shuting
955570b0c5
fix: auth checks with the APIVersion and the subresource ( #7628 )
...
* fix auth checks with apiVersion and subresource
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove duplicate code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update permissions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-22 14:14:06 +00:00
shuting
f6b097db17
fix: deletion mismatch for the generate policy ( #7579 )
...
* fix deletion mismatch
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix clone source kind
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fetch kinds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-20 12:58:23 +00:00
shuting
3786e49cad
reduce sleep duration for generate kuttl tests ( #7589 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-19 16:58:39 +00:00
Mike Bryant
91021b65b6
fix: Delete downstream objects on precondition fail ( #7496 )
...
* fix: Delete downstream objects on precondition fail
When a rule fails the match in a generate rule, the downstream resource gets deleted. This will now also happen if the rule is skipped due to a precondition.
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
* add debug command
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* sync trigger updates to downstream
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix bgscan fetching trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: Move rbac change into tests for better isolation
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
* fix unit test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-06-15 11:32:19 -04:00
Mike Bryant
93bbc57c7a
fix: Remove ownerReferences when cloning across Namespaces ( #7517 )
...
Signed-off-by: Mike Bryant <mike.bryant@mettle.co.uk>
Co-authored-by: shuting <shuting@nirmata.com>
2023-06-13 15:35:10 +00:00
shuting
5ce80c4e68
fix: target scope validation for the generate rule ( #7479 )
...
* fix target scope validation for generate
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-13 10:26:56 +00:00
shuting
5fa6e1fa48
fix: cloneList sync behavior ( #7466 )
...
* fix flaky tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#7463 )
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](f4ef78c080...465a07811f#7462 )
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator ) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases )
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.6.0...v1.7.0 )
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix cloneList sync behavior
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* skip creating duplicate URs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* renam
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-13 09:12:13 +00:00
shuting
9a12f09648
fix flaky tests ( #7460 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-08 07:55:26 +02:00
shuting
0c3351887a
fix: the same source cannot be used for multiple targets with a generate clone rule ( #7436 )
...
* add source labels to targets
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* handle multiple triggers/targets for the same clone source
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add source labels to targets
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove unused code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename the test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* split apiversion label into version and group
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-07 13:50:47 +00:00
shuting
7b7d64dcf2
fix: array element removal should be synced to the downstream resource with a generate data sync rule ( #7417 )
...
* refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix downstream update
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix panic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix flaky test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-06 12:07:07 +02:00
shuting
3db7c41a62
Remove policy validation prevent loop for generate ( #7388 )
...
* remove checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-06-02 13:53:16 +02:00
Alok Naushad
ad1c2d6bca
test: pod restart on configmap/secret update ( #7306 )
...
* test: pod restart on secret update
Signed-off-by: Alok N <alokme123@gmail.com>
* fix: requested changes
Signed-off-by: Alok N <alokme123@gmail.com>
* fix: debug remove, secret
Signed-off-by: Alok N <alokme123@gmail.com>
---------
Signed-off-by: Alok N <alokme123@gmail.com>
2023-05-26 11:06:13 -04:00
shuting
9cac3698ec
validate target resource scope & namespace settings ( #7098 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-05 11:08:08 +00:00
shuting
a7900ff40c
require generate.apiVersion ( #7080 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-05-03 10:33:29 +00:00
shuting
f87b0204e6
fix: generate policy validation to prevent endless loop ( #7026 )
...
* refactor policy validation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add loop check for generate
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* linter fixes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* linter fixes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-28 13:54:17 +00:00
shuting
2cd407f1d1
fix: refine event permissions in default roles ( #6957 )
...
* remove the event delete permission
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add '- events.k8s.io/v1'
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-17 15:41:45 +00:00
shuting
117a7ca0f8
fix ( #6916 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-13 18:13:14 +00:00
shuting
9bfbe7d2e8
split tests ( #6900 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-13 09:50:35 +00:00
shuting
2948adba57
fix: auth check the generate policy when use variables in name/namespace ( #6874 )
...
* decrease log level
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* set namespace to for 'all'
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* udpate kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename file
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename file
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-13 07:38:47 +00:00
shuting
d08a50a641
add source assertion ( #6869 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-12 10:43:15 +00:00
Vyom Yadav
80fc3013d3
fix: Support subresources as the trigger in generate rules ( #6760 )
...
* fix: check background scanning only for validation policies
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
* fix: Support subresources as the trigger in generate rules
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
---------
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
2023-04-04 11:01:06 +00:00
shuting
9bca7b36b1
fix clone test ( #6777 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-04-04 11:46:58 +02:00
yinka
04c7b64ae7
add kuttl generate tests for Namespaced policy ( #6662 )
...
* [WIP] kuttl generate tests for Namespaced Policy
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-clone-create-on-trigger-deletion
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-data-sync-delete-trigger
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-clone-sync-delete-trigger
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-data-nosync-delete-trigger
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-clone-nosync-delete-trigger
Signed-off-by: yimikao <holayinkajr@gmail.com>
* add change
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-data-sync-update-trigger-no-match
Signed-off-by: yimikao <holayinkajr@gmail.com>
* remove file
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-data-nosync-update-trigger-no-match
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-clone-sync-update-trigger-no-match
Signed-off-by: yimikao <holayinkajr@gmail.com>
* pol-clone-nosync-update-trigger-no-match
Signed-off-by: yimikao <holayinkajr@gmail.com>
* corner cases
Signed-off-by: yimikao <holayinkajr@gmail.com>
* standard
Signed-off-by: yimikao <holayinkajr@gmail.com>
* remove failing test
Signed-off-by: yimikao <holayinkajr@gmail.com>
* sleep before assert
Signed-off-by: yimikao <holayinkajr@gmail.com>
* increase sleep dur
Signed-off-by: yimikao <holayinkajr@gmail.com>
* sleep before assert
Signed-off-by: yimikao <holayinkajr@gmail.com>
* use cm
Signed-off-by: yimikao <holayinkajr@gmail.com>
* fix cm name
Signed-off-by: yimikao <holayinkajr@gmail.com>
* use former resources
Signed-off-by: yimikao <holayinkajr@gmail.com>
* fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: yimikao <holayinkajr@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-04-03 18:45:24 +00:00
shuting
a243b405d2
add a kuttl test ( #6622 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-31 12:27:25 +02:00
shuting
55d2eeaded
refactor - fire generate upon trigger deletion ( #6736 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-31 06:08:14 +00:00
shuting
6249ab70e8
fix: block generate policies when lack of permission to operate downstream resources ( #6610 )
...
* debug
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* return on errors only
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update clusterrolebinding
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update clusterrolebinding
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove debug
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix ns
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-22 13:14:57 +00:00
shuting
6f7f06f0d4
chore: cleanup generate codebase ( #6598 )
...
* add debug info
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* cleanup code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* linter fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove unused labels
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename ns
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* reset resource version
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove ur updater
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* cleanup code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove code to add labels to clone source #6583
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename ns
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remvove labels from test resource
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove generated by labels
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-17 08:36:06 +00:00
shuting
637f830917
feat: apply generate rules on trigger events ( #6508 )
...
* - fire generation on trigger deletion, with condition rules;
- delete downstream if trigger no longer matches;
- delete downstream if trigger is deleted, with sync rule
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* trim condition key spaces
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix UR spec
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-create-on-trigger-deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-create-on-trigger-deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-sync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-nosync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-sync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename policy
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-nosync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add debug logs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-create-on-trigger-deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update readme
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-sync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-nosync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-sync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update readme
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-nosync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-10 17:17:10 +00:00
shuting
48726dcd4a
feat: validate immutable fields for a generate rule - 2 ( #6451 )
...
* update validation checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix ns assertions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-10 14:39:44 +00:00
shuting
85a83e4fae
fix: namespace matching for background namespaced policies ( #6530 )
...
* fix namespace matching for background policies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test match-trigger-namespace
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 13:55:08 +00:00
shuting
a61dac613b
add a kuttl test cpol-data-sync-to-nosync-delete-rule ( #6529 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-10 12:55:33 +00:00
shuting
4572eab750
fix: apply generate existing when a new rule is added ( #6472 )
...
* trigger generate existing when a new rule is added
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* ignore existing rule updates
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-06 15:40:49 +00:00
shuting
ea306d6d7f
rename generateExistingOnPolicyUpdate to generateExisting ( #6470 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-03 12:05:53 +01:00
shuting
0b359d07db
rename GenerateExistingOnPolicyUpdate to GenerateExisting ( #6321 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-03 09:34:55 +00:00
shuting
264eaec049
fix: remove timestamp checks for the clone rule ( #6439 )
...
* remove timestamp checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-01 15:49:05 +00:00
shuting
86fc31f63b
feat: add validations for generate immutable fields ( #6328 )
...
* add validations for generate immutable fields
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 (#6334 )
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.26.0 to 1.27.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.26.0...v1.27.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Jmespath typo fix (#6342 )
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
* chore(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 (#6341 )
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases )
- [Commits](https://github.com/golang/net/compare/v0.6.0...v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (#6348 )
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions ) from 2.0.5 to 2.1.0.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases )
- [Commits](bd2868d14a...b9ddf6a515#6347 )
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.27.0 to 1.27.1.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.27.0...v1.27.1 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: dump admission response (#6349 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: use labels.Everything in userinfo clusterroles matching (#6351 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update k8s.gcr.io to registry.k8s.io (#6340 )
Signed-off-by: Rayan Das <rayandas91@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* Notary v2 (#6011 )
* fix make debug-deploy
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* improve log messages
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* initial update
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* initial update
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update registry credentials handling order
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* comment out ACR helper - breaks anonymous image pull
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* merge main and refactor verifiers
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix opt init
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove local address
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update to NotaryV2 RC
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix fmt
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update deps
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* format imports
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove env and no-op statement
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix merge issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter issue
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove unused field
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* make fmt
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* renable ACR credential helper
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* Update .vscode/launch.json
Signed-off-by: shuting <shutting06@gmail.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
* chore(deps): bump fluxcd/flux2 from 0.39.0 to 0.40.0 (#6362 )
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](978cc0c5b8...2cac6ce281#6305 )
* OldObject translation solved in autogen
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
* CronJob fixed in autogen
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
* tests added
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
---------
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: logger key value in wrong order (#6365 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: missing metrics for policies in audit mode (#6363 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* chore(deps): bump github.com/notaryproject/notation-go (#6361 )
Bumps [github.com/notaryproject/notation-go](https://github.com/notaryproject/notation-go ) from 1.0.0-rc.1 to 1.0.0-rc.3.
- [Release notes](https://github.com/notaryproject/notation-go/releases )
- [Commits](https://github.com/notaryproject/notation-go/compare/v1.0.0-rc.1...v1.0.0-rc.3 )
---
updated-dependencies:
- dependency-name: github.com/notaryproject/notation-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix: role matching from authentication infos (#6358 )
* fix: role matching from authentication infos
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: delete certificate secret if type is not TLS (#6368 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: user/groups exclusions (#6357 )
* refactor: user/groups exclusions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* wildcard
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add labels to downstream and source resources (#6322 )
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update generate validation checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Rayan Das <rayandas91@gmail.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Abhishek Kumar <76171953+octonawish-akcodes@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Rayan Das <rayandas91@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-03-01 06:52:20 +00:00
shuting
0c91e87bbb
fix: delete downstream for a generate rule removal, with data and sync ( #6393 )
...
* remove policy handler for updates
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove policy update handler from the ur controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rework cleanup downstream on policy deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix downstream deletion on data rule removal
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test for clusterpolicy
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* linter fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test for policy
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update api docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add delays
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix name assertion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* delete downstream when deletes the clone source
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test pol-clone-sync-delete-source
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* linter fixes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test pol-clone-sync-delete-downstream
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl test pol-data-sync-modify-rule
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix panic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix panic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix labels
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix policy assertions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix annotation missing names
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename policy
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove dead code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* create unique namespaces
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* create more unique namespaces
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix assertion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2023-03-01 03:48:18 +00:00
Chip Zoller
bc7b73401e
More kuttl standard generate tests ( #6332 )
...
* add test cpol-data-sync-delete-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test cpol-data-sync-modify-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* rename to be more descriptive
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-sync-delete-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* cleanup test
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test cpol-data-nosync-delete-rule
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test cpol-data-nosync-delete-policy
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix formatting
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add Kyverno kuttl specific snippets to BEST_PRACTICES
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add reminder note
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test cpol-data-nosync-modify-rule
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test cpol-data-nosync-modify-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-nosync-create-policy-invalid
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-sync-delete-policy
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* separate files
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-nosync-delete-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-nosync-delete-rule
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-nosync-delete-policy
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix description
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix description
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-nosync-modify-rule
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test pol-data-nosync-modify-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test existing-basic-create-data
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test existing-basic-create-preconditions-data
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add basic clone multiple test
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add delays
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add generate permissions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* reorder source and ClusterPolicy, cleanup removal, README update
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add test for cascading-mutation
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Change creation order, remove cleanup
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* increase sleep
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* remove unused test files
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* remove networkpolicies from perms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add networkpolicies back
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* clarify readme
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
---------
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-02-27 14:39:18 +00:00
shuting
ccfcce83da
add kuttl test pol-clone-sync-modify-source ( #6407 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-27 11:51:21 +00:00
shuting
3653130806
feat: add the kuttl test for Policy (Namespaced) with generate rule, data, and sync ( #6387 )
...
* add the test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update readme
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-24 21:59:17 +00:00
shuting
d3c2cd23fa
add kuttl tests ( #6336 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-24 14:59:55 +00:00
shuting
07b350166f
feat: add kuttl test for namespaced generate policy, with clone and sync ( #6386 )
...
* add a kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix policy type
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix policy type
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix policy type
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-24 11:36:19 +00:00
shuting
d5684f6794
add labels to downstream and source resources ( #6322 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-22 10:49:09 +00:00
Charles-Edouard Brétéché
cfd4501dcc
test: add a couple pattern unit tests ( #6252 )
...
* test: add a couple pattern unit tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-02-08 11:17:42 +00:00
shuting
6b3be9ada1
feat: enable leader election for the background controller ( #6237 )
...
* enable leader election for the background controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update api docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-02-07 14:44:51 +01:00
Prateek Pandey
42221a93e4
fix: add clone check before validating namespace policy ( #5459 )
...
fix: add clone check before validate clone namespace
- fix data policy validation
- add kuttl tests to validate the behaviour
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-11-25 12:49:22 +05:30
Chip Zoller
c708f4a881
Add most basic kuttl tests for generate rules, clone and sync ( #5413 )
...
- add pol-clone-nosync-create and pol-clone-nosync-invalid tests
- add pol-clone-nosync-delete-downstream
- add pol-clone-nosync-modify-downstream
- add pol-clone-nosync-delete-source
- add pol-clone-nosync-modify-source
- add pol-clone-nosync-delete-rule
- add pol-clone-nosync-delete-policy
- add cpol-clone-sync-delete-rule
- add cpol-clone-sync-delete-policy
- add (but disabled) cpol-clone-sync-modify-source
- fix and move back cpol-clone-sync-modify-source
- add cpol-clone-sync-delete-source
- add cpol-clone-sync-modify-downstream
- add pol-clone-sync-invalid
- add pol-clone-sync-delete-rule
- add pol-clone-sync-delete-policy
- introduce pre-test sleep for Namespace deletion
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-11-21 16:30:25 +05:30
Chip Zoller
e749e6a8e5
Complete all basic kuttl tests for generate rules, clone and no-sync ( #5400 )
...
* add pol-clone-nosync-create and pol-clone-nosync-invalid tests
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add pol-clone-nosync-delete-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add pol-clone-nosync-modify-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add pol-clone-nosync-delete-source
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add pol-clone-nosync-modify-source
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add pol-clone-nosync-delete-rule
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add pol-clone-nosync-delete-policy
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-17 21:56:20 +01:00
Chip Zoller
987e6d1cf6
Fix incorrect step ID reference ( #5388 )
...
- remove unnecessary test files
- fix incorrect step ID reference
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-17 18:48:01 +05:30
Chip Zoller
6fe8a4ae07
Add more kuttl generate test cases ( #5364 )
...
* fix digest variable
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update description of cpol-clone-nosync-delete-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add cpol-clone-nosync-delete-rule
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add cpol-clone-nosync-delete-policy
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add cpol-clone-nosync-modify-source
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add cpol-clone-nosync-delete-source
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add cpol-clone-nosync-modify-downstream
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-17 10:38:43 +00:00
