1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Commit graph

1203 commits

Author SHA1 Message Date
shuting
b3a1e51a84
bug fix auto-gen annotation reported as violation (#902)
* fix auto-gen annotation reported as violation

* update log
2020-06-03 17:47:06 -07:00
Shuting Zhao
d56c1ac15f remove debug log 2020-06-01 19:38:21 -07:00
Shuting Zhao
a1d7816c10 fix violation updates when there's no change 2020-06-01 19:37:48 -07:00
Shuting Zhao
52d45ec3c5 fix resource schema not found error 2020-06-01 19:36:01 -07:00
Jim Bugwadia
07e93e0638
Merge pull request #890 from NoSkillGirl/enhancement/multipart-yaml
Handling Multi YAML (Policies and Resources)
2020-06-01 10:24:29 -07:00
NoSkillGirl
230ba9db68 removing unnecessary logs 2020-06-01 18:04:16 +05:30
NoSkillGirl
83a3ae14c6 small fix 2020-06-01 17:15:23 +05:30
NoSkillGirl
64185291da fixed issue commits 2020-06-01 16:49:40 +05:30
NoSkillGirl
0447fc300e Handling Multi Yaml (Policies and Resources) 2020-05-29 15:32:29 +05:30
Jim Bugwadia
5cdcbec3c9
Bugfix/1.1.6 adjust resync and cleanup unused (#884)
* - support wildcards for namespaces

* do not annotate resource, unless policy is an autogen policy

* close HTTP body

* improve messages

* remove policy store

Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.

We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.

* handle wildcard namespaces in background processing

* fix unit tests 1) remove platform dependent path usage 2) remove policy store

* add test case for mutate with wildcard namespaces

* adjust all resync periods

* remove unused data fields

* add pattern for match
2020-05-27 19:51:34 -07:00
Yuvraj
5c66742f52
middelware removed (#882) 2020-05-27 11:08:59 -07:00
Jim Bugwadia
68c431e8f0
Merge pull request #880 from realshuting/869_auto_gen_annotation
fix policy violation updated without owner
2020-05-27 06:44:46 -07:00
Shuting Zhao
087f183895 fix typo 2020-05-26 23:07:48 -07:00
Shuting Zhao
139000fe3f fix namespace lister 2020-05-26 22:26:07 -07:00
Yuvraj
74db840b25
Added readiness and liveness prob (#874)
* Added readiness and liveness prob

* typo fix

* port number fixed

* fixed the image name
2020-05-26 18:03:32 -07:00
Shuting Zhao
913f12ff9d set ownerReference in pv update 2020-05-26 17:18:42 -07:00
Shuting Zhao
a251bda1dd suppress violation on evicted pod 2020-05-26 16:25:11 -07:00
Shuting Zhao
7ea2930fa4 - fix violations re-create on the same resource - skip background processing if a resource is to be deleted 2020-05-26 16:25:11 -07:00
Jim Bugwadia
838d02c475
Bugfix/659 support wildcards for namespaces (#871)
* - support wildcards for namespaces

* do not annotate resource, unless policy is an autogen policy

* close HTTP body

* improve messages

* remove policy store

Policy store was not fully implemented and simply provided a way
to list all polices and get a policy by name, which can be done via
standard client-go interfaces.

We need to revisit and design a better PolicyStore that provides fast
lookups for matching policies based on names, namespaces, etc.

* handle wildcard namespaces in background processing

* fix unit tests 1) remove platform dependent path usage 2) remove policy store

* add test case for mutate with wildcard namespaces
2020-05-26 10:36:56 -07:00
Shuting Zhao
3952aa5550 remove unused code 2020-05-21 08:49:33 -07:00
Shuting Zhao
2dda3e2a42 pr fix 2020-05-21 08:29:35 -07:00
Shuting Zhao
e1bdfbce27 update log 2020-05-20 17:08:30 -07:00
Shuting Zhao
ea66d7a7b8 fix CI 2020-05-20 13:58:56 -07:00
Shuting Zhao
bda81f0b93 - fix variable scope - debug log 2020-05-20 13:43:12 -07:00
Shuting Zhao
bc981f9a11 fix 869 2020-05-20 13:42:23 -07:00
Shuting Zhao
34d05c58c2 PR fixes 2020-05-19 13:04:06 -07:00
Shuting Zhao
f0bd8eae11 clarify names 2020-05-19 12:41:13 -07:00
Shuting Zhao
df452187bf fix CI 2020-05-19 10:32:42 -07:00
Shuting Zhao
9eb2534d63 - fix pending delete for denying deletion rule - revert timeoutHandler - update log level 2020-05-19 00:14:23 -07:00
Shuting Zhao
0670abe2d2 set log level 2020-05-18 21:16:48 -07:00
Shuting Zhao
140d638a9b fix #838 - skip if crd has no schema defined 2020-05-18 21:02:21 -07:00
Shuting Zhao
74387d2ee4 Fix CI 2020-05-18 20:10:30 -07:00
Shuting Zhao
0e803ae532 fix DENY pending for DELETE request 2020-05-18 20:01:20 -07:00
Shuting Zhao
962b8f9865 Fix bug 2020-05-18 18:30:39 -07:00
Shuting Zhao
416f5ecc00 Merge branch 'master' into 744_deny_requests
# Conflicts:
#	pkg/utils/util.go
#	pkg/webhooks/server.go
2020-05-18 18:05:22 -07:00
Shuting Zhao
7348eda222 Fix convert resource with DELETION request 2020-05-18 17:11:08 -07:00
Shuting Zhao
90bd8ee306 Fix match/exclude is not working 2020-05-18 17:10:49 -07:00
Yuvraj
277402ba4c
Feature - Add checks for k8s version when Kyverno starts (#831)
* Added k8s version check for mutating and validating'

* version check adde

* middelware added

* formate

* Added timeout flag value to webhook server timeout middelware and refactore kubernetes version check

* Fixed test cases

* Removed log

* Update kubernetes version check

* Added check for mutate and validate

* Skip Validation in handleValidateAdmissionRequest if kubernetes version is below 1.14

* Update return object AdmissionResponse

* fixed condition for skiping mutation

* Handle condition for skip feature in case of kubernetes version 1.14.2
2020-05-18 17:00:52 -07:00
Shuting Zhao
ad4f06f22d Merge branch 'master' into 744_deny_requests
# Conflicts:
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
2020-05-18 12:32:42 -07:00
Shuting Zhao
df59b97bc7 add constant.go 2020-05-18 11:56:17 -07:00
Shuting Zhao
f97c202d52 extract controller resync period to a constant file 2020-05-18 11:56:17 -07:00
Shuting Zhao
c79f166dd3 increase background sync period to 5 mins 2020-05-18 11:56:17 -07:00
Shuting Zhao
b9d38d2fd3 fix error "failed to list resources" 2020-05-18 11:56:17 -07:00
Shuting Zhao
5128a00e91 suppress log 2020-05-18 11:56:15 -07:00
Shuting Zhao
57e9aaea5f Add crd 1.16+ spec 2020-05-18 11:55:59 -07:00
Yuvraj
c4c28b709b
Feature - Change annotation for auto-generate pod controllers policy (#849)
* replace auto-generate pod controllers policy

* replace auto-generate pod controllers policy

* handled backword compatibility

* added backword compatibility

* Change annotation for auto-generate pod controllers

* Typo fixed
2020-05-18 11:50:54 -07:00
Jim Bugwadia
8c4c98d1a4
Merge pull request #855 from nirmata/bugfix/fixes_791_792_832
Bugfix/fixes 791 792 832
2020-05-17 19:30:11 -07:00
Yuvraj
0635df7b11
Bug - annotation inserted to podTemplate by auto-gen should reflect the policy name (#850)
* Added check for  annotation inserted to podTemplate by auto-gen

* skip reporting violation on pod which has annotation pod-policies.kyverno.io/autogen-applied

* Revert Changes

* typo fixed

* Update condition for skiping the pods
2020-05-17 18:51:56 -07:00
Jim Bugwadia
b763c33a29 fix mock discover client 2020-05-17 17:58:57 -07:00
Jim Bugwadia
304c75403e - skip resource schema validation when no mutate rules are applied
- cleanup webhook registration logic and logs
2020-05-17 14:37:05 -07:00