mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
6834 commits 15 branches 540 tags 276 MiB
Commit graph

639 commits

Author SHA1 Message Date
shuting
994d207eb6
fix: Attempt to fix the CI failure, extract CI job push-sign-install-manifest (#5035) 
* extract CI job push-sign-install-manifest

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* fix indent

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update env

Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-10-18 09:31:31 +00:00
Batuhan Apaydın
29a26e54f7
chore: Push and sign install manifests to GHCR (#4895) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Stefan Prodan <@stefanprodan>
Co-authored-by: Charles-Edouard Brétéché <@eddycharly>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
 2022-10-14 12:48:32 +00:00
Chip Zoller
b7247b5935
Update issue templates and scan for vulns action (#4952) 
* update version drop-down

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add workflow to detect and report on image vulnerabilities

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* pin deps

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump JasonEtco/create-an-issue

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump versions in drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix background mode scan with request.operation

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Revert "bump versions in drop-downs"

This reverts commit 5fcea048dd.

* Revert "bump JasonEtco/create-an-issue"

This reverts commit f0d44c7aca.

* update version drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump action version

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
 2022-10-13 22:11:58 +00:00
Batuhan Apaydın
38a15a948f
chore: add COSIGN_REPOSITORY env to ko-publish-dev step (#4922) 2022-10-13 10:55:39 +00:00
Batuhan Apaydın
f45584bfd6
chore: signing helm releases (#4801) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-10-12 20:14:44 +00:00
Chip Zoller
5346bce5ca
Add workflow to detect and report on image vulns (#4850) 
* update version drop-down

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add workflow to detect and report on image vulnerabilities

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* pin deps

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-10-10 15:10:16 +02:00
Charles-Edouard Brétéché
7e0884ca36
fix: publish yaml manifests in release instead of repo (#4738) 
* fix: publish yaml manifests in release instead of repo

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* ignore

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* pin actions

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* messages

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix helm gen crds

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* chart app version

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* makefile

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-10-03 15:12:43 +00:00
Batuhan Apaydın
e258004e76
chore: change charts registry url (#4768) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-10-02 20:20:33 +00:00
Charles-Edouard Brétéché
c28c0f2f42
docs: add policy cache controller docs (#4714) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-09-28 13:08:26 +00:00
Charles-Edouard Brétéché
332a5aa01f
chore: enable overriding images repo (#4694) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-27 17:47:59 +00:00
Charles-Edouard Brétéché
e8839a3ff7
chore: bump minimum go version (#4677) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-25 10:11:28 +00:00
Batuhan Apaydın
e35da69c92
chore: publish sbom result to a different repositry from an image (#4665) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
 2022-09-21 22:06:34 -05:00
Shubham Gupta
f00c12e954
Integrate Sonarcloud and Nancy github action (#3491) 
* Integrate Sonarcloud and Nancy github action

Integrate Sonarcloud for static code analysis and Nancy for analysing
dependencies

Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>

* fix: pin actions to commit sha

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix auth for pr

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
 2022-09-14 07:25:14 +00:00
shuting
c3e91fb357
update helm releases path (#4596) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-09-12 07:36:46 +00:00
Chip Zoller
f7853bb699
update version drop-down (#4579) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-09-10 09:45:00 -04:00
Charles-Edouard Brétéché
a0eba5bfeb
chore: preserve pr title in cherry picks (#4573) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-09 18:03:43 +00:00
Batuhan Apaydın
ff7ed78b09
chore: add kocache (#4482) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-09 09:00:25 +00:00
shuting
9297efa55f
add new patterns for releases (#4552) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-09-08 17:34:09 +00:00
Vyankatesh Kudtarkar
aa6abd99f2
Support V2beta1 Version (#4514) 
introduce new version V2beta1 which remove deprecated CRD 
types from version v1.

Signed-off-by: Vyankatesh <vyankateshkd@gmail.com>
 2022-09-08 11:19:16 +00:00
Charles-Edouard Brétéché
92e223b7ff
fix: api reference docs (#4490) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-07 14:25:57 +08:00
Charles-Edouard Brétéché
3beb4fee28
chore: test for k8s 1.25 (#4503) 
* chore: test for k8s 1.25

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* remove 1.21 tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-09-06 16:48:53 +02:00
Charles-Edouard Brétéché
870462cc6d
chore: add unit tests for pkg/utils/os (#4509) 
* chore: add unit tests for pkg/utils/os

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* review

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-06 07:19:29 +00:00
Charles-Edouard Brétéché
5e5627e81f
refactor: verify codegen targets in makefile (#4494) 2022-09-02 09:49:35 +00:00
Charles-Edouard Brétéché
caafbb74b9
fix: fetch history in pre-checks job (#4491) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-02 16:55:41 +08:00
Batuhan Apaydın
cd0d87542a
chore: publish helm charts to ghcr.io (#4479) 
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
 2022-09-01 19:15:33 +00:00
Charles-Edouard Brétéché
b65d9fc5c6
chore: bump cache action and improve paths (#4485) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-01 17:41:48 +00:00
Charles-Edouard Brétéché
89ccf7998f
chore: relax auto update PRs conditions (#4486) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-01 17:14:57 +00:00
Charles-Edouard Brétéché
b8e2d69693
fix: release workflow (#4483) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-09-01 16:19:19 +00:00
Charles-Edouard Brétéché
0c40cd8814
fix: auto update pr workflow (#4478) 2022-09-01 10:54:23 +00:00
Charles-Edouard Brétéché
6173013a6c
chore: enable cherry-pick bot (#4470) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-31 19:12:00 +00:00
Charles-Edouard Brétéché
8ddc72d792
refactor: clearly separate makefile docker targets for build and publish (#4454) 
* refactor: clearly separate makefile ko targets for build and publish

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: clearly separate makefile docker targets for build and publish

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-31 12:22:46 +08:00
Charles-Edouard Brétéché
fc79ca96a2
refactor: clearly separate makefile ko targets for build and publish (#4450) 
* refactor: clearly separate makefile ko targets for build and publish

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fixes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-30 17:30:28 +02:00
Charles-Edouard Brétéché
2b495c7ef3
chore: fix workflows related to ko recent changes (#4438) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-08-30 12:59:08 +08:00
Chip Zoller
1f6e7b17ce
Update issue template drop-down version numbers (#4446) 
* add chipzoller to CODEOWNERS

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add explanation section

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* bump versions in issue template drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-08-29 21:41:04 +00:00
Charles-Edouard Brétéché
c35e73e39c
fix: ko login (#4425) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-26 16:56:27 +00:00
Charles-Edouard Brétéché
e0da0c996c
fix: ko login (#4424) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-26 15:54:48 +00:00
Charles-Edouard Brétéché
ce4377a54e
fix: ko login (#4423) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-26 23:01:50 +08:00
Charles-Edouard Brétéché
5915f37f4d
fix: ko login (#4422) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
 2022-08-26 14:25:30 +00:00
Charles-Edouard Brétéché
9e49b25484
refactor: makefile build targets (#4418) 
* refactor: makefile

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* refactor: makefile build targets

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-26 15:23:04 +08:00
Jason Hall
6055713dfc
Use ko to build images (#4366) 
This updates Makefile targets to build images using `docker buildx
build` to use `ko build` instead.

End-to-end tests are accomplished by building and loading the image
directly into the KinD cluster via ko.

Also:
- use GitHub Actions token to push to ghcr.io (setup-ko sets this up for us)
- allow forks to push to their forked repo's packages (useful for testing)

Signed-off-by: Jason Hall <jason@chainguard.dev>

Signed-off-by: Jason Hall <jason@chainguard.dev>
 2022-08-25 20:32:40 +02:00
Charles-Edouard Brétéché
cf0ee93de8
feat: enable autogen internals by default (#4381) 
* feat: enable autogen internals by default

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* change e2e tests

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* change e2e tests matrix

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-25 23:01:43 +08:00
Prateek Pandey
34fe6c9058
bump cosign deps version to 1.11.1 (#4408) 
* bump cosign deps version to 1.11.1

to accommodate latest attestation verification fixes

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

* bump github action go version to 1.18

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-08-25 08:24:49 +00:00
shuting
e2b77641cb
bump cosign version to 1.11.0 (#4398) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-08-24 15:24:44 +00:00
Charles-Edouard Brétéché
91373e1329
fix: goimports check not working in ci job (#4387) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-08-24 13:38:49 +00:00
Charles-Edouard Brétéché
144985ee5a
chore: fix golangcilint timeout (#4388) 
* chore: fix golangcilint timeout

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix commit sha

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* add .gitattributes

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-24 21:08:24 +08:00
Charles-Edouard Brétéché
3d9417a58a
chore: add workflow to ensure github actions are pinned to a commit SHA (#4390) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-23 22:02:13 +02:00
Charles-Edouard Brétéché
8fc1754df7
chore: fix fossa ci job (#4382) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-08-23 13:30:32 +00:00
Tushar Dahiya
71af968eac
Update pr_documentation.md (#4361) 
Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>

Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>
 2022-08-21 22:05:00 +00:00
Chip Zoller
fbde1fbcbe
Template updates (#4150) 
* add chipzoller to CODEOWNERS

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version drop-downs

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add explanation section

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-06-23 13:33:22 +00:00
Chip Zoller
d1f0671fee
update drop-downs (#4081) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-06-06 23:54:35 +08:00
Prateek Pandey
0d44003386
refactor: bump KIND version to use v1.24.0 k8s release (#3877) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-06-01 14:39:55 +00:00
Charles-Edouard Brétéché
8175fc15c9
chore: add previous pod logs in case of job failure (#3978) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-05-20 20:34:55 +05:30
shuting
bccce5d9e3
Remove permissions in helm-release workflow (#3901) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-05-12 08:12:17 +00:00
Charles-Edouard Brétéché
4107140a8d
chore: enable golangci-lint in ci (#3852) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-05-10 10:22:34 +00:00
Sambhav Kothari
266bfa1077
Fix PR update flow and allow updates from release branches (#3780) 
Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
 2022-05-03 16:03:43 +08:00
Sambhav Kothari
0a9bcd5407
Auto-update PRs which are enabled for auto-merging (#3766) 2022-05-02 18:04:43 +00:00
treydock
0ae671ca7a
Cherry-pick release-1.6 Helm changes (#3689) 
* Support releasing kyverno and kyverno-policies chart separately (#3672)

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add DELETE precondition back (#3657)

* Add DELETE precondition back

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add another example and test for 'any'

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-04-27 03:52:45 +00:00
Chip Zoller
029b69fa6b
Show warnings in Helm chart installation; update issue templates (#3673) 
* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update PR template with test checklist reminders

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add "other" issue template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add "triage" label to all new issues

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* notes change

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* show warnings

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update version numbers in issue templates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add CI file per comments

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* new line for linting

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* stop being smart

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* remove ci file

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-04-27 01:45:22 +00:00
Charles-Edouard Brétéché
2e1534bd9d
fix: api reference docs link (#3664) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-04-25 21:07:42 +08:00
Charles-Edouard Brétéché
201e55fcfb
chore: remove e2e tests for kube 1.20 (#3665) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-04-25 11:43:11 +08:00
shuting
8d24582286
Update GH workflow config (#3588) 2022-04-12 07:37:37 -07:00
Shubham Gupta
f70cd4222f
Update hash of dependencies instead of mutable version (#3582) 
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
 2022-04-12 10:22:38 +01:00
Charles-Edouard Brétéché
975f6ba7c8
test: pass lock by value (#3481) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
 2022-04-05 15:52:13 +00:00
Abhi Kapoor
18d4dadab6
Do not generate preconditions not met warning for audit policies (#3487) 
* Do not generate preconditions not met warning for audit policies

Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>

* Update PR template to reeference the closing keyword

Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>

* Update pkg/engine/validation.go

Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>

* Update pkg/engine/validation.go

Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>

Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
 2022-04-05 10:08:01 +00:00
Prateek Pandey
1b2a3c1085
fix: use github repo env instead of hardcoded repo name (#3513) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-03-31 17:36:21 +08:00
Charles-Edouard Brétéché
80d1ccb26d
chore: add autogen internals e2e tests (#3492) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-03-29 16:35:27 +00:00
Charles-Edouard Brétéché
20069c13c3
feat: stop mutating rules (#3410) 
* feat: stop adding autogen annotation

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* feat: stop mutating rules

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* feat: stop mutating rules

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: use toggle

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

* fix: review comments

Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-03-28 22:01:27 +08:00
Chip Zoller
e454c71aa6
PR and issue template updates per contributors' meetings (#3428) 
* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update PR template with test checklist reminders

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Add "other" issue template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* add "triage" label to all new issues

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-03-19 21:31:54 -04:00
Charles-Edouard Brétéché
33df85cc0c
chore: remove check-helm-docs workflow (#3408) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-03-16 13:55:21 -07:00
Abhinav Sinha
9bb7238a22
Add codecov to CI (#3382) 
* Add `codecov` to CI

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>

* Add `codecov` badge for `main` to `README.md`

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>

* Addressed code review

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
 2022-03-14 16:21:27 +08:00
Charles-Edouard Brétéché
51501cce9d
chore: check helm docs are up to date (#3310) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-03-08 15:10:53 +00:00
Charles-Edouard Brétéché
8187b9331e
fix: invalid path in helm-test workflow (#3344) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>

Co-authored-by: Sambhav Kothari <skothari44@bloomberg.net>
 2022-03-08 01:08:46 +00:00
Charles-Edouard Brétéché
51db68ba20
chore: verify codegen in CI (#3343) 
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
 2022-03-07 15:13:36 +05:30
Prateek Pandey
4846bd0293
fetch tag across all branches instead of current branch (#3324) 
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
 2022-03-01 11:59:28 -08:00
Naman Lakhwani
fd7addd2fa
add separate step for digest (#3321) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-03-01 20:05:14 +05:30
Naman Lakhwani
985e2cc158
adding check for digest and update git command 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-03-01 18:36:16 +05:30
Naman Lakhwani
378a1d6b95
Fix workflow using regex in main (#3306) 
* using regex

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* added condition

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-02-25 08:48:11 +00:00
Naman Lakhwani
af98c00724
arranging permissions (#3293) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-02-25 08:11:22 +00:00
Sambhav Kothari
c4075af3d1
Improve CLI test times by instantiating openapi controller once (#3297) 
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-02-24 23:34:12 +08:00
skuethe
bf662b1ed4
fix: add support for other platforms before executing docker buildx (#3296) 2022-02-24 11:36:10 +00:00
Sambhav Kothari
e9e96e7b1c
Run E2E tests on all supported k8s versions (#3256) 2022-02-23 15:52:08 +00:00
Naman Lakhwani
a9c9b25bb5
latest will point to main (#3285) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

Co-authored-by: shuting <shuting@nirmata.com>
 2022-02-23 15:30:49 +00:00
Naman Lakhwani
81ab535433
update trivy scanning (#3284) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-02-23 10:40:07 +08:00
treydock
99efd8136f
Fix Helm releasing to preserve creation timestamps (#3268) 2022-02-21 15:50:42 +00:00
Sambhav Kothari
8c7f037c72
Improve E2E test CI timings (#3250) 
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-02-17 17:47:35 -08:00
Chip Zoller
3dcf165d77
Issue forms and PR template adjustment (#3213) 
* add cherry pick requirement

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* adopt github issue forms

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2022-02-12 16:51:05 +00:00
treydock
4e0d8ca612
Update kyverno-policies chart with latest pod-security policies (#3126) 
* Update kyverno-policies chart with latest pod-security policies
Fixes #3063
Fixes #2277

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update README to have better example

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use chart testing during e2e to test against ci values

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix e2e tests for Helm chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix Kyverno chart testing to actually test values, and fix networkpolicy template

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update README for exclusion

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Allow adding 'other' policies via Helm

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update Chart.yaml for kyverno-policies

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Bump minimum Kubernetes version in charts

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update kyverno-policies chart readme

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use version that should catch all pre-releases

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use version that should catch all pre-releases (part 2)

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Use same logic to get git tag by using Makefile target for updating Helm values

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
 2022-02-04 14:47:36 +08:00
shuting
ae4d148318
Update dev image tag in Make targets (#3159) 
* - update dev images tag; - update chart testing

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update to use dev tag when setting up e2e tests infra

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* default chart test image tag for busybox to latest

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* set image tag to latest for chart testing

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* correct tag

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove test tag in e2e.yaml

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-02-03 15:41:58 +08:00
shuting
c479b41d34
update workflow configurations to fix CI failure (#3060) 
Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2022-01-24 04:39:15 +00:00
Mritunjay Kumar Sharma
cdedf11a1c
bumps k8s libraries for k8s v1.23 upgrade for kyverno (#3043) 
* bumps k8s libraries for k8s v1.23 upgrade for kyverno

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* fixes kustomize version

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* updates golang to v1.17 to test fails

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* updates logr package to 1.2.2

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* Fixed tests for `pkg/cosign` and `pkg/webhooks/generation`

Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>

* fix go-logr deps version issue

Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>

* fix kube-openapi commit hash

Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>

Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Abhinav Sinha <abhinav@nirmata.com>
Co-authored-by: prateekpandey14 <prateekpandey14@gmail.com>
 2022-01-22 20:26:53 +08:00
Naman Lakhwani
73a02a5df3
fixing bildx version (#3023) 
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-01-19 22:14:48 +08:00
Sambhav Kothari
8ddfcacd79
Fix permissions for image publish workflows (#3021) 
All of the jobs in this workflow use the same set of permissions and this workflow is only run on pushes to master. Adding the appropriate permissions to read repository contents, publish packages and ID token for cosign.

Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-01-19 11:39:51 +00:00
Naman Lakhwani
1580837526
refactoring github actions to remove duplication and enhancement for versioned sbom's (#2979) 
* initial commit

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* adding docker-buildx-builder to makefile

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* reverting git describe in makefile

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* uploading sbom for each kyverno image

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* small nits

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>

* scanning image before pushing and removed cosign.pub

Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
 2022-01-18 15:07:59 -08:00
Roee Landesman
665d2022d8
add top level permissions to remaining github workflows (#2995) 
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
 2022-01-16 03:57:35 +00:00
Roee Landesman
3e524b5586
Add github token permissions to improve ossf scorecard (#2992) 
* Fix autogen issue with cronjob generator and foreach pod generator (#2989)

Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

* Add baseline read-all permissions

Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

* remove extra read-all

Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

* Add arm64 goarch to go releaser (#2991)

Signed-off-by: Roee Landesman <roee.landesman@gmail.com>

Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-01-15 17:14:22 -08:00
Jim Bugwadia
116f36622b
move guidelines up (#2976) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2022-01-13 18:33:24 +08:00
Shubham Palriwala
1257388b97
feat: pin dependencies in gh actions (#2952) 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2022-01-13 05:23:05 +00:00
Naman Lakhwani
8350aadc58
Fix: CI job to release images (#2929) 
* making required changes in images workflow

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* making required changes in release workflow

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

Co-authored-by: shuting <shutting06@gmail.com>
 2022-01-10 14:10:44 +00:00
Sambhav Kothari
9a9326928c
Fix the PR template checkboxes to render empty instead of brackets (#2942) 
The current PR template doesn't render the checkboxes by default as unticked and instead as square brackets. This change
allows contributors to use the rendered UI to check boxes instead of manually fixing markdown.

Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
 2022-01-09 12:02:57 -08:00
Naman Lakhwani
68c8790139
adding permissions in jobs (#2924) 
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
 2022-01-06 19:35:45 +00:00
Naman Lakhwani
2f8bfc78b1
removing spaces (#2923) 
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
 2022-01-06 17:12:11 +00:00
Naman Lakhwani
cda6310249
fix in image workflow (#2921) 
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
 2022-01-06 22:48:20 +08:00
Naman Lakhwani
f330886af7
fixing cosign command (#2915) 
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
 2022-01-05 13:02:17 -08:00
Naman Lakhwani
d126280184
keyless signing kyverno images with digest (#2896) 
* signing with digest

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* keyless signing

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* adding annotations

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>

* keyless image signing with digest in release workflow

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
 2022-01-04 08:08:28 -08:00
Abhinav Sinha
2076f07b9f
added support for --git-branch flag and directory in git path for kyverno test cmd (#2763) 
* added support for --git-branch flag and directory in git path for kyverno test cmd

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* added cli tests

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* replaced hard-coded Makefile test-cmd branch names with var GIT_BRANCH

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* moved `test-cmd` job from Makefile to github workflow

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

* added `release*` branch to `e2e` workflow

Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>

Co-authored-by: shuting <shutting06@gmail.com>
 2021-12-20 14:09:53 +08:00
shuting
f4614213e5
Test publishing dev-test images (#2848) 
* publish dev-* images

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add LD_FLAGS_DEV

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add IMAGE_TAG_LATEST_DEV

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* remove test statement

Signed-off-by: ShutingZhao <shuting@nirmata.com>
 2021-12-17 02:46:59 +00:00
Shubham Palriwala
ea3529f2d0
Trivy now scans local images (#2744) 
* fix: trivy now scans entire container

Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>

* update github.com/docker/cli package for vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix go.mod vulnerabilities

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2021-11-22 20:57:51 +08:00
Chip Zoller
7c5142b26a
Contributors updates, Kyverno CLI acknowledgements (#2644) 
* add platform to bug template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Helm value updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting, formatting, link updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting, formatting, updates

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Updates per contributors meeting; linting, fixes

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Updated templates with acknowledgement of CLI parity

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* git => GitHub

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-11-06 11:08:42 -04:00
Jose Armesto
831a9826d1
Restructure project to follow standards (#2632) 
Signed-off-by: Jose Armesto <github@armesto.net>
 2021-10-29 18:13:20 +02:00
Marcus Noble
a923dce631
Cleanup imports (#2635) 
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
 2021-10-29 12:24:26 +02:00
Vinod Anandan
a07274f234 Update gh-gomod-generate-sbom 
Signed-off-by: Vinod Anandan <vinod@owasp.org>
 2021-10-23 14:41:05 +01:00
ShubhamPalriwala
5417b9d3c1 feat: shift sigs and sbom 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-10-13 21:34:04 +05:30
NoSkillGirl
0ff18dca6f removed log for e2e test 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-11 16:21:32 +05:30
NoSkillGirl
37b91245cb corrected metric server name 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-11 15:48:53 +05:30
NoSkillGirl
d1a78e14f3 debugging 
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-10-11 15:48:53 +05:30
Shubham Palriwala
ae4fb488bf
fix: sign kyverno-cli (#2480) 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-10-05 22:28:40 -07:00
Jim Bugwadia
8437582622
Merge branch 'main' into sign-and-generate-sbom 2021-10-05 14:49:06 -07:00
ShubhamPalriwala
92ca609c7c ci: scan kyverno-image on each build 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-10-05 16:38:55 +05:30
ShubhamPalriwala
187f054809 feat: add SBOM using cosign 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-09-27 15:26:11 +05:30
ShubhamPalriwala
f3318767d8 feat: sign images using cosign on release 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-09-27 15:26:11 +05:30
ShubhamPalriwala
614975b1c6 feat: sign images using cosign on build 
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
 2021-09-27 15:26:11 +05:30
treydock
e1daf2085d
Switch Helm CRDs back to kyverno chart and move Policies to dedicated chart (#2357) 
* Switch Helm CRDs back to kyverno chart and move Policies to dedicate chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix policies chart labels

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Remove README items moved to kyverno-policies chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-09-22 13:56:10 -07:00
Pooja Singh
adb785831f
fix | e2e test cases are failing with busybox image (#2422) 
* removing charts from push and pull ignore

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated tag replace logic

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* linting fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-09-21 13:07:46 -07:00
Anita-ihuman
afae554a7b
Fixed a typo in config file (#2407) 
* create configuration for behaviour bot

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* adding contributor images

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* fixed typo in config.yml

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* including config file to ignore.

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
 2021-09-20 15:04:16 -07:00
Anita-ihuman
ac7082d76e
configured Behaviour bot. (#2402) 
* create configuration for behaviour bot

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>

* adding contributor images

Signed-off-by: Anita-ihuman <charlesanita403@gmail.com>
 2021-09-16 13:34:07 -07:00
shuting
e288ed7fd2
Fix upgrade issue from 1.4.2 to 1.4.3-rc1 (#2387) 
* update git command to get tag in 'v*' format

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add label "appVersion" to report change request

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix linter issue

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update git hash

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-09-14 01:06:56 -07:00
treydock
1f756c37ac
Only release Helm charts on tags (#2281) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-08-20 15:06:58 -07:00
treydock
45e95c2217
Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted (#2218) 
* Make Kyverno CRDs a seperate Helm chart capable of being updated/deleted

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make E2E tests work with new chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Seems Helm lint needs values.yaml

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Can't use ct install for the CRDs because will end up getting uninstalled after test

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Ensure helm release accounts for new CRD chart

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Update CRD chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make CRD chart version match main kyverno chart version

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Bump chart versions

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-08-12 13:54:17 -07:00
shuting
6ba341ff9b
- update Make target; - update release workflow config; - update PR template (#2257) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-08-12 09:58:25 -07:00
Vyankatesh Kudtarkar
adb0170001
Automate CLI binaries releases (#2236) 
* fix issue

* fix comment

* fix comment

* fix comment

* add md file

* ignore /release

* fix issue
 2021-08-10 09:07:46 -07:00
Chip Zoller
bbee030b75
add platform to bug template (#2246) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-08-09 14:37:58 -07:00
shuting
4c99b51fb7
Remove GitHub Releaser & Add app version in Helm notes (#2191) 
* - remove github releaser
- add app version in Helm notes

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update chart var

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-07-27 10:28:28 -07:00
georgekaz
c73a14eba2
add tests before release (#2174) 
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
 2021-07-20 17:06:56 -07:00
shuting
3de6128147
Bugfixes/helm release (#2173) 
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable linting

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-07-20 12:49:37 -07:00
shuting
2de0af635e
Bump Helm version (#2167) 
* bump helm version

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update helm-release trigger paths

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-07-20 00:15:33 -07:00
georgekaz
216a4e13bf
Fix helm-release workflow (#2150) 
* add checkout step to helm releaser.

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

Increment version

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* disable version check, revert version no. to last released

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
 2021-07-19 13:01:17 -07:00
georgekaz
b9e77575be
Chart changes merged,not deployed,iterate version (#2111) 
* Chart changes merged,not deployed,iterate version

kyverno#2073 - Updates chart version to v1.4.2 - merged 13 days ago but not deployed
kyverno#2081 - Fix Helm release during tag - merged 9 days ago
kyverno#2037 - updated chart contents but not chart version - not released - merged 7 days ago
kyverno#2103 - updated chart contents but not chart version - not released - merged 3 hours ago

Status - main branch shows chart version is v1.4.2, git tag is v1.4.1 and latest helm chart on artifacthub.io/packages/helm/kyverno/kyverno is v1.4.1

This PR just iterates the chart version so that it's built, but I think chart versions should be incremented as part of the normal PR/merge process if chart elements are changed

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* break the helm release out into it's own workflows

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* workflow fixes

Signed-off-by: George Kaz <egeorgekaz@gmail.com>

* don't run helm-release on PR. Remove git config bit

Signed-off-by: George Kaz <egeorgekaz@gmail.com>
 2021-07-14 12:10:41 -07:00
Jim Bugwadia
13caaed8b7
Feature/cosign (#2078) 
* add image verification

* inline policy list

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* cosign version and dependencies updates

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add registry initialization

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add build tag to exclude k8schain for cloud providers

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* generate deep copy and other fixtures

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix deep copy issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* mutate images to add digest

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add certificates to Kyverno container for HTTPS lookups

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align flag syntax

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update docs

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update dependencies

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* patch image with digest and fix checks

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* hardcode image for demos

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add default registry (docker.io) before calling reference.Parse

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix definition

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase webhook timeout

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix args

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* run gofmt

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* rename for clarity

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix HasImageVerify check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* align make test commands

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix linter error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle API conflict and retry

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix reviewdog issues

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix make for unit tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* improve error message

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix durations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* handle errors in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* print policy name

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* update tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add retries and duration to error log

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix time check in tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* round creation times in test

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix retry loop

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove timing check for policy creation

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix e2e error - policy not found

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update string comparison method

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix test Generate_Namespace_Label_Actions

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug info for e2e tests

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix error

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix generate bug

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix format

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* add check for update operations

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* increase time for deleteing a resource

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* fix check

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

Co-authored-by: Shuting Zhao <shutting06@gmail.com>
 2021-07-09 18:01:46 -07:00
treydock
c479517c53
Fix Helm release during tag (#2081) 
Fixes #2057

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-06-29 13:36:30 -07:00
Arsh Sharma
9efd58f667
deleted bot (#2059) 
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
 2021-06-23 00:23:33 -07:00
Arsh Sharma
431b36f34e
updating the bot to auto label issues and PRs (#2042) 
* changed labeler bot

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed label for hold

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
 2021-06-21 12:10:25 -07:00
shuting
6d5e988ebe
BugFix - update the annotation lastRequestTimestamp from active instances (#2019) 
* fix webhook monitor - inactive instance did not get latest request timestamp

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add checks for registered webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update veridy_deployment.sh

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add debug steps in e2d workflow

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* fix CI errors

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-06-15 18:39:22 -07:00
RinkiyaKeDad
4e6cdb9005 moved bot yaml to workflows 
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
 2021-06-15 12:44:23 +05:30
Arsh Sharma
15e4a4e4ca
initial commit (#2005) 
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
 2021-06-14 23:35:40 -07:00
treydock
f1491fe6d3
Allow metrics service annotations to be defined separate from main service (#1988) 
* Allow metrics service annotations to be defined separate from main service

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Add test for metrics during Helm deployment testing

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make services separate for kustomize

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Run 'make kustomize-crd'

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix e2e tests for metrics

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix Helm chart for metrics service

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Fix helm chart testing

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-06-10 13:53:29 -07:00
Pooja Singh
e227636271
1947/e2e generate policy (#1951) 
* fixed generate flow

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added test for generate policy with clone

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small conflict fix

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* print logs for e2e

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* changing log level

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added wait while creating policy

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* remove log level from e2e

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added a clusterpolicy check while creating a namespaced resource in e2e tests

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* updated the github_action name for e2e tests

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* changing waiting time to 1 sec

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* remove log

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

Co-authored-by: Shuting Zhao <shutting06@gmail.com>
 2021-06-07 12:36:00 -07:00
Yashvardhan Kukreja
b0ef84c581 added e2e tests: ensuring the availability of kyverno's prometheus metrics-server 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-05-24 08:09:17 +05:30
Nicolas Lamirault
d298bd2403
Fix: Link to pr_documentation file (#1872) 
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
 2021-05-04 09:47:11 -07:00
Chip Zoller
e2c522f4c6
fix link to PR doc (#1803) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-04-15 10:34:02 -07:00
treydock
67973c2776
Add Helm tests to Github Actions (#1793) 
This reverts commit 2749280b6c.

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-13 10:39:27 -07:00
shuting
2749280b6c
Revert "Add Helm tests to Github Actions (#1790)" (#1792) 
This reverts commit 9c7f7019f3.
 2021-04-12 21:57:21 -07:00
treydock
9c7f7019f3
Add Helm tests to Github Actions (#1790) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-12 20:55:13 -07:00
Chip Zoller
fae48094d8
add PR docs guide (#1788) 
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-04-12 18:00:29 -07:00
treydock
0131f375f1
Register webhooks only once service endpoint is ready (#1741) 
* Register webhooks only once service endpoint is ready

Fixes #1740

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Wait for webhook to become ready in main loop

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Better error handling and logging around checking endpoint

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Log soft failure as info, remove redundant return

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-03-30 13:46:01 -07:00
Vyankatesh Kudtarkar
04dc3ddfe3
Remove sample Dir and Remove testcases from test_runner (#1686) 
* remove sample Dir and remove testcases form test_runner

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* change git URL for test

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix fmt issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* remove unused policy and test yamls

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* fix yaml path issue

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

Co-authored-by: vyankatesh <vyankatesh@neualto.com>
 2021-03-16 14:35:32 -07:00
shuting
c816cf3d69
Add certificate renewer in webhook registration controller (#1692) 
* load TLS pair from existing secret, if applicable

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* remove Kyverno managed secrets during shutdown

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* - add certificate renewer; - re-structure certificate package

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* commit un-saved file

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* eliminate throttling requests while registering webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* disable webhook monitor (in old pod) during rolling update

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* remove webhook cleanup logic from init container

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update PR template

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update link to the website repo

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update repo name

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-16 11:31:04 -07:00
Raj Babu Das
08643773c3
removing go.sum from github workflow and adding unused pkg check (#1698) 
Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
 2021-03-11 10:14:46 -08:00
Jim Bugwadia
16a61978c9
add issue configuration 2021-03-07 14:31:18 -08:00
Jim Bugwadia
0e9d3c8456
Delete scenario-to-support.md 2021-03-07 14:24:23 -08:00
Jim Bugwadia
94970c7632 Update issue templates 2021-03-07 13:45:27 -08:00
Raj Babu Das
7a1629aa9d
Adding parallel GitHub pipeline to reduce the build time (#1635) 
* refactoring github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* refactoring github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* stage-pipeline

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* Refactoring release and push github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* refactoring github workflow

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>

* adding release-cli-via-krew

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
 2021-02-22 14:48:11 -08:00
Raj Babu Das
0b832a038d
Adding multi arch support in all kyverno components (AMD6 and ARM64) (#1542) 
* Adding multi arch support

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding multi arch support

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* minor refactors

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* adding buildx action in e2e.yaml

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding kyvernopre

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding kyvernopre

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding amd build

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding go env

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* minor fix

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* removing docker tag

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding local dockerfile build command

Signed-off-by: rajdas98 <mail.rajdas@gmail.com>
 2021-02-18 18:09:01 -08:00
Chip Zoller
6d2d2e3c1b
Actually fix contributor link in PR template (#1575) 
* update links and formatting in PR template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update policy submission request template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* actually fix contrib guidelines

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* actually fix contrib guidelines

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-02-10 08:57:43 -08:00
Chip Zoller
4dbfb9490b
update links and formatting in PR template (#1573) 
* update links and formatting in PR template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* update policy submission request template

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
 2021-02-09 15:02:15 -08:00
Yashvardhan Kukreja
426475b16c
added: gofmt check over the existing github workflows (#1553) 
* added: gofmt check over the existing github workflows

Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>

* added: gofmt check with logs added

Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-02-09 11:34:13 -08:00
shuting
54d49ed412
revet GitHub action change for krew (#1484) 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-01-20 14:17:39 -08:00
Shuting Zhao
f95771a3b8 add dependency to go.sum 2021-01-08 18:47:28 -08:00
Jim Bugwadia
947ebf135b ignore docs 2021-01-07 21:17:03 -08:00
Ihor Dvoretskyi
ee31fabcbc
FOSSA scanning added (#1407) 
Signed-off-by: GitHub <noreply@github.com>
 2020-12-17 10:48:24 -08:00
Yuvraj
5ecdfda4e0
Improve github action (#1385) 
* Improve github action

Improve the github action

fix issue

Trigger Krew on relese and skip prerelease

Updated create infrastructure script

* More changes

* More changes

* Added check for prerelease

* Added check for prerelease

* Revert change
 2020-12-15 11:46:53 -08:00
Chip Zoller
b0177625c7 update policy issue template 2020-11-29 10:09:27 -05:00
Shuting Zhao
5f3c0cef4a update github workflow - disable krew release on rc release 2020-11-25 15:50:56 -08:00
Shuting Zhao
9399adeb0f remove --unshallow 2020-11-24 15:24:35 -08:00
Shuting Zhao
276e863fa7 combine helm release with gh release 2020-11-24 15:00:18 -08:00
Shuting Zhao
971a7523ca migrate to chart-releaser 2020-11-24 14:52:40 -08:00
Shuting Zhao
023f5aa46a update GitHub Action release process 2020-11-24 14:44:11 -08:00
Shuting Zhao
ff8111bc47 split release steps 2020-11-24 14:26:19 -08:00
Shuting Zhao
3404799a42 change to use GITHUB_TOKEN 2020-11-24 13:38:43 -08:00
Shuting Zhao
1612daf111 update releaser.yaml 2020-11-24 12:56:35 -08:00
Shuting Zhao
ac1c56d946 update Personal Access Token 2020-11-24 12:24:14 -08:00
shuting
7ad6b3b5cd
Migrate registry (#1300) 
* migrate image to GitHub registry

* remove registry login

* add back registry login
 2020-11-24 12:00:33 -08:00
shuting
f73c40ab4e
Migrate image to GitHub registry (#1299) 
* migrate image to GitHub registry

* remove registry login
 2020-11-24 11:49:08 -08:00
Chip Zoller
7ee346b0de
column misspelling (#1290) 
* column misspelling

* edit description with tip about conditional adds

* Enhance bug report template
 2020-11-23 14:05:46 -08:00
shuting
bc2e7fcbb3
Revert "Migrate image to GitHub registry" 2020-11-19 13:59:26 -08:00
Shuting Zhao
361d63cc4b migrate image to github registry 2020-11-19 12:19:30 -08:00
shuting
5e07ecc5f3
Add Policy Report (#1229) 
* add report in cli

* policy report crd added

* policy report added

* configmap added

* added jobs

* added jobs

* bug fixed

* added logic for cli

* common function added

* sub command added for policy report

* subcommand added for report

* common package changed

* configmap added

* added logic for kyverno cli

* added logic for jobs

* added logic for jobs

* added logic for jobs

* added logic for cli

* buf fix

* cli changes

* count bug fix

* docs added for command

* go fmt

* refactor codebase

* remove policy controller for policyreport

* policy report removed

* bug fixes

* bug fixes

* added job trigger if needed

* job deletation logic added

* build failed fix

* fixed e2e test

* remove hard coded variables

* packages adde

* improvment added in jobs sheduler

* policy report yaml added

* cronjob added

* small fixes

* remove background sync

* documentation added for report command

* remove extra log

* small improvement

* tested policy report

* revert hardcoded changes

* changes for demo

* demo changes

* resource aggrigation added

* More changes

* More changes

* - resolve PR comments; - refactor jobs controller

* set rbac for jobs

* add clean up in job controller

* add short names

* remove application scope for policyreport

* move job controller to policyreport

* add report logic in command apply

* - update policy report types;  - upgrade k8s library; - update code gen

* temporarily comment out code to pass CI build

* generate / update policyreport to cluster

* add unit test for CLI report

* add test for apply - generate policy report

* fix unit test

* - remove job controller; - remove in-memory configmap; - clean up kustomize manifest

* remove dependency

* add reportRequest / clusterReportRequest

* clean up policy report

* generate report request

* update crd clusterReportRequest

* - update json tag of report summary; - update definition manifests; -  fix dclient creation

* aggregate reportRequest into policy report

* fix unit tests

* - update report summary to optional; - generate clusterPolicyReport; - remove reportRequests after merged to report

* remove

* generate reportRequest in kyverno namespace

* update resource filter in helm chart

* - rename reportRequest to reportChangeRequest; -rename clusterReportRequest to clusterReportChangeRequest

* generate policy report in background scan

* skip generating report change request if there's entry results

* fix results entry removal when policy / rule gets deleted

* rename apiversion from policy.kubernetes.io to policy.k8s.io

* update summary.* to lower case

* move reportChangeRequest to kyverno.io/v1alpha1

* remove policy report flag

* fix report update

* clean up policy violation CRD

* remove violation CRD from manifest

* clean up policy violation code - remove pvGenerator

* change severity fields to lower case

* update import library

* set report category

Co-authored-by: Yuvraj <yuvraj.yad001@gmail.com>
Co-authored-by: Yuvraj <10830562+evalsocket@users.noreply.github.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
 2020-11-09 11:26:12 -08:00
Shuting Zhao
3e1c5f5830 update master to main in CI automation files 2020-11-03 13:56:57 -08:00
shuting
f15730b3a9
Publish test image (#1185) 
* push image on PR

* add docker login in CI

* publish image once PR is merged

* update order

* change condition when publish image

* add image publish as a separate github action

* remove condition

* set go env
 2020-10-09 19:25:32 -07:00
shuting
4ba2aad493
Publish test image (#1184) 
* push image on PR

* add docker login in CI

* publish image once PR is merged

* update order

* change condition when publish image

* add image publish as a separate github action

* remove condition
 2020-10-09 19:22:05 -07:00
shuting
e5f408742f
Publish test image (#1183) 
* push image on PR

* add docker login in CI

* publish image once PR is merged

* update order

* change condition when publish image

* add image publish as a separate github action
 2020-10-09 19:16:28 -07:00
shuting
5eb38114b9
Publish test image (#1182) 
* push image on PR

* add docker login in CI

* publish image once PR is merged

* update order

* change condition when publish image
 2020-10-09 19:00:52 -07:00
shuting
0c7e5aa755
Publish test image (#1179) 
* add annotation in best practice policy require-pod-probes

* migrate repo

* push image on PR

* add docker login in CI

* publish image once PR is merged

* update order
 2020-10-09 18:49:29 -07:00
Yuvraj
1b7a295860
git action added (#1078) 2020-08-21 12:24:02 -07:00
Yuvraj
632d1fc226
kyverno-cli and helm release step added in workslow (#1043) 
* e2e test added in release

* added steps

* dirty added in hash

* new make command added

* dirty remove from make

* a new step added
 2020-08-11 10:04:25 -07:00
Yuvraj
c236a3a48a
Added e2e test in release (#1042) 
* e2e test added in release

* added steps

* dirty added in hash

* new make command added

* dirty remove from make
 2020-08-11 09:32:51 -07:00
Yuvraj
19c8f6a9ba
install.yaml added in release (#1038) 
* install.yaml added in gorelease

* release added

* revert changes

* tested release

* tested release
 2020-08-10 17:16:13 -07:00
Yuvraj
9c0d54f35a
e2e workflow added (#1021) 
* e2e flow added

* add kustomize image change in ci
 2020-08-06 11:56:31 +05:30
Mohan B E
6e827f912f
Feature/e2e 575 (#1018) 
* added api templates

* E2E test for generate roles, rolebindings, clusterrole and clusterrolebindings

* table driven e2e tests

* table driven e2e tests and go fmt

* removed unwanted vars

* increased sleep time

* removed role generation clone

* increated sleep time

* added rolebinding clone and retry mechanism for get resources

* modified test for clone

* added namespace to role

* added namespace variable

* added git actions job

* changed build name

* removed docker login

* added role verbs

* removed github actions job and rbac file

* added clusterrole test with clone

* fixed travis issue
 2020-08-06 10:46:10 +05:30
Yuvraj
bad0dab175
ci migrated (#1015) 
* ci migrated

* remove travis ci

* typo fix

* delete size labeler

* fix test issues

* test ci added

* rename build workflow
 2020-08-05 09:02:45 -07:00
Yuvraj
7a8298419e
kyverno CLI accessable through krew (#941) 
* automate kyverno-cli plugin release for krew

* windows support added

* revert ci changes

* update plugin name

* documentation added

Co-authored-by: Yuvraj <yuvraj@neualto.com>
 2020-07-08 09:05:55 -07:00
Yuvraj
5faf8b79ec
Added trigger for all type of tags 2020-06-18 08:13:11 -07:00
Yuvraj
fd872dc7a3 added tag for prerelease github action 2020-06-18 15:03:27 +00:00
Yuvraj
a514daf32e
helm release when new tag will be publish (#929) 2020-06-08 22:22:26 -07:00
Yuvraj
874ea34763
Hotfix/remove docker changes (#909) 
* remove brew and scoop from goreleaser and added gh for testing
 2020-06-04 16:09:12 -07:00
Yuvraj
7be3f41546
revert docker build changes (#907) 2020-06-04 15:38:12 -07:00
Yuvraj
03b74d0cd8
Hotfix/ci (#906) 
* Hotfix: fix ci pipeline
 2020-06-04 15:00:01 -07:00
Yuvraj
d51807aac2
Hotfix/ci (#905) 
* docs update and fixed issue for docker push on release
 2020-06-04 14:31:54 -07:00
Yuvraj
b6cf90909f
Hotfix: fix ci pipeline (#904) 2020-06-04 13:58:21 -07:00
Yuvraj
d5ea0415de
remove arm from goreleaser (#903) 
* Feature : Added complete release cycle and created install bash script for kyverno-cli
 2020-06-04 11:45:37 -07:00
Yuvraj
ecf66c5948
Merge pull request #881 from evalsocket/fix-875 
helm release workflow added
 2020-06-03 09:57:00 -07:00
Yuvraj
0943ed33ae
revert testing changes 2020-06-02 14:04:58 -07:00
Yuvraj
e589d36299
remove reindexing 2020-06-02 14:01:31 -07:00
Yuvraj
a7975b5226
testing changes 2020-06-02 13:58:12 -07:00
Yuvraj
cf9e84d0b1 revert testing change 2020-06-02 13:55:07 -07:00
Yuvraj
ae95a2a826
Testing chnages 2020-06-02 13:44:23 -07:00
Yuvraj
b66d8ae8e6 rename access token secret 2020-06-02 13:42:55 -07:00
Yuvraj
f695b17208
Added fixes for helm release 2020-05-29 08:48:25 -07:00
Yuvraj
e74373708d comment out reindex for testing 2020-05-28 13:22:15 -07:00
Yuvraj
0db01bed80 comment out reindex for testing 2020-05-28 13:13:13 -07:00
Yuvraj
6bd2ed65c6 small typo fix 2020-05-28 13:05:15 -07:00
Yuvraj
c46e07d8bd
commented out helm version check for first time 2020-05-28 13:02:48 -07:00
Yuvraj
17b4404266
Testing changes 2020-05-28 13:00:01 -07:00
Yuvraj
aaa93fc8e4
Remove build on pr 2020-05-28 12:57:03 -07:00
Yuvraj
a9238af08a
testing changes for goreleaser PR 2020-05-28 12:24:50 -07:00
Yuvraj
5391713a00 testing change revert 2020-05-28 20:07:21 +05:30
Yuvraj
55f44b8fce testing gorelese 2020-05-28 19:50:20 +05:30
Yuvraj
1cde29af8d remove krew changes 2020-05-28 14:06:41 +00:00
Yuvraj
aad6504fc5 publish helm package for gh-pages branch 2020-05-27 11:09:18 -07:00
Yuvraj
726ab935ee
Update .github/workflows/helm-release.yaml 
Co-authored-by: Michael Barrientos <mbarrien@users.noreply.github.com>
 2020-05-27 11:41:47 +05:30
Yuvraj
37964ebc55 helm release workflow added 2020-05-27 06:06:46 +00:00
Yuvraj
3a7aa3b892 traves ci release added 2020-04-29 11:09:39 -07:00
Yuvraj
225c8a79ad krew setup 2020-04-29 10:38:21 -07:00
Yuvraj
5dc784f3b2 goreleaser added 2020-04-29 09:58:20 -07:00
Yuvraj
7221fc8200 goreleaser added 2020-04-29 09:57:49 -07:00
Jim Bugwadia
bf196be7a2
Update scenario-to-support.md 2019-10-30 08:31:48 -07:00
Jim Bugwadia
2597bf1341 Update issue templates 2019-08-04 17:26:25 -07:00
Shivkumar Dudhani
0916b819c1 add template for bug & feature request 2019-07-05 11:43:06 -07:00
shivkumar dudhani
2585fa8b9b move pull request template file 2019-06-24 12:46:59 -07:00
Shivkumar Dudhani
4e730bed35 Update issue templates 
Scenario
 2019-06-21 16:29:29 -07:00