3275 commits

Author	SHA1	Message	Date
Charles-Edouard Brétéché	f7f3bc79d2	fix: context in api call (#6885) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-12 21:52:01 +00:00
Charles-Edouard Brétéché	2d64cdf6e2	refactor: namespace labels in engine response (#6880) ... * refactor: policy response Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * refactor: engine response Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-12 17:02:40 +00:00
Charles-Edouard Brétéché	b82c1bc386	refactor: policy response (#6877) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-12 16:20:42 +00:00
shuting	d08a50a641	add source assertion (#6869) ... Signed-off-by: ShutingZhao <shuting@nirmata.com>	2023-04-12 10:43:15 +00:00
Charles-Edouard Brétéché	3f51e99109	refactor: configuration config map controller (#6829) ... * refactor: configuration config map controller Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * rbac Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * clean Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * clean Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-11 12:05:20 +00:00
Charles-Edouard Brétéché	ba59d6391a	fix: account for cosign default repository (#6849) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-11 11:19:40 +00:00
Charles-Edouard Brétéché	289ff3e1ce	refactor: factorise engine creation (#6837) ... * refactor: factorise engine creation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-11 07:12:05 +00:00
Jim Bugwadia	9fe330d7cf	fix API call SA token and response (#6842) ... Signed-off-by: Jim Bugwadia <jim@nirmata.com>	2023-04-11 14:03:10 +08:00
Charles-Edouard Brétéché	3eff458126	fix: incorrect config loading when data is nil (#6818) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-11 03:34:47 +00:00
Charles-Edouard Brétéché	a6d6282b90	fix: improve config management (#6808) ... * fix: improve config logs Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * notification Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-06 19:13:32 +00:00
Charles-Edouard Brétéché	58d4d3c28a	fix: add logs in webhook middlewares (#6797)	2023-04-06 14:28:13 +00:00
Charles-Edouard Brétéché	de00c78513	refactor: simplify engine responses (#6804) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 22:55:42 +00:00
Charles-Edouard Brétéché	166122b0ea	refactor: engine response stats (#6796) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-06 01:07:04 +08:00
Charles-Edouard Brétéché	5ec66918f6	feat: add subresource support to resource filters (#6780) ... * feat: add subresource support to resource filters Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * filter Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * values Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 13:51:07 +00:00
Charles-Edouard Brétéché	efde33c816	fix: drop hardcoded default exclusions (#6789) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 13:05:04 +00:00
Charles-Edouard Brétéché	ab8639b643	refactor: engine execution stats (#6792) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 12:27:18 +00:00
Charles-Edouard Brétéché	a710cccb7a	fix: replace background sa name in config by a flag (#6790) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 11:50:29 +00:00
Charles-Edouard Brétéché	784ca07419	refactor: engine rule response creation (#6784) ... * refactor: engine rule response creation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * private fields Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more private Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix unit tests Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 10:35:38 +00:00
Charles-Edouard Brétéché	6f8ef4fd30	fix: histogram buckets (#6783) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-05 09:58:07 +00:00
Charles-Edouard Brétéché	5d6b987eec	refactor: kyverno_policy_execution_duration_seconds metric management (#6782) ... * refactor: kyverno_policy_results metric management Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * refactor: kyverno_policy_results metric management Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-04 16:34:58 +00:00
Charles-Edouard Brétéché	b2340785fc	refactor: kyverno_policy_results metric management (#6781) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-04 23:07:43 +08:00
Charles-Edouard Brétéché	2f1ac317f4	feat: add flag to skip resource filters in reports controller (#6778) ... * feat: add flag to skip resource filters in reports controller Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * codegen Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-04 13:05:29 +00:00
Charles-Edouard Brétéché	298e250693	feat: add exclude roles/cluster roles support in configmap (#6779) ... * feat: add exclude roles/cluster roles support in configmap Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * update chart Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * filter handler Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-04 11:59:02 +00:00
Vyom Yadav	80fc3013d3	fix: Support subresources as the trigger in generate rules (#6760) ... * fix: check background scanning only for validation policies Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> * fix: Support subresources as the trigger in generate rules Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> --------- Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>	2023-04-04 11:01:06 +00:00
Charles-Edouard Brétéché	4634760e9e	refactor: resolve roles/cluster roles/top level GVK earlier in the admission chain (#6775) ... * refactor: remove more admission request pointers Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * more Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * refactor: resolve roles/cluster roles earlier in the admission chain Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * enrich Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * enrich Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-04 10:23:20 +00:00
Charles-Edouard Brétéché	c9bbf38191	refactor: remove more admission request pointers (#6774) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-04 13:11:18 +08:00
Charles-Edouard Brétéché	40ac8eb863	feat: add context/preconditions support to mutate existing (#6754) ... * refactor: engine handlers Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * feat: add context/preconditions support to mutate existing Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * kuttl Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * readme Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix and context kuttl test Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * validation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * final fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Co-authored-by: shuting <shuting@nirmata.com>	2023-04-03 19:58:58 +00:00
Charles-Edouard Brétéché	18033a415b	refactor: remove admission request/response pointers (#6769) ... * refactor: remove admission request/response pointers Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix tests Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-03 18:08:57 +00:00
Charles-Edouard Brétéché	4cf5903545	fix: allow empty image (#6767) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-03 17:01:35 +00:00
Pradeep Lakshmi Narasimha	cc9adc5cd8	Adding validation to reject audit mode policy creation/updation when mutateDigest is set to true (#6757) ... * Adding validation to reject audit mode policy creation/updation when mutateDigest is set to true Signed-off-by: praddy26 <pradeep.vaishnav4@gmail.com> * fix tests Signed-off-by: realshuting <shutting06@gmail.com> --------- Signed-off-by: praddy26 <pradeep.vaishnav4@gmail.com> Signed-off-by: realshuting <shutting06@gmail.com> Co-authored-by: realshuting <shutting06@gmail.com> Co-authored-by: shuting <shuting@nirmata.com>	2023-04-03 15:52:32 +00:00
Charles-Edouard Brétéché	9ac141fcb9	fix: don't filter on group when service based apiservice discovery fails (#6766) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-03 14:44:01 +00:00
Ved Ratan	367156f60b	[Chore] Bump to Go 1.20 (#6683) ... * changed go version 1.19->1.20 Signed-off-by: Ved Ratan <vedratan8@gmail.com> * updated go version in actions Signed-off-by: Ved Ratan <vedratan8@gmail.com> * bumped golangci-lint Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix conflicts Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fixed some linter issues Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fixed some linter issues Signed-off-by: Ved Ratan <vedratan8@gmail.com> * possible fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * small fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> * fix Signed-off-by: Ved Ratan <vedratan8@gmail.com> --------- Signed-off-by: Ved Ratan <vedratan8@gmail.com> Signed-off-by: Ved Ratan <82467006+VedRatan@users.noreply.github.com>	2023-04-03 11:40:47 +00:00
Charles-Edouard Brétéché	b4a4e3a4f3	refactor: don't process context/preconditions in invokeHandler (#6751) ... * refactor: engine handlers Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * refactor: don't process context/preconditions in invokeHandler Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-04-03 12:57:48 +08:00
shuting	a243b405d2	add a kuttl test (#6622) ... Signed-off-by: ShutingZhao <shuting@nirmata.com>	2023-03-31 12:27:25 +02:00
Charles-Edouard Brétéché	263fd8a7a8	refactor: introduce image mutation handler (#6735) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-31 06:41:48 +00:00
shuting	55d2eeaded	refactor - fire generate upon trigger deletion (#6736) ... Signed-off-by: ShutingZhao <shuting@nirmata.com>	2023-03-31 06:08:14 +00:00
shuting	efe09b286e	fix source in events (#6739) ... Signed-off-by: ShutingZhao <shuting@nirmata.com>	2023-03-31 07:34:31 +02:00
Charles-Edouard Brétéché	94f0829a37	fix: no skip result when no image match the rule (#6733) ... * fix: no skip result when no image match the rule Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix test Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-30 15:31:11 +00:00
Charles-Edouard Brétéché	eaaa8a0236	refactor: engine responses (#6738) ... * refactor: engine responses Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-30 11:59:32 +00:00
Charles-Edouard Brétéché	d0841e4918	refactor: introduce pss validation handler (#6724) ... * refactor: remove rules pointer Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * refactor: introduce pss validation handler Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * handler Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-30 09:51:16 +00:00
shuting	e2a8d9fa04	fix: event message for the image verify rule (#6734) ... * debug Signed-off-by: ShutingZhao <shuting@nirmata.com> * debug Signed-off-by: ShutingZhao <shuting@nirmata.com> * debug Signed-off-by: ShutingZhao <shuting@nirmata.com> * debug Signed-off-by: ShutingZhao <shuting@nirmata.com> * fix Signed-off-by: ShutingZhao <shuting@nirmata.com> --------- Signed-off-by: ShutingZhao <shuting@nirmata.com>	2023-03-30 09:14:02 +00:00
shuting	805f7b72a9	remove unused ctx (#6725) ... Signed-off-by: ShutingZhao <shuting@nirmata.com>	2023-03-29 18:23:29 +00:00
Charles-Edouard Brétéché	43811733dc	refactor: remove rules pointer (#6722) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-29 17:44:09 +00:00
Vyom Yadav	c01b5cc381	fix: Don't check for subresource existence when it is the trigger. (#6544) ... Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com> Co-authored-by: shuting <shuting@nirmata.com>	2023-03-29 15:54:42 +00:00
Charles-Edouard Brétéché	c7192912fa	refactor: add preconditions check to engine invokeHandler (#6721) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-29 13:33:02 +00:00
Charles-Edouard Brétéché	7e8f72ccd3	fix: cap and validate webhook timeout (#6715) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-29 07:02:52 +00:00
Charles-Edouard Brétéché	dc8a60a43e	feat: add operations support in match/exclude (#6658) ... * feat: add operations support in match/exclude Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * clean Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * matching Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * operation Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * make operation mandatory Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * kuttl Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-29 04:22:21 +00:00
Charles-Edouard Brétéché	74664d4280	chore: remove dead code (#6710) ... Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-28 14:43:25 +00:00
Charles-Edouard Brétéché	db29d8b2ba	fix: propagate error when parsing an image fails (#6706) ... * fix: propagate error when parsing an image fails Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * Apply suggestions from code review Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-28 13:36:07 +00:00
Charles-Edouard Brétéché	391f1ae487	fix: allow image to be not present (#6707) ... * fix: allow image to be not present Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * log Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> --------- Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>	2023-03-28 13:02:29 +00:00