	- update doc; -remove duplicate policy	2019-10-30 12:29:57 -07:00
shivkumar dudhani	90575e1067	update policy	2019-10-24 18:48:48 -05:00
shivkumar dudhani	17b98aca4b	update policy	2019-10-24 18:41:37 -05:00
shivkumar dudhani	6b7b50f7af	fix generate format	2019-10-24 12:37:52 -05:00
shivkumar dudhani	f84cd08f42	update references	2019-10-23 16:02:28 -07:00
Jim Bugwadia	3dc8de539e	Merge branch 'update_best_practice_policies' of https://github.com/nirmata/kyverno into update_best_practice_policies	2019-10-23 15:36:49 -07:00
Jim Bugwadia	733633637e	update descriptions...	2019-10-23 15:36:37 -07:00
shivkumar dudhani	085b32fc91	add missing references	2019-10-23 15:26:40 -07:00
Jim Bugwadia	7164a9d29d	update text	2019-10-23 14:45:27 -07:00
Jim Bugwadia	9bbcbb29af	reorganize samples	2019-10-23 14:45:27 -07:00
Shuting Zhao	c6d5ec7575	Merge commit '82647670a54ead965c8cb964f3063409d0826070' into 337_policy_description ... # Conflicts: # pkg/testrunner/testrunner_test.go # samples/README.md # samples/best_practices/policy_validate_deny_runasrootuser.yaml # test/scenarios/samples/best_practices/scenario_validate_nonRootUser.yaml	2019-10-15 12:27:22 -07:00
Shuting Zhao	da57501dcd	update description format	2019-10-14 16:33:19 -07:00
shivkumar dudhani	6ea58eb09b	fix names	2019-10-14 14:18:43 -07:00
shivkumar dudhani	d98ba1ab1a	remove audit flag, as its default behavior	2019-10-14 14:17:07 -07:00
shivkumar dudhani	4e5f551fa7	clean up	2019-10-14 14:10:34 -07:00
Shuting Zhao	3a8ff5ec6a	update description for smaples/more/	2019-10-14 14:06:39 -07:00
Shuting Zhao	31437c107b	update path in readme	2019-10-14 14:06:20 -07:00
Shuting Zhao	61808837fb	update description	2019-10-14 13:58:47 -07:00
Shuting Zhao	4d2bcef411	remove duplicate	2019-10-14 13:50:00 -07:00
Shuting Zhao	75806146c6	Merge branch 'best_practice_policies' into 337_policy_description ... # Conflicts: # samples/README.md	2019-10-14 13:21:10 -07:00
Jim Bugwadia	90f1a945c7	rename 'additional' to 'more' for alphabetical ordering	2019-10-14 12:32:51 -07:00
Jim Bugwadia	fe58b74b1a	update descriptions	2019-10-14 12:27:17 -07:00
shivkumar dudhani	4abdec337d	documentation updates	2019-10-14 10:47:54 -07:00
shivkumar dudhani	ece72ea090	Merge branch 'best_practice_policies' of github.com:nirmata/kyverno into best_practice_policies	2019-10-14 09:10:36 -07:00
Shuting Zhao	46f72cb424	Provide descriptions for policies	2019-10-11 18:57:16 -07:00
Shuting Zhao	38bf4d6055	add 'deny-use-of-host-fs'	2019-10-10 18:42:54 -07:00
shivkumar dudhani	66ae7367ba	Merge branch 'best_practice_policies' of github.com:nirmata/kyverno into best_practice_policies	2019-10-10 12:50:24 -07:00
shivkumar dudhani	ed8f0da4f9	update documentation	2019-10-10 12:50:17 -07:00
Shuting Zhao	300665b22b	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies	2019-10-10 12:30:14 -07:00
Shuting Zhao	24f3b8ac96	disallow automountServiceAccountToken	2019-10-10 12:29:48 -07:00
shivkumar dudhani	dbc35eb8f4	enable disabled tests	2019-10-10 12:22:07 -07:00
Shuting Zhao	b7f1d82dfc	update readme	2019-10-10 11:53:51 -07:00
Shuting Zhao	f1ed0720c4	update default network policy to deny all ingress traffic	2019-10-10 11:08:20 -07:00
Shuting Zhao	7fcc6bbd33	require default namespace resource quota	2019-10-10 10:46:11 -07:00
Shuting Zhao	3087257b46	disallow use of default namespace	2019-10-10 10:34:49 -07:00
Shuting Zhao	012360ae3a	allow trusted registries	2019-10-10 10:29:10 -07:00
Shuting Zhao	c6f814f260	update doc	2019-10-09 23:54:19 -07:00
Shuting Zhao	995efc4e63	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies ... # Conflicts: # samples/README.md	2019-10-09 23:50:49 -07:00
Shuting Zhao	c51c28bdd2	update readme	2019-10-09 23:46:18 -07:00
shivkumar dudhani	3f33e925f3	handle default and omitempty with condition anchor	2019-10-09 21:07:45 -07:00
shivkumar dudhani	c7b0fc86c1	update documentation	2019-10-09 21:07:15 -07:00
shivkumar dudhani	84f6bb550b	update doc	2019-10-09 20:16:08 -07:00
shivkumar dudhani	f51e9e8e1a	fix path	2019-10-09 19:19:13 -07:00
Shuting Zhao	b0eb40d3dc	update readme	2019-10-09 19:06:38 -07:00
Shuting Zhao	6d5ba8af4d	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies	2019-10-09 18:53:36 -07:00
Shuting Zhao	48c2c39da7	add samples/best_practices/require_default_network_policy.yaml	2019-10-09 18:52:48 -07:00
shivkumar dudhani	b19d93131c	reformat additional policies	2019-10-09 18:40:52 -07:00
shivkumar dudhani	522f0c6b60	update description for policy	2019-10-09 18:39:57 -07:00
shivkumar dudhani	c223b4c776	Merge branch 'best_practice_policies' of github.com:nirmata/kyverno into best_practice_policies	2019-10-09 18:37:13 -07:00
Shuting Zhao	4d29b461ff	add require_image_tag_not_latest.yaml	2019-10-09 18:35:07 -07:00
shivkumar dudhani	7c5e52b84e	fix indentation	2019-10-09 18:21:04 -07:00
shivkumar dudhani	5abb5d3243	Merge branch 'best_practice_policies' of github.com:nirmata/kyverno into best_practice_policies	2019-10-09 18:18:03 -07:00
shivkumar dudhani	904643acf0	update best practices section	2019-10-09 18:17:47 -07:00
Shuting Zhao	3e1ef320a8	add require_probes.yaml	2019-10-09 17:49:00 -07:00
Shuting Zhao	ea25ed8460	add check-pod-request-limit.yaml	2019-10-09 17:37:31 -07:00
Jim Bugwadia	1fe1a9b22b	remove description title	2019-10-09 14:37:21 -07:00
Jim Bugwadia	d1b414bbf0	update intro	2019-10-09 14:35:12 -07:00
Jim Bugwadia	6a346df6f7	try paragraph format	2019-10-09 14:30:31 -07:00
shivkumar dudhani	d1a8309243	add policy documentation	2019-10-09 10:39:25 -07:00