Charles-Edouard Brétéché
9e5f19b899
fix: do not create UR for dryrun admission requests ( #6649 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-22 15:29:42 +00:00
Charles-Edouard Brétéché
6a0a336755
refactor: return structs instead of pointer in engine api ( #6647 )
...
* refactor: return structs instead of pointer in engine api
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-22 22:55:00 +08:00
shuting
6249ab70e8
fix: block generate policies when lack of permission to operate downstream resources ( #6610 )
...
* debug
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* return on errors only
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update clusterrolebinding
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update clusterrolebinding
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove debug
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix ns
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-22 13:14:57 +00:00
Charles-Edouard Brétéché
f5e96e6ef2
fix: check if resource is empty when matching ( #6644 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-22 12:41:16 +00:00
Charles-Edouard Brétéché
3aa3c022f4
fix: GVK fallback in policy context ( #6648 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-22 20:07:12 +08:00
Charles-Edouard Brétéché
aa6400269e
refactor: implement matching based on GVK/subresource ( #6633 )
...
* refactor: do not allow matching with subresource kind
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: implement matching based on GVK/subresource
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-22 18:18:11 +08:00
Charles-Edouard Brétéché
aadaec09e1
fix: remove a couple DeepEqual and fix deletion check bug ( #6640 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-22 04:46:35 +00:00
shuting
56a4222ceb
fix: skip duplicate PSa checks for the latest version ( #6634 )
...
* add version check
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* debug
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* debug
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* skip multiple applies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* skip multiple applies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-21 14:03:40 +00:00
Charles-Edouard Brétéché
e06c20f5cc
refactor: do not allow matching with subresource kind ( #6625 )
...
* refactor: do not allow matching with subresource kind
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-21 13:28:00 +00:00
Charles-Edouard Brétéché
08def22d04
fix: incorrect old resource check ( #6635 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-21 12:47:50 +00:00
Charles-Edouard Brétéché
bf8a478310
fix: use GVR in reports resource controller ( #6612 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-20 13:08:31 +08:00
Charles-Edouard Brétéché
3c16c60912
refactor: admission reports aggregation ( #6568 )
...
* refactor: addmission reports aggregation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-17 12:07:17 +00:00
Charles-Edouard Brétéché
0b56613d59
fix: map APIResource in FindResources results ( #6611 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-17 11:21:26 +00:00
Charles-Edouard Brétéché
fc453b1faa
fix: improve shutdown gracefulness ( #5107 )
...
* fix: improve shutdown gracefulness
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-03-17 18:48:48 +08:00
shuting
6f7f06f0d4
chore: cleanup generate codebase ( #6598 )
...
* add debug info
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* cleanup code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* linter fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove unused labels
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename ns
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* reset resource version
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove ur updater
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* cleanup code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove code to add labels to clone source #6583
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename ns
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remvove labels from test resource
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove generated by labels
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-17 08:36:06 +00:00
HIHIA
0849c8f929
fix: schema validation for mutateExisting type of policy ( #6602 )
...
Signed-off-by: HIHIA <283304489@qq.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-03-17 05:01:02 +00:00
Charles-Edouard Brétéché
a60e4c038c
feat: log when changes happen in policies ( #6601 )
...
* feat: log when changes happen in policies
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-16 17:17:21 +00:00
Charles-Edouard Brétéché
818b92bf60
test: add config unit test ( #6595 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-03-16 16:34:30 +00:00
Charles-Edouard Brétéché
ad3bf969bf
fix: add message to bypass schema validation when it fails ( #6604 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-16 15:03:00 +00:00
Abhishek Sawan
8be4460668
Added JMESPath filter to_boolean() ( #6292 )
...
* added to_boolean in JMESPath Filter
Signed-off-by: Abhishek Sawan <sawanabhi157@gmail.com>
* updated to_boolean JMESPath filter
Signed-off-by: Abhishek Sawan <sawanabhi157@gmail.com>
* updated to_boolean JMESPath filter with function registration
Signed-off-by: Abhishek Sawan <sawanabhi157@gmail.com>
* fixed to_boolean JMESPath filter with function registration
Signed-off-by: Abhishek Sawan <sawanabhi157@gmail.com>
* Update pkg/engine/jmespath/functions.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Abhishek Sawan <sawanabhi157@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-16 12:52:26 +00:00
Charles-Edouard Brétéché
7386dc9b9d
test: add config package unit tests ( #6581 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-15 22:32:56 +08:00
Charles-Edouard Brétéché
a08d0b8749
feat: add webhook annotations support in config map ( #6579 )
...
* feat: add webhook annotations support in config map
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* release notes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* example
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-15 14:17:37 +01:00
shuting
dbfeb75793
feat: ignore admission requests sent by the kyverno background controller ( #6499 )
...
* ignore ARs sent by the kyverno background controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add background controller sa to exclude usernames
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-15 12:27:28 +00:00
Charles-Edouard Brétéché
4bd2e42b96
chore: remove unused discovery method GetServerVersion ( #6577 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-03-15 11:36:44 +00:00
Charles-Edouard Brétéché
a7bebc20c1
fix: use GVRS to load mutation targets ( #6576 )
...
* fix: use GVRS to load mutation targets
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-15 10:47:25 +00:00
Charles-Edouard Brétéché
bedc6cbd27
fix: controller duration computation ( #6569 )
2023-03-15 15:11:00 +08:00
Ankit Kurmi
1271784918
fix: adding verbosity to the ./pkg/autogen unit tests ( #6566 )
...
Signed-off-by: Ankit152 <ankitkurmi152@gmail.com>
2023-03-14 11:40:34 +00:00
Charles-Edouard Brétéché
ed8b36631c
fix: remove hasVerifyYaml from policy cache ( #6563 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-14 08:36:53 +00:00
Charles-Edouard Brétéché
861776d50c
fix: policy cache use GVR instead of kind ( #6543 )
...
* fix: policy cache use GVR instead of kind
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* unit tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* GVRS
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* ephemeralcontainers
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-13 14:44:39 +00:00
Charles-Edouard Brétéché
062bd798f0
test: add kuttl tests for policy kinds validation ( #6547 )
...
* test: add kuttl tests for policy kinds validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-13 18:24:11 +08:00
Charles-Edouard Brétéché
73d2063853
feat: change webhook configuration to better support wildcards ( #6534 )
...
* feat: change webhook configuration to better support wildcards
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-13 09:27:49 +00:00
shuting
637f830917
feat: apply generate rules on trigger events ( #6508 )
...
* - fire generation on trigger deletion, with condition rules;
- delete downstream if trigger no longer matches;
- delete downstream if trigger is deleted, with sync rule
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* trim condition key spaces
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix UR spec
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-create-on-trigger-deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-create-on-trigger-deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-sync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-nosync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-sync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* rename policy
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-data-nosync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add debug logs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-create-on-trigger-deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update readme
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-sync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-nosync-delete-trigger
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-sync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update readme
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test cpol-clone-nosync-update-trigger-no-match
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-10 17:17:10 +00:00
Charles-Edouard Brétéché
0810290f26
fix: process audit policies when admission reports are disabled ( #6531 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 15:44:28 +00:00
shuting
48726dcd4a
feat: validate immutable fields for a generate rule - 2 ( #6451 )
...
* update validation checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix ns assertions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-10 14:39:44 +00:00
shuting
85a83e4fae
fix: namespace matching for background namespaced policies ( #6530 )
...
* fix namespace matching for background policies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test match-trigger-namespace
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 13:55:08 +00:00
Charles-Edouard Brétéché
5160b63154
feat: use kind selectors ( #6514 )
...
* fix: compile regex globally
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: use kind selectors
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cache
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* webhooks rules
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* kuttl
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 13:24:55 +00:00
Charles-Edouard Brétéché
6abc7f2e03
fix: improve reports controller default values and workers ( #6522 )
...
* fix: improve reports controller default values and worker
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nits
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 09:39:20 +00:00
Charles-Edouard Brétéché
0fb8c723fe
refactor: reduce userinfos deps and add unit tests ( #6524 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 09:09:19 +00:00
Charles-Edouard Brétéché
c491c24039
fix: lookup GVR from GVK ( #6517 )
...
* fix: lookup GVR from GVK
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-10 15:15:48 +08:00
Charles-Edouard Brétéché
1efcd40d04
fix: file name ( #6523 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-09 22:17:26 +00:00
Charles-Edouard Brétéché
89cfa88c1e
fix: lookup GVK from GVR ( #6516 )
...
* fix: lookup GVK from GVR
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* error
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-09 22:52:44 +08:00
Charles-Edouard Brétéché
caf10ba531
fix: compile regex globally ( #6510 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-03-08 15:20:39 -08:00
shuting
4572eab750
fix: apply generate existing when a new rule is added ( #6472 )
...
* trigger generate existing when a new rule is added
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add a kuttl test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* ignore existing rule updates
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-06 15:40:49 +00:00
shuting
c8a3b19d2c
disallow variabels in clone/cloneList ( #6438 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-03 11:32:40 +00:00
shuting
ea306d6d7f
rename generateExistingOnPolicyUpdate to generateExisting ( #6470 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-03 12:05:53 +01:00
shuting
0b359d07db
rename GenerateExistingOnPolicyUpdate to GenerateExisting ( #6321 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-03 09:34:55 +00:00
shuting
c36e9a266d
update resource info in polex events ( #6459 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-02 17:19:32 +00:00
shuting
264eaec049
fix: remove timestamp checks for the clone rule ( #6439 )
...
* remove timestamp checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add kuttl tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-03-01 15:49:05 +00:00
Charles-Edouard Brétéché
b4d62e9a3b
fix: error log ( #6429 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-03-01 09:14:50 +00:00
shuting
86fc31f63b
feat: add validations for generate immutable fields ( #6328 )
...
* add validations for generate immutable fields
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 (#6334 )
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.26.0 to 1.27.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.26.0...v1.27.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Jmespath typo fix (#6342 )
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
* chore(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 (#6341 )
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases )
- [Commits](https://github.com/golang/net/compare/v0.6.0...v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions (#6348 )
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions ) from 2.0.5 to 2.1.0.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases )
- [Commits](bd2868d14a...b9ddf6a515#6347 )
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.27.0 to 1.27.1.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.27.0...v1.27.1 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: dump admission response (#6349 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: use labels.Everything in userinfo clusterroles matching (#6351 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update k8s.gcr.io to registry.k8s.io (#6340 )
Signed-off-by: Rayan Das <rayandas91@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* Notary v2 (#6011 )
* fix make debug-deploy
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* improve log messages
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* initial update
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* initial update
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update registry credentials handling order
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* comment out ACR helper - breaks anonymous image pull
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* merge main and refactor verifiers
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix opt init
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove local address
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update to NotaryV2 RC
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix fmt
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update deps
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* format imports
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove env and no-op statement
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix merge issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix linter issue
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove unused field
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* make fmt
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* renable ACR credential helper
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* Update .vscode/launch.json
Signed-off-by: shuting <shutting06@gmail.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
* chore(deps): bump fluxcd/flux2 from 0.39.0 to 0.40.0 (#6362 )
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](978cc0c5b8...2cac6ce281#6305 )
* OldObject translation solved in autogen
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
* CronJob fixed in autogen
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
* tests added
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
---------
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: logger key value in wrong order (#6365 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: missing metrics for policies in audit mode (#6363 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* chore(deps): bump github.com/notaryproject/notation-go (#6361 )
Bumps [github.com/notaryproject/notation-go](https://github.com/notaryproject/notation-go ) from 1.0.0-rc.1 to 1.0.0-rc.3.
- [Release notes](https://github.com/notaryproject/notation-go/releases )
- [Commits](https://github.com/notaryproject/notation-go/compare/v1.0.0-rc.1...v1.0.0-rc.3 )
---
updated-dependencies:
- dependency-name: github.com/notaryproject/notation-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix: role matching from authentication infos (#6358 )
* fix: role matching from authentication infos
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: delete certificate secret if type is not TLS (#6368 )
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* refactor: user/groups exclusions (#6357 )
* refactor: user/groups exclusions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* wildcard
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add labels to downstream and source resources (#6322 )
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update generate validation checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Abhishek Kumar <abhishek22512@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Rayan Das <rayandas91@gmail.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Abhishek Kumar <76171953+octonawish-akcodes@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Rayan Das <rayandas91@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2023-03-01 06:52:20 +00:00
