Charles-Edouard Brétéché
|
b36a2ecdcc
|
feat: bump update request api version (#10508)
* feat: bump update request api version
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* use v2
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-06-20 09:44:43 +00:00 |
|
Charles-Edouard Brétéché
|
6e1def1004
|
feat: remove v1alpha2 group/version (#10500)
* feat: remove v1alpha2 group
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-06-19 08:08:15 +00:00 |
|
Charles-Edouard Brétéché
|
7f57b9618a
|
feat: cleanup v2alpha1 kyverno api (#10457)
* feat: cleanup v2alpha1 kyverno api
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-06-14 09:39:36 +00:00 |
|
Vishal Choudhary
|
2104171b4f
|
fix: add verbosity to background scanner log (#10404)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-06-06 13:51:01 +02:00 |
|
Vishal Choudhary
|
47adea6f1c
|
feat: add support for background scanning of existing resource in image verification (#10287)
* feat: add support for background scanning of existing resource in image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: change rule response type to image verify
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: fix nilptr reference
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-05-24 09:41:04 +00:00 |
|
shuting
|
e58d7120c6
|
fix: sort webhookconfig.operations (#10274)
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-05-21 13:22:08 +00:00 |
|
shuting
|
84e0ced314
|
fix: webhook config set (#10262)
* tests: add unit tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: merge operations map correctly
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-05-21 08:33:59 +00:00 |
|
shuting
|
fb9c66f455
|
feat(perf): add new linter prealloc to enforce slice declarations best practice (#10250)
* feat(perf): add new linter prealloc to enforce slice declarations best practice
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(linter): prealloac slices
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-05-20 14:46:35 +05:30 |
|
Mariam Fahmy
|
8805620574
|
fix: add CONNECT operation in the webhook config for pod/exec subresource (#9855)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-05-06 09:51:46 +00:00 |
|
Norwin Schnyder
|
5d50022f43
|
fix: skip rules without operation in resource webhook creation (#10146)
* fix: skip rules without operation in resource webhook creation
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
* test: add unit test for buildRulesWithOperations
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
* fix liniting issues
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
---------
Signed-off-by: Norwin Schnyder <norwin.schnyder+github@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-04-30 17:05:44 +00:00 |
|
Vishal Choudhary
|
e66a550560
|
fix: fetch only adopted ephemeral report (#10148)
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-04-30 15:17:24 +00:00 |
|
Mariam Fahmy
|
77f1f97f6e
|
chore: remove a package that is imported twice (#10101)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-04-29 10:40:39 +00:00 |
|
shuting
|
3e7a7ac244
|
fix: policy status reconciliation (#10032)
* fix: get latest policy object before updating status
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: remove debug code
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-04-12 07:08:15 +00:00 |
|
Khaled Emara
|
c9055ac2ff
|
fix(autogen): only generate rule for request kind (#9984)
* fix(autogen): only generate rule for request kind
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* feat(autogen): use jsoniter instead of std for json
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(atogen): use sets instead of manipulating strings
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(autogen): formatting linter
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(autogen): backwards compatability
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* revert(autogen): old behavior
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix: builds error
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
|
2024-04-04 08:09:30 +00:00 |
|
Charles-Edouard Brétéché
|
c241cfce44
|
fix: polex matching code (#9955)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-04-03 18:56:48 +00:00 |
|
Khaled Emara
|
429e84be10
|
fix(globalcontext): panics and validation (#9903)
|
2024-03-14 16:12:39 +00:00 |
|
Khaled Emara
|
2b2587469d
|
feat: enhance global context (#9710)
* feat(globalcontext): add event handling
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* feat(globalcontext): handle cache sync error
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* feat(globalcontext): ensure api is called during init
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* design(events): decouple events from policies a bit
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* feat(globalcontext): use status
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): make status optional
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): status update
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): codegen
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): delete yaml annotations
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): fix status in tests
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcotext): update enqueue func
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): error
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): rbac
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): retry logic
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): unknown api call in test
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* bump
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix: set unique name for each testing resource
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: update readme
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: log msg
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add delays
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: delay gctce creation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* debug: check Kyverno status
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* debug: update chainsaw config
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* debug: revert chainsaw config
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* test(globalcontext): print actual status
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): add necessary delays and check status before applying
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(globalcontext): long refreshInterval
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* debug: log success
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* debug: print informer data
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): use client instead of informer
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* debug: print status after update
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* debug: print ResourceVersion
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* debug: remove gcecontroller from other controllers
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): update status only once
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore: remove excess logs
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): add store to cleanup controller
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-23 10:34:04 +00:00 |
|
Mariam Fahmy
|
2a277a01c4
|
feat: apply VAP bindings in CLI apply command in offline mode (#9751)
* feat: apply VAP bindings in CLI apply command in offline mode
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix lint
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-02-21 07:52:25 +00:00 |
|
Charles-Edouard Brétéché
|
7775541b46
|
fix: reports aggregation (#9697)
* chore: rename admission to ephemeral in reports aggregation controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: reports aggregation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* second queue
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cleanup
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* flag
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-08 10:36:01 +00:00 |
|
Khaled Emara
|
10258921ac
|
feat(validation-webhook): validate global context reference (#9678)
* feat(validation-webhook): validate global context reference
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(validation-webhook): global reference name
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(globalcontext): fix tests after valdiation
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(policycache): dont add NotReady Policies
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): rename e2e tests
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): add entry errors
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(globalcontext): fix chainsaw test
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
|
2024-02-08 07:46:58 +00:00 |
|
Charles-Edouard Brétéché
|
6f440ab6c0
|
chore: rename admission to ephemeral in reports aggregation controller (#9690)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-07 10:29:56 +00:00 |
|
Charles-Edouard Brétéché
|
64176cdbea
|
fix: don't delete garbage collected policy reports (#9679)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-07 07:10:51 +00:00 |
|
Charles-Edouard Brétéché
|
f1c81dbc69
|
feat: remove admission controller (#9677)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-07 06:20:35 +00:00 |
|
Khaled Emara
|
1eda4789d1
|
test(globalcontext): add e2e tests (#9661)
* fix(globalcontext): validation
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): use existence instead of ready for now
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): improve not ready error message
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): allow any APICall
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): prevent double marshal
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* test(globalcontext): add e2e tests
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* chore(globalcontext): move vaildation to OpenAPI V3
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-02-06 17:03:32 +00:00 |
|
Khaled Emara
|
8a4d9941de
|
feat: add globalcontext loader and interface (#9602)
* feat(globalcontext): add interface
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): package import path
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* design(contextloader): move globalcontext from Load to init
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* fix(globalcontext): remove pointer
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* design(globalcontext): create specific Store
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-05 11:24:37 +00:00 |
|
Vishal Choudhary
|
3142af64a0
|
feat: add global context entry validation webhook (#9619)
* feat: add global context entry validation webhook
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: use `k8s.io/apimachinery/pkg/util/json` instead of `encoding/json`
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: lint
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
|
2024-02-02 18:04:50 +01:00 |
|
Charles-Edouard Brétéché
|
2b712107d2
|
feat: consider maxAPICallResponseLength (#9620)
* chore: move global context package out of engine
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* feat: consider maxAPICallResponseLength
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-02 15:35:57 +00:00 |
|
Charles-Edouard Brétéché
|
b59353c657
|
chore: move global context package out of engine (#9618)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-02 14:35:24 +00:00 |
|
Vishal Choudhary
|
10ae9e306c
|
feat: update refreshInterval in globalcontext CRD to use a duration (#9615)
|
2024-02-02 12:06:51 +00:00 |
|
Khaled Emara
|
226fa9515a
|
feat: add globalcontext controller (#9601)
* feat: add globalcontext controller
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
* rework controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rbac
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cmd
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix rbac
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* engine
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* k8s resources
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* k8s resource
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* resync zero
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* api call
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* api call
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-02-02 10:41:35 +00:00 |
|
Mariam Fahmy
|
3510998d4f
|
feat: Support CEL expression warnings (#9566)
* feat: support CEL expression warnings
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: allow the policy creation but return warnings to the API server
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: ShutingZhao <shuting@nirmata.com>
|
2024-02-02 10:04:02 +00:00 |
|
Anushka Mittal
|
cfc9683033
|
Changes to dynamically configure webhooks (#8437)
* Changes to dynamically configure webhooks
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add unit tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add kuttl tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Refactoring
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Correct unit test
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Change way of webhooks configured
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Correct tests with new changes
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add delete operation by default
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Correct tests with new changes
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Correct order for operations
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add corrections
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add mutatingwebhookconfiguration test
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Correct unit test
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Added policy.yaml in mutate webhook test
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add corrections in kuttl test and code
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Change name of test
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Changes to update webhooks manifest
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add corrections for dynamic-op-mutate kuttl test
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Add minor changes; remove unnecessary file
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Correct adding operations for MutatingWebhookConf
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* dynamic op mutate and validate added
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Resolve conflicts
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Filter rules for mutatingwebhookconf correctly
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* replace TestStep with Test in chainsaw tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* converted to new chainsaw-test format
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* minor corrections
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* remove isMutationEmpty()
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* initial changes for dynamic opn enhancements
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* rename variables
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* resolve lint errors
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* refactor code
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* add changes for exclude operations
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* add conformance tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* add unit tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* corrections in conformance tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* modification in unit tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* correction in conformance tests
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* Update .vscode/launch.json
Signed-off-by: shuting <shuting@nirmata.com>
* update variable usage
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
* remove testresults
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
---------
Signed-off-by: anushkamittal2001 <anushka@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
|
2024-01-31 15:46:53 +00:00 |
|
Charles-Edouard Brétéché
|
e969e29eb8
|
chore: remove reports aggregation per namespace (#9570)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-01-30 23:08:47 +00:00 |
|
Charles-Edouard Brétéché
|
9102753323
|
fix: make alternate reports storage transparent (#9553)
* fix: make alternate reports storage transparent
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* bg scan
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* aggregation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* aggregation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* rm manager
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* update
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-01-30 14:53:37 +00:00 |
|
Mariam Fahmy
|
831bf3c074
|
feat: reuse --protectManagedResources flag in the cleanup controller (#8566)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
|
2024-01-30 07:08:30 +00:00 |
|
Mariam Fahmy
|
9ed14cb779
|
feat: support vap bindings in reports (#9506)
* feat: support vap bindings in reports
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: add binding to the rule response
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* add chainsaw test
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix lint
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix chainsaw
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* add chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-01-29 12:49:17 +01:00 |
|
shuting
|
7170cbb0c2
|
feat:Webhook config per policy (#9483)
* add spec.webhookConfigurations
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update crd
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* configure webhook
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* register webhook handler
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* skip storing finegrained policies in cache
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update resource validate handler
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* updates
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* enable mutate resource handler for fine-grained policies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2024-01-27 13:00:22 +00:00 |
|
Florian Hopfensperger
|
8781a38849
|
feat: configure webhook scope based on resource and policy type (#8065)
* feat: configure webhook scope based on policy type
Signed-off-by: Florian Hopfensperger <florian.hopfensperger@allianz.de>
* Update pkg/controllers/webhook/controller.go
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: shuting <shuting@nirmata.com>
* feat: configure webhook scope based on resource type
Signed-off-by: Florian Hopfensperger <florian.hopfensperger@allianz.de>
* review comments
Signed-off-by: Florian Hopfensperger <florian.hopfensperger@allianz.de>
* sorting of webhooks
Signed-off-by: Florian Hopfensperger <florian.hopfensperger@allianz.de>
* Update pkg/controllers/webhook/utils.go
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix imports
Signed-off-by: Florian Hopfensperger <florian.hopfensperger@allianz.de>
---------
Signed-off-by: Florian Hopfensperger <florian.hopfensperger@allianz.de>
Signed-off-by: shuting <shuting@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-01-26 15:07:42 +00:00 |
|
Vishal Choudhary
|
e6c39f31a5
|
feat: add a new API group reports.kyverno.io (#9521)
* feat: add new report interface
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: reports.kyverno.io/v1 apigroup
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: codegen
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add report manager
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add reports manager to reports controller
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add alternateReportStorage to helm chart
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: report utils deepcopy
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* init flag
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: wrong return value
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-01-26 13:40:29 +00:00 |
|
Mariam Fahmy
|
d47684c0d9
|
feat: support validatingadmissionpolicybindings in CLI apply command (#9468)
* feat: support validatingadmissionpolicybindings in CLI apply command
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix linter issue
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-01-23 11:47:38 +00:00 |
|
Charles-Edouard Brétéché
|
8795916e14
|
fix: change generic policy to not return any (#9463)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2024-01-20 19:20:22 +02:00 |
|
Mariam Fahmy
|
a791d9ac35
|
feat: skip generating VAP when an exception is defined (#9386)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-01-18 15:55:27 +00:00 |
|
Mariam Fahmy
|
f0564b3019
|
feat: re-evaluate policy exceptions for existing resources and modify reports accordingly (#8659)
* feat: re-evaluate policy exceptions for existing resources and modify reports accordingly
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: use v2 of exceptions
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix chainsaw test
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix: use properties in the reports result
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-01-17 10:00:15 -08:00 |
|
Mariam Fahmy
|
f8c5571ddc
|
fix: remove the check of exclude in VAPs (#9331)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2024-01-03 17:37:30 +00:00 |
|
Mariam Fahmy
|
4fff841cdc
|
fix: remove policy informer from vap controller (#9279)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2023-12-26 11:45:26 +00:00 |
|
shuting
|
67b96a7cf2
|
refactor: mutate checks (#9255)
* refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
|
2023-12-22 15:07:17 +02:00 |
|
Jim Bugwadia
|
f4f34419d9
|
improve messages (#9168)
* improve messages
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix typo
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
|
2023-12-16 10:50:08 +02:00 |
|
Zadkiel Aharonian
|
5e96b26a48
|
feat: webhook labels (#9015)
Signed-off-by: Zadkiel Aharonian <hello@zadkiel.fr>
Co-authored-by: shuting <shuting@nirmata.com>
|
2023-12-07 12:58:31 +00:00 |
|
Charles-Edouard Brétéché
|
095b22b6af
|
fix: ttl cleanup not working with cluster wide resources (#9060)
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
|
2023-12-03 00:35:13 +01:00 |
|
Mariam Fahmy
|
1404ea0966
|
fix: delete VAPs in case Kyverno policies can't be translated (#8887)
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
|
2023-11-27 06:36:01 +00:00 |
|