mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Code Activity
3235 commits 16 branches 550 tags 288 MiB
Commit graph

3235 commits

This branch
This branch
All branches
Author SHA1 Message Date
Raj Babu Das
ac3a42d441
revert cli image name (#1507) 
Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-29 12:42:14 -08:00
Raj Babu Das
9da94d5220
Enhancing dockerfiles (multi-stage) of kyverno components and adding non-root user to the docker images (#1495) 
* Dockerfile refactored

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* Adding non-root commands to docker images and enhanced the dockerfiles

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* changing base image to scratch

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* Minor typo fix

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* changing dockerfiles to use /etc/passwd to use non-root user'

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* minor typo

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>

* minor typo

Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-29 11:58:07 -08:00
Pooja Singh
0396d5278e
added logic for generate policy with data (#1463) 
* added logic for generate policy with data

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* debuging data of configmap

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed few print statements

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* logic for configmap

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* logic for pod

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* logic for pod

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* restructured

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed println

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added comments

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added test cases

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* function rename

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removed comment

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small improvement

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* extract annotation and label

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* fixed test cases

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* extract annotation and label from updated target resource

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated test cases

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-01-27 10:11:22 -08:00
Jim Bugwadia
81c7205e42
Merge pull request #1493 from rajdas98/helm-psp 
Adding cluster policies(default, restricted) to kyverno helm charts
 2021-01-26 10:28:15 -08:00
Jim Bugwadia
35c9a5a5bf
Merge pull request #1499 from MnrGreg/patch-1 
Update adopters.md
 2021-01-25 22:30:20 -08:00
Gregory May
5f3c779acd
Update adopters.md 2021-01-25 10:12:18 -08:00
Shuting Zhao
7d8c404922 generate 1.3.2-rc1 2021-01-24 21:06:30 -08:00
Jim Bugwadia
05da4190f8
handle discovery errors for metrics API group (#1494) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-01-24 11:34:02 -08:00
Raj Babu Das
5d7d7157ad Changing policyType to podSecurityStandard 
Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-24 14:05:50 +05:30
Raj Babu Das
bb9e73a316 Adding policies(default, restricted) to kyverno helm charts 
Signed-off-by: Raj Babu Das <mail.rajdas@gmail.com>
 2021-01-24 05:09:47 +05:30
shuting
e54776ee7e
Bug fix - namespace is not returned properly (#1491) 
* skip sending API request for filtered resource

* fix PR comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fixes https://github.com/kyverno/kyverno/issues/1490

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix bug - namespace is not returned properly

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-22 17:56:41 -08:00
shuting
62a4a3a7da
Reduce throttling - skip sending API request for filtered resources (#1489) 
* skip sending API request for filtered resource

* fix PR comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fixes https://github.com/kyverno/kyverno/issues/1490

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-21 18:58:53 -08:00
Jim Bugwadia
42879683d8
Merge pull request #1488 from chipzoller/main 
Update adopters
 2021-01-21 14:36:42 -08:00
Chip Zoller
1a5d4dc5b4 clean 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-01-21 17:33:14 -05:00
Chip Zoller
889f5ae27a Update ADOPTERS.md 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-01-21 17:33:14 -05:00
Jim Bugwadia
cfe9357254
add adopters (#1486) 2021-01-20 22:36:54 -08:00
shuting
d82f19be4e
Feature/fix dev mode execution (#1477) 
* add serverIP to X.509 certificate SANs

* disable webhook monitor in debug mode

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2021-01-20 15:25:27 -08:00
shuting
54d49ed412
revet GitHub action change for krew (#1484) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-20 14:17:39 -08:00
Shuting Zhao
aca98d3748 release v1.3.1 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-19 12:06:26 -08:00
shuting
3bc386955e
Remove unnecessary JSON patches; fixes strategicMergePatch for tolerations (#1478) 
* ignore certain paths when generates JSON patches

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* remove extra comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix https://github.com/kyverno/kyverno/issues/1339

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* resolve PR comments

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update comment

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-19 11:08:06 -08:00
shuting
eabdf3bfb7
Add DCO sign instruction (#1476) 
* test if dco is enabled

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add DCO sign instrcutions

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* remove unused file

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-18 12:13:07 -08:00
Jim Bugwadia
f93e3020e1
support nested JMESPATH var substitution (#1471) 2021-01-14 10:46:51 -08:00
Shuting Zhao
a3aad806a8 release v1.3.0 2021-01-12 12:08:02 -08:00
Shuting Zhao
f95771a3b8 add dependency to go.sum 2021-01-08 18:47:28 -08:00
Shuting Zhao
3adfdc24af fix release failure 2021-01-08 18:25:38 -08:00
Shuting Zhao
b0966de04d release v1.3.0-rc12 2021-01-08 18:18:30 -08:00
shuting
27e2b9abd5
Fix mutation panic (#1462) 
* fix #1454

* - add unit tests; - rename method
 2021-01-08 16:45:39 -08:00
Jim Bugwadia
3b86d1df7a
Merge pull request #1460 from kyverno/feature/generate_crd_ref_docs 
restructure and generate HTML docs
 2021-01-07 21:17:55 -08:00
Jim Bugwadia
947ebf135b ignore docs 2021-01-07 21:17:03 -08:00
Jim Bugwadia
ba1be6b143 restructure and generate HTML docs 2021-01-07 18:57:33 -08:00
shuting
e7a04b9138
Fix memory leak - remove item from the cache once done (audit handler) (#1459) 
* remove entry from audit handler

* fix test
 2021-01-07 16:26:59 -08:00
Jim Bugwadia
ff246a81a1
Merge pull request #1458 from kyverno/1457_wildcard_anchors 
handle anchors for wildcard annotations
 2021-01-07 11:57:21 -08:00
shuting
3908808e7a
Rename filterK8Resources to filterK8sResources (#1452) 
* Remove lock embedded in CRD controller, use concurrent map to store shcemas

* delete rcr info from data store

* skip policy validation on status update

* - remove status check in policy mutation; - fix test

* Remove fqdncn flag

* add flag profiling port

* skip policy mutation & validation on status update

* sync policy status every minute

* update log messages

* rename filterK8Resources to filterK8sResources
 2021-01-07 11:27:50 -08:00
Jim Bugwadia
3a4592ca3b handle anchors for wildcard annotations 2021-01-07 11:24:38 -08:00
lengrongfu
fab777cdd5
add logging for policy creation and deletion events (#1445) 
* add logging for policy creation and deletion events

* update log message

* update log message kind type

Co-authored-by: lengrongfu <lengrongfu@baidu.com>
 2021-01-06 20:34:01 -08:00
shuting
52d091c5a3
Improve / clean up code (#1444) 
* Remove lock embedded in CRD controller, use concurrent map to store shcemas

* delete rcr info from data store

* skip policy validation on status update

* - remove status check in policy mutation; - fix test

* Remove fqdncn flag

* add flag profiling port

* skip policy mutation & validation on status update

* sync policy status every minute

* update log messages
 2021-01-06 16:32:02 -08:00
shuting
35aa3149c8
Remove lock embedded in CRD controller, use concurrent map to store shcemas (#1441) 2021-01-04 23:17:17 -08:00
Pooja Singh
9397a2f157
Merge pull request #1440 from NoSkillGirl/bug/generate_refactoring 
Bug/generate refactoring
 2021-01-04 23:10:25 +05:30
Pooja Singh
51a2b6dc0f
Merge pull request #1439 from NoSkillGirl/cleanup/generate_logs 
cleanup/generate_logs
 2021-01-04 23:09:55 +05:30
NoSkillGirl
b4f473ec23 added crypto package 2021-01-04 19:10:36 +05:30
NoSkillGirl
e67747260b generate refactorings 2021-01-04 15:19:06 +05:30
NoSkillGirl
df009cb2d4 remove resource details from log for log level higher than 3 2021-01-04 12:33:00 +05:30
Jim Bugwadia
e23a25b68c release v1.3.0-rc11 2021-01-03 20:41:00 -08:00
Pooja Singh
72d35572d4
Merge pull request #1432 from realshuting/bug_fix 
Set CRD controller to reconcile every 15 mins
 2021-01-03 23:05:19 +05:30
Shuting Zhao
3fc4562e1b set CRD controller to reconcile every 15 mins 2021-01-03 00:14:27 -08:00
Jim Bugwadia
cb06e64e03 release 1.3.0-rc10 2021-01-02 01:26:42 -08:00
Jim Bugwadia
900a5bbf0a
Merge pull request #1428 from kyverno/1427_fix_validate_on_delete 
skip validation patterns for delete requests
 2021-01-02 01:22:52 -08:00
Jim Bugwadia
68474a9dd2 skip validation patterns for delete requests 2021-01-02 01:10:14 -08:00
Jim Bugwadia
c4296d2282 release 1.3.0-rc9 2021-01-01 17:15:01 -08:00
Jim Bugwadia
5edb8b3ee6
Merge pull request #1405 from NoSkillGirl/bug/1374_generate_rule_with_synchronization 
enqueing gr on getting deleted
 2020-12-31 16:40:01 -08:00