mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
2483 commits 15 branches 540 tags 276 MiB
Commit graph

2483 commits

This branch
This branch
All branches
Author SHA1 Message Date
Yuvraj
b7524467a3
Reconcile Generate request on policy update (#1096) 
* policy report crd added

* added namespaced rule

* remove extra field from crd

* revert crd change

* remove policy report chnages

* remove policy report chnages

* remove policy report chnages

* remove policy report chnages

* added logic for gr

* revert changes

* fixed generate rules

* fixed generate rules

* fixed generate rules

* fixed generate rules

* remove extra logs

* remove extra logs

* fixed e2e test

* remove extra logs

* crd issue resolved

* added check for sync

* add labels update

* add label update

* added permission to role

* roles added to helm

* roles added to helm
 2020-09-03 14:34:23 -07:00
Pooja Singh
154b1c1eb9
Merge pull request #1095 from NoSkillGirl/feature/support_openapi_v3 
added validation for openapi_v3
 2020-09-03 23:02:17 +05:30
Mohan B E
118b40c644
added invalid field validation for policy (#1094) 2020-09-03 22:14:54 +05:30
shuting
931d7cd47c
Set mutating webhhok reinvocationPolicy to IfNeeded (#1097) 
* add watch policy to clusterrole kyverno:customresources

* fix build

* fix nil pointer

* skip json patches if the mutation is re-invoked

* set resource mutating webhook invocation policy to IfNeeded
 2020-09-03 08:54:37 -07:00
NoSkillGirl
70108232ec added return 2020-09-03 09:47:43 +05:30
NoSkillGirl
fcdbc054c9 added validation for openapi_v3 2020-09-02 17:14:29 +05:30
shuting
9a210e24d9
bug fix - nil pointer (#1093) 
* add watch policy to clusterrole kyverno:customresources

* fix build

* fix nil pointer
 2020-09-01 17:23:54 -07:00
shuting
b319a816c5
Fix build (#1092) 
* add watch policy to clusterrole kyverno:customresources

* fix build
 2020-09-01 09:38:49 -07:00
Mohan B E
3690bf5fff
conditional anchor preprocessing for patch strategic merge (#1090) 
* conditional anchor preprocessing for patch strategic merge

* modified sequence pre processing and added unit test

* merged master

* go fmt

* corrected mistake and added error handling to policy validate
 2020-09-01 09:12:05 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen (#1089) 
* add watch policy to clusterrole kyverno:customresources

* - improve auto-gen policy application logic - remove unused code

* move method to common util

* auto-gen rule for cronJob

* update doc

* set CronJob as default auto-gen pod controller

* - update doc; - fix test

* remove unused code
 2020-09-01 09:11:20 -07:00
Pooja Singh
2bfb5fffb3
Merge pull request #1080 from NoSkillGirl/feature/crd_validation 
Supporting CRD validation in CLI
 2020-09-01 08:51:02 +05:30
NoSkillGirl
afc340ea5f removed todo 2020-09-01 08:41:59 +05:30
Yuvraj
2641120907
Generate policy does not work on namespace update (#1085) 
* added logic for handling generate request

* generate rules added

* added label condition for generate

* remove extra logs

* remove extra logs

* buf fixed

* bug fixed

* added logic for delete gr

* log fixed

* documentation changed

* remove best practices changes

* bug fix

* added best pratice
 2020-08-31 11:25:13 -07:00
NoSkillGirl
d9c3a166cc updated readme 2020-08-31 19:32:00 +05:30
NoSkillGirl
ccfd4adad3 calling GetCRD's from validate 2020-08-31 18:44:08 +05:30
NoSkillGirl
e5f5ef9db1 split multi yaml in crd 2020-08-31 18:20:25 +05:30
NoSkillGirl
6b6897f6e2 working version of CRD validation for CLI 2020-08-31 18:19:09 +05:30
NoSkillGirl
b61412ca7a minor validation changes 2020-08-31 18:18:10 +05:30
NoSkillGirl
afb6ad714c small issue while resolving conflicts 2020-08-31 18:16:53 +05:30
NoSkillGirl
70b13d06dc validation of policy against crd 2020-08-31 18:15:39 +05:30
Mohan B E
a827f88dc7
resolved conditional anchor issue and added validation to pattern labels (#1060) 
* resolved conditional anchor issue and added validation to pattern labels

* restored IsConditionAnchor

* added annotation and anypattern validation

* added conditional anchor key checker

* reverted docs

* fixed tests

* modified validation

* modified validate condition check
 2020-08-28 18:22:22 -07:00
Michael Barrientos
b067f41d02
Replace Policy CRD AnyValue fields with empty dict (#1086) 
/kind cleanup

\## Proposed change

This implements the same change as #1047, except for the new Policy CRD instead of the ClusterPolicy CRD, which apparently did not get those updates before merging.

When deploying Kyverno using Argo CD, we get a persistent false diff for the Policy custom resource definition (the definition itself, not instances of Policy), because Kubernetes converts the invalid AnyValue: {} property types to just an empty dict {}. Since the Kubernetes server makes this change to {} unilaterally after applying, when a diffing tool like Argo CD compares it against the YAML manifest, each such instance of AnyValue appears as a diff.

I know that since AnyValue is not part of the official OpenAPI V3 schema, and that when you run kubectl get crd policies.kyverno.io -o yaml the status message shows Kubernetes complaining about "Required value: must not be empty for specified object fields" for all of these fields. In theory the correct solution would be to somehow provide a full schema, but I know this can be tricky for these data/anyPattern/patches types, but at the minimum, I would like to get Argo CD to believe that there are no changes that need to be applied.

Since these fields are already silently turned into {} by Kubernetes, this should have no functionality change on existing code/deployments.
 2020-08-26 11:11:36 -07:00
Yuvraj
b648c2edd6
Events take several minutes to show on the resource (#1083) 
* git action added

* changed retry method

* remove time method

* increase worker for event generator
 2020-08-26 14:28:34 +05:30
shuting
513f5ec898
add watch policy to clusterrole kyverno:customresources (#1084) 2020-08-24 12:27:16 -07:00
Pooja Singh
8105e4cad8
Allowing only few variables in the policies (#1063) 
* Checking for non whitelisted variables in the policy

* method name change

* small issue while rebasing
 2020-08-23 15:11:03 -07:00
Pooja Singh
1b69ca26db
Merge pull request #1030 from NoSkillGirl/feature/add_cli_variables 
Feature/add cli variables
 2020-08-22 01:48:40 +05:30
NoSkillGirl
067d51cb28 resolving issues after rebase 2020-08-22 01:21:29 +05:30
Mohan B E
3feb41e5f3
wildcard for numeric values (#1074) 
* wildcard for numeric values

* changed error message
 2020-08-21 12:48:05 -07:00
NoSkillGirl
b3a13cd36b updated readme - apply example 2020-08-22 01:07:04 +05:30
NoSkillGirl
492b0636c2 updated readme 2020-08-22 01:07:04 +05:30
NoSkillGirl
3a3311835c added error handling 2020-08-22 01:07:04 +05:30
NoSkillGirl
df154537f1 Added provision to pass cli values from a file 2020-08-22 01:07:04 +05:30
NoSkillGirl
e18deb94f2 updated readme 2020-08-22 01:07:04 +05:30
NoSkillGirl
0927e7a732 added validation for set flag 2020-08-22 01:07:03 +05:30
NoSkillGirl
11e73381cf removed comments 2020-08-22 01:07:03 +05:30
NoSkillGirl
afe98bb93c Added set flag 2020-08-22 01:07:03 +05:30
Yuvraj
1b7a295860
git action added (#1078) 2020-08-21 12:24:02 -07:00
Shuting Zhao
1371da939b tag v1.1.10 2020-08-21 11:12:55 -07:00
Pooja Singh
2717a03ab2
Not checking for cluster resources for CLI in policy validate (#1076) 2020-08-21 23:07:54 +05:30
Mohan B E
4c7ae3f5f7
added helm chart icon (#1077) 2020-08-21 09:46:04 -07:00
Yuvraj
06148a58c5
cli docker images added (#1073) 
* cli docker images added

* cli docker images added
 2020-08-21 09:45:04 -07:00
Jim Bugwadia
feef1400e3
Merge pull request #1072 from realshuting/bugfix 
return early in CLI if generated patches from policy mutation is nil
 2020-08-19 15:19:12 -07:00
Shuting Zhao
0aeb9f667a return early in LCI if generated patches from policy mutation is nil 2020-08-19 15:11:21 -07:00
Jim Bugwadia
3fb1c8e87e
add validateFailureAction to all policies (#1068) 2020-08-19 14:04:58 -07:00
Mohan B E
f60deecdce
Feature/namespaced policy 280 (#1058) 
* namespaced policy crd and cache

* modified main.go

* removed kyverno

* implemented policy violation generator for namespaced policy on audit

* modified cache

* added validation for cluster resource types

* install.yaml

* install.yaml

* removed namespaces from crd and refactored code

* modified NamespacePolicy to Policy

* added ClusterRole aggregate for policies

* modified clusterrole
 2020-08-19 09:07:23 -07:00
Jim Bugwadia
64d1ee7a9d
Merge pull request #1067 from nirmata/bugfix/fix_disallow_add_capabilities 
fix policy
 2020-08-19 08:59:07 -07:00
Yuvraj
3799b52fc8
[BUG] filterK8Resources is not correctly configured using ConfigMap (#1059) 
* configmap issue fixed

* fixed e2e test

* helm template file added

* remove extra check

* string empty check removed
 2020-08-19 13:46:08 +05:30
Jim Bugwadia
66b660d717 fix policy 2020-08-19 01:08:53 -07:00
Jim Bugwadia
dbd35831c1
Merge pull request #1064 from nirmata/bugfix/improve_cli_reports 
Bugfix/improve cli reports
 2020-08-18 22:27:53 -07:00
Jim Bugwadia
e6a3aea88a fix print 2020-08-18 21:56:43 -07:00