shravan
|
79145603d9
|
658 resolving merge conflicts
|
2020-02-07 15:07:25 +05:30 |
|
shravan
|
70ea63cab3
|
658 removing unused commented out code
|
2020-02-07 15:02:36 +05:30 |
|
shravan
|
88083e91d6
|
658 removing outdated test from previous commit
|
2020-02-06 15:40:58 +05:30 |
|
shravan
|
dd7e63e1a6
|
658 removing outdated tests and fixing broken ones
|
2020-02-05 17:00:47 +05:30 |
|
shravan
|
c8e9606a62
|
658 removing uneeded tests
|
2020-02-05 16:41:14 +05:30 |
|
shravan
|
d38bf5c16e
|
658 prototype changes without policy lookup update
|
2020-02-05 15:55:37 +05:30 |
|
Jim Bugwadia
|
a1b49f72a3
|
fix gofmt and golint issues (#667)
* fix gofmt and golint issues
* add keys to structs
* fix compile error
* fix clusterrolebinding creation
* fix test
|
2020-02-03 13:38:24 -08:00 |
|
shravan
|
1da17a58f5
|
658 untested changes
|
2020-01-31 13:16:08 +05:30 |
|
shuting
|
3343d73b76
|
linter fix (#657)
|
2020-01-27 08:58:53 -08:00 |
|
shubham
|
7a34378648
|
Adding log level 4 to "Loading variable" logs in context.go line no 124 and 139 (#648)
Type at pkg/policyviolation/namespacedev.go
|
2020-01-24 16:29:51 -08:00 |
|
Shivkumar Dudhani
|
f4406bbefc
|
linter fixes (#656)
* cleanup phase 1
* linter fixes phase 2
* linter fixes
* linter fixes
|
2020-01-24 16:27:51 -08:00 |
|
Shivkumar Dudhani
|
8c1d79ab28
|
linter suggestions (#655)
* cleanup phase 1
* linter fixes phase 2
|
2020-01-24 12:05:53 -08:00 |
|
Shivkumar Dudhani
|
1171ac691b
|
cleanup phase 1 (#653)
|
2020-01-24 09:37:12 -08:00 |
|
Shuting Zhao
|
5d3d27cafd
|
report violation for mutation failure only, not block the creation
|
2020-01-16 14:29:44 -08:00 |
|
Shuting Zhao
|
ba8030bec0
|
change to use validationFailureAction for the mutation failure action
|
2020-01-16 11:57:28 -08:00 |
|
Shuting Zhao
|
7e59e8e484
|
mutation failure to not block resource creation
|
2020-01-15 21:46:58 -08:00 |
|
Shuting Zhao
|
77a6408f30
|
pass in patchedResource inside the same mutation rule
|
2020-01-15 18:15:48 -08:00 |
|
Shuting Zhao
|
fbe6ea2f24
|
fix annotation path error if applied to pod controller
|
2020-01-14 15:57:02 -08:00 |
|
Shivkumar Dudhani
|
cadd8f6b1b
|
check for multiple variables in a expression & serviceAccount variables (#610)
* check for multiple variables in a expression & serviceAccount variables
* update the regex matcher
|
2020-01-13 18:56:11 -08:00 |
|
Shuting Zhao
|
4eff0e9a8c
|
fix build error
|
2020-01-10 18:31:43 -08:00 |
|
Shuting Zhao
|
f618bbcff3
|
pass in ctx to mutation and generation
|
2020-01-10 18:25:16 -08:00 |
|
Shuting Zhao
|
4c83ab8b52
|
add more unit tests
|
2020-01-10 17:15:44 -08:00 |
|
Shuting Zhao
|
eb0390d0ed
|
remove managedResource
|
2020-01-10 13:34:45 -08:00 |
|
Shuting Zhao
|
434ed20857
|
report violation in generate when path not present
|
2020-01-10 11:59:05 -08:00 |
|
Shuting Zhao
|
5a44ab3e16
|
generate violation in validate when substitute path not present
|
2020-01-09 17:44:11 -08:00 |
|
Shuting Zhao
|
f78ca61859
|
generate violation in mutation when substitute path not present
|
2020-01-09 12:24:37 -08:00 |
|
Shuting Zhao
|
731fdb3e07
|
validate paths in variable substitution is present
|
2020-01-09 12:23:05 -08:00 |
|
Shuting Zhao
|
5924bcae40
|
remove duplicate structure definition
|
2020-01-08 10:44:41 -08:00 |
|
Shuting Zhao
|
472fa29fce
|
move mutation to subpackage pkg/engine/mutate
|
2020-01-07 17:06:17 -08:00 |
|
Shivkumar Dudhani
|
3cf9141f4d
|
593 feature (#594)
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* initial commit
* fix trailing quote in patch
* remove comments
* initial condition (equal & notequal)
* initial support for conditions
* initial support fo conditions in generate
* support precondition checks
* cleanup
* re-evaluate GR on namespace update using dynamic informers
* add status for generated resources
* display loaded variable SA
* support delete cleanup of generate request main resources
* fix log
* remove namespace from SA username
* support multiple variables per statement for scalar values
* fix fail variables
* add check for userInfo
* validation checks for conditions
* update policy
* refactor logs
* code review
* add openapispec for clusterpolicy preconditions
* Update documentation
* CR fixes
* documentation
* CR fixes
* update variable
* fix logs
* update policy
* pre-defined variables (serviceAccountName & serviceAccountNamespace)
* update test
|
2020-01-07 15:13:57 -08:00 |
|
Shivkumar Dudhani
|
ffd2179b03
|
538 (#587)
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* cleanup
* CR fixes
* fix logs
|
2020-01-07 10:33:28 -08:00 |
|
Shuting Zhao
|
d36934fe11
|
Merge commit '5b8ab3842b43a72cc675b93b8b72e290adfca1d2' into 518_pod_controller
# Conflicts:
# pkg/api/kyverno/v1/types.go
# pkg/engine/mutation.go
# pkg/engine/mutation_test.go
# pkg/engine/validation.go
# pkg/policy/existing.go
|
2020-01-02 10:32:17 -08:00 |
|
Shivkumar Dudhani
|
5b8ab3842b
|
Support variable substitution (#549)
* initial commit
* variable substitution
* update tests
* update test
* refactor engine packages for validate & generate
* update vendor
* update toml
* support variable substitution in overlay mutation
* missing update
* fix indentation in logs
* store context values as single JSON document using merge patches.
* remove duplicate functions
* fix message string
* Handle processing of policies in background (#569)
* remove condition check while generating mutation patch as conditions are verified in the first iteration
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* fix order to correct policy registration
* update comment
Co-authored-by: shuting <shutting06@gmail.com>
* refactor
Co-authored-by: shuting <shutting06@gmail.com>
|
2019-12-30 17:08:50 -08:00 |
|
Shuting Zhao
|
56c03f712a
|
only generate rule on policy creation
|
2019-12-27 15:57:43 -08:00 |
|
Shuting Zhao
|
bae2865550
|
- add =() to volumes; - update error msg
|
2019-12-27 14:59:12 -08:00 |
|
Shuting Zhao
|
340dee24bc
|
Merge branch 'master' into 544_documentation
# Conflicts:
# pkg/engine/overlay_test.go
|
2019-12-27 13:04:07 -08:00 |
|
Shuting Zhao
|
f2a0f0e3dc
|
replace annotation match by regexp
|
2019-12-27 12:57:06 -08:00 |
|
Shuting Zhao
|
eb6ab9d2d8
|
fix rule mis-application
|
2019-12-26 19:05:12 -08:00 |
|
Shuting Zhao
|
076196688e
|
skip process existing pod if annotation present
|
2019-12-26 18:41:14 -08:00 |
|
Shuting Zhao
|
f0d943e970
|
Merge branch 'master' into 518_pod_controller
|
2019-12-26 15:35:23 -08:00 |
|
Shuting Zhao
|
54ecb7738a
|
- insert annotation to podTemplate; - skip apply rule on pod if annotation exists
|
2019-12-26 15:34:19 -08:00 |
|
Shivkumar Dudhani
|
085856baa1
|
add event source and format event messages (#565)
|
2019-12-26 11:50:41 -08:00 |
|
Shuting Zhao
|
1f0187e8ea
|
Merge commit 'f1330ede8234eb4d449eb9ec72b41c627488350d' into 518_pod_controller
|
2019-12-20 19:06:35 -08:00 |
|
shivkumar dudhani
|
d04f49b5d8
|
fix message string
|
2019-12-17 17:16:50 -08:00 |
|
shivkumar dudhani
|
2a56a8e043
|
remove duplicate functions
|
2019-12-17 16:37:52 -08:00 |
|
shivkumar dudhani
|
a86aa06e28
|
Merge branch 'master' into 529_query
|
2019-12-17 16:36:58 -08:00 |
|
shivkumar dudhani
|
38987d50c3
|
store context values as single JSON document using merge patches.
|
2019-12-17 16:06:13 -08:00 |
|
Shuting Zhao
|
0d71e4a669
|
remove condition check while generating mutation patch as conditions are verified in the first iteration
|
2019-12-16 18:26:38 -08:00 |
|
Shuting Zhao
|
35adbbe0df
|
convert type boolean to string in /metadata/annotation
|
2019-12-13 18:04:19 -08:00 |
|
Shuting Zhao
|
5ced2409a3
|
update test
|
2019-12-13 13:30:24 -08:00 |
|