Jim Bugwadia
9834feea74
update image pull policy for YAML install which uses :latest ( #3565 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-04-07 21:31:14 +00:00
Charles-Edouard Brétéché
20069c13c3
feat: stop mutating rules ( #3410 )
...
* feat: stop adding autogen annotation
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: stop mutating rules
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: stop mutating rules
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: use toggle
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: review comments
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-28 22:01:27 +08:00
Naman Lakhwani
126742ad57
adding emptyDir vol for keyless signing ( #3366 )
...
* adding emptyDir vol
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* adding env TUF_ROOT
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-03-10 08:09:22 +00:00
Ryan White
c13aeca7fa
Modify capabilities for compatibility with Pod Security ( #3274 )
...
Kyverno manifests are incompatible with the restricted Pod Security
Standards included with Kubernetes 1.22 and 1.23 because the Pod
Security admission controller looks for "ALL" in securityContext.capabilities.drop,
but does not accept "all".
1b741f89aa/policy/check_capabilities_restricted.go (L88)
Signed-off-by: Ryan White <ryan@alzabo.io>
2022-02-22 08:14:17 +00:00
Abhinav Sinha
11311a15df
Filter kyverno resources instead of entire kyverno namespace ( #3170 )
...
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
2022-02-04 00:38:47 +00:00
Abhinav Sinha
7ceba594b2
Corrected the value of INIT_CONFIG
env in deployment ( #2927 )
...
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2022-01-07 10:52:34 +00:00
shuting
4a027f3bd7
Increase Kyverno memory request and limit ( #2862 )
...
* bump memory request and limit
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove quotes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2021-12-20 23:11:28 -08:00
Jose Armesto
831a9826d1
Restructure project to follow standards ( #2632 )
...
Signed-off-by: Jose Armesto <github@armesto.net>
2021-10-29 18:13:20 +02:00