shuting
b66b06b70b
create failure events on errors ( #5988 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-13 10:22:03 +00:00
Charles-Edouard Brétéché
330709a7b4
fix: generate policy exception events ( #5987 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-13 09:18:14 +00:00
shuting
45fe02a989
drop events when queue size is 0 ( #5994 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-13 08:41:38 +00:00
dependabot[bot]
cd7b1f5035
chore(deps): bump actions/setup-python from 4.4.0 to 4.5.0 ( #5992 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](5ccb29d877...d27e3f3d7c
2023-01-13 07:38:52 +00:00
dependabot[bot]
93792ce8c7
chore(deps): bump github/codeql-action from 2.1.37 to 2.1.38 ( #5993 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.37 to 2.1.38.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](959cbb7472...515828d974
2023-01-13 07:04:57 +00:00
shuting
c6a9df5cc5
create events for cleanup policies ( #5982 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-12 08:25:25 +00:00
shuting
1997a291f3
fix: invoke cleanup process during shutdown ( #5974 )
...
* invoke cleanup process during shutdown
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix shutdown cleanup
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix shutdown panic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* cleanup webhooks by the label
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2023-01-12 12:47:40 +08:00
shuting
baee6e9637
log out deleted resources at default level ( #5977 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-11 17:23:06 +00:00
dependabot[bot]
c2190bf2bb
chore(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 ( #5971 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.51.0 to 1.52.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.51.0...v1.52.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 07:24:31 +00:00
dependabot[bot]
145ee557b4
chore(deps): bump fluxcd/flux2 from 0.38.2 to 0.38.3 ( #5972 )
...
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 0.38.2 to 0.38.3.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](f58b82fb4e...a9f53b4f1a
2023-01-11 06:50:28 +00:00
Vishal Choudhary
232ff79cd8
removed condition type and missingAutoGenRules ( #5964 )
...
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-01-11 06:02:44 +00:00
Charles-Edouard Brétéché
ce4f6ac420
fix: helm selector ( #5965 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-01-11 05:28:53 +00:00
Charles-Edouard Brétéché
da2ca002c5
chore: upload CRDs manifests to GH release ( #5967 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-01-11 04:54:23 +00:00
Charles-Edouard Brétéché
7781cb5718
feat: add cluster role aggregation to cleanup controller ( #5966 )
...
* feat: add cluster role aggregation to cleanup controller
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* convention
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-10 21:54:27 +00:00
Charles-Edouard Brétéché
2a22e8762a
refactor: match utils package ( #5961 )
...
* refactor: match utils package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-10 12:16:59 -08:00
shuting
0f332b1885
fix chart invalid annotations ( #5960 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-10 13:47:17 +00:00
Charles-Edouard Brétéché
4475a0adca
refactor: engine pattern package and add duration support ( #5958 )
...
* refactor: engine pattern package and add duration support
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logger
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-10 14:07:26 +01:00
shuting
68fb237d25
fix imageRef matching ( #5956 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-10 09:44:31 +00:00
Charles-Edouard Brétéché
91f2622384
feat: add more time jmespath filters ( #5950 )
...
* feat: add more time jmespath filters
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add time_utc and time_now_utc
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add time_diff
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* more time filters
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Update pkg/engine/jmespath/functions.go
Signed-off-by: shuting <shutting06@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2023-01-10 04:40:46 +00:00
shuting
e323e693b2
improve logging ( #5941 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-09 17:45:53 +01:00
shuting
6ce8e16884
fix: update policy exception CRD description ( #5948 )
...
* update exception crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update api doc
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-09 15:40:59 +00:00
Vishal Choudhary
837f474969
Fixes time_now failing ( #5928 )
...
* fixes time_now
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* testing
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* simplified
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
2023-01-09 15:16:43 +01:00
Charles-Edouard Brétéché
76b716da4e
fix: cleanup policies with user infos in match/exclude should be rejected ( #5943 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-09 21:00:35 +08:00
dependabot[bot]
127f957e36
chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 ( #5940 )
...
* chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](83fd05a356...0b7f8abb15
2023-01-09 09:05:26 +00:00
dependabot[bot]
3412ba9a10
chore(deps): bump svenstaro/upload-release-action from 2.3.0 to 2.4.0 ( #5938 )
...
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action ) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases )
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md )
- [Commits](133984371c...2728235f7d
2023-01-09 07:59:50 +00:00
dependabot[bot]
5c71d3804e
chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions ( #5939 )
...
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions ) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases )
- [Commits](fe7afd3f61...afbf9b4856
2023-01-09 07:26:39 +00:00
dependabot[bot]
3db54a2859
chore(deps): bump actions/cache from 3.2.2 to 3.2.3 ( #5937 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](4723a57e26...58c146cc91
2023-01-09 06:52:47 +00:00
Charles-Edouard Brétéché
2c172b151c
test: add kuttl test for policy exception ( #5935 )
2023-01-09 10:52:16 +08:00
Charles-Edouard Brétéché
e8e3f66c8b
fix: missing user info matching ( #5931 )
...
* fix: missing user info matching
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* todo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* todo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-07 16:48:44 -08:00
Jim Bugwadia
22c23a5692
Makefile and log ( #5929 )
...
* fix make debug-deploy
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* improve log messages
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-01-07 15:14:51 -08:00
Charles-Edouard Brétéché
f2bab6bc97
chore: do not run scorecard workflow if token is not defined ( #5927 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-07 04:36:47 +00:00
Charles-Edouard Brétéché
d83513e7a7
chore: fix releaser badge ( #5910 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 22:42:31 +00:00
Charles-Edouard Brétéché
237784cc12
chore: do not run sonar workflow if token is not defined ( #5918 )
...
* chore: do not run sonar workflow if token is not defined
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* pr update
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 22:09:39 +00:00
Charles-Edouard Brétéché
1545acb6ba
chore: improve fossa gh workflow ( #5923 )
...
* chore: improve fossa gh workflow
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-01-06 21:26:21 +00:00
Charles-Edouard Brétéché
d84ce8f9d9
chore: simplify tests workflow ( #5920 )
...
* chore: simplify tests workflow
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 20:42:21 +00:00
Charles-Edouard Brétéché
7ab9d95970
fix: condition jobs in gh workflows ( #5926 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 18:10:49 +00:00
Charles-Edouard Brétéché
ae1d210319
fix: condition jobs in gh actions ( #5925 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 17:28:15 +00:00
Vishal Choudhary
bb6005a7a3
Added a time_add() filter to add duration and absolute time ( #5817 )
...
* time_add
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* output is RFC3339 only now
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* added note to timeadd
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* added time_convert
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* removed blank string timezone
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
* renamed to time_parse
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
Signed-off-by: Vishal Choudhary <contactvishaltech@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2023-01-06 16:48:13 +00:00
Charles-Edouard Brétéché
c10649fc2f
chore: do not run pr update workflow if token is not defined ( #5921 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 16:02:13 +00:00
Charles-Edouard Brétéché
d56ea86146
chore: add missing gh workflow concurrency statements ( #5914 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 15:24:55 +00:00
Jim Bugwadia
3ec7e50ee3
switch app version to latest ( #5898 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-01-06 14:51:55 +00:00
shuting
c5277ccc44
restrict cjs by PSS restricted checks ( #5904 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-06 14:18:39 +00:00
Vyom Yadav
c0875f16e6
fix: Configure webhook to add ephemeralcontainers for policies matching on Pod ( #5886 )
...
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
Signed-off-by: Vyom-Yadav <jackhammervyom@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-01-06 13:40:35 +00:00
shuting
de2fcc8b7b
set resourceVersion before update ( #5906 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-01-06 12:58:54 +00:00
dependabot[bot]
9033f35e29
chore(deps): bump github.com/go-git/go-git/v5 from 5.5.1 to 5.5.2 ( #5900 )
...
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.5.1 to 5.5.2.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.5.1...v5.5.2 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-06 12:11:43 +00:00
Charles-Edouard Brétéché
21f1d2bfbe
fix: golangci-lint workflow ( #5913 )
...
* fix: golangci-lint workflow
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* cache
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* concurrency
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* concurrency
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 11:33:50 +00:00
Charles-Edouard Brétéché
28c0f8f56a
feat: add violation details to report.results.properties for PSa policies ( #5908 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 10:40:06 +00:00
Charles-Edouard Brétéché
24c98f4c40
fix: configure gh workflow permission ( #5909 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 11:07:06 +01:00
Charles-Edouard Brétéché
47bf261163
chore: make check actions pinned by hash a standalone ci job ( #5907 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-01-06 09:25:16 +00:00
dependabot[bot]
92aae55638
chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 ( #5902 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9782bd6a98...9bc31d5ccc
2023-01-06 08:18:08 +00:00
