dependabot[bot]
a1c31bc115
chore(deps): bump ossf/scorecard-action from 2.0.4 to 2.0.6 ( #5587 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.4 to 2.0.6.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](e363bfca00...99c53751e0
2022-12-06 07:25:15 +00:00
dependabot[bot]
fd1fc7c7fe
chore(deps): bump actions/setup-go from 2.1.5 to 3.4.0 ( #5585 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2.1.5 to 3.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v2.1.5...d0a58c1c4d2b25278816e339b944508c875f3613 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 07:49:45 +01:00
dependabot[bot]
2780799309
chore(deps): bump actions/setup-python from 2.3.1 to 4.3.0 ( #5562 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 2.3.1 to 4.3.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](f382193329...13ae5bb136
2022-12-05 22:19:32 +00:00
dependabot[bot]
96d44648cb
chore(deps): bump sonarsource/sonarcloud-github-action from 1.7 to 1.8 ( #5563 )
...
Bumps [sonarsource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action ) from 1.7 to 1.8.
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases )
- [Commits](156db6fef3...cb201f3b2d
2022-12-05 21:06:24 +00:00
dependabot[bot]
5d5216a94e
chore(deps): bump codecov/codecov-action from 2.1.0 to 3.1.1 ( #5573 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 2.1.0 to 3.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](f32b3a3741...d9f34f8cd5
2022-12-05 20:34:29 +00:00
dependabot[bot]
e68be2c786
chore(deps): bump goreleaser/goreleaser-action from 2.8.0 to 3.2.0 ( #5572 )
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 2.8.0 to 3.2.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](5df302e5e9...b508e2e3ef
2022-12-05 16:57:48 +00:00
dependabot[bot]
bb22b39303
chore(deps): bump JasonEtco/create-an-issue from 2.8.0 to 2.8.1 ( #5571 )
...
Bumps [JasonEtco/create-an-issue](https://github.com/JasonEtco/create-an-issue ) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/JasonEtco/create-an-issue/releases )
- [Commits](1a16035489...77399b6110
2022-12-05 15:00:36 +00:00
Charles-Edouard Brétéché
37b9157791
chore: disable dependabot auto rebase ( #5567 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-12-05 13:48:28 +00:00
dependabot[bot]
5908ff6854
chore(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.1 ( #5561 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 3.2.0 to 3.3.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](537aa1903e...0ad9a0988b
2022-12-05 10:20:42 +00:00
dependabot[bot]
8edfc37a9e
chore(deps): bump actions/checkout from 2.4.0 to 3.1.0 ( #5564 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.4.0 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-05 09:43:16 +01:00
dependabot[bot]
70f9aebf0a
chore(deps): bump actions/cache from 3.0.8 to 3.0.11 ( #5565 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.8 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](fd5de65bc8...9b0c1fce7a
2022-12-05 08:58:10 +01:00
dependabot[bot]
bd0b9389c8
chore(deps): bump stefanprodan/helm-gh-pages from 1.5.0 to 1.7.0 ( #5534 )
...
Bumps [stefanprodan/helm-gh-pages](https://github.com/stefanprodan/helm-gh-pages ) from 1.5.0 to 1.7.0.
- [Release notes](https://github.com/stefanprodan/helm-gh-pages/releases )
- [Commits](b43a8719cc...0ad2bb3773
2022-12-02 12:52:56 +00:00
dependabot[bot]
b4a7873550
chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions ( #5532 )
...
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions ) from 1.3.0 to 2.0.1.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases )
- [Commits](6ca5574367...af2eb32266
2022-12-02 13:23:12 +01:00
dependabot[bot]
ad2bc5a8e6
chore(deps): bump github/codeql-action from 1.0.26 to 2.1.35 ( #5536 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1.0.26 to 2.1.35.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5f53256358...b2a92eb56d
2022-12-02 11:21:16 +00:00
shuting
ee9078a96a
bump slsa GH generator to 1.4.0 ( #5530 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-12-02 10:50:32 +00:00
dependabot[bot]
40ef481f78
chore(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 ( #5535 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3.1.0...83fd05a356d7e2593de66fc9913b3002723633cb )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 10:19:44 +00:00
dependabot[bot]
1baa59d2b2
chore(deps): bump sigstore/cosign-installer from 2.8.0 to 2.8.1 ( #5533 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](7cc35d7fdb...9becc61764
2022-12-02 10:47:04 +01:00
Charles-Edouard Brétéché
6e695f7cc1
chore: enable dependabot ( #5531 )
2022-12-02 08:56:09 +00:00
Charles-Edouard Brétéché
83bbf87ff6
feat: use admission review v1 ( #5464 )
...
* feat: use admission review v1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* nit
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* patch type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-11-30 23:37:42 +08:00
Charles-Edouard Brétéché
987489d800
chore: stop using set-output in gh actions ( #5500 )
...
* chore: stop using set-output in gh actions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add quotes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* add quotes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-30 11:53:30 +00:00
Prateek Pandey
48ebe0f4c6
ci: cancel redundant builds of workflow on push ( #5427 )
...
Use concurrency to ensure that only a single job or
workflow using the same concurrency group will run
at a time. A concurrency group can be any string or
expression.
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-11-23 21:29:57 +08:00
shuting
060d60de5a
udpate slsa to v1.3.0 ( #5419 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-11-21 22:26:53 +00:00
Chip Zoller
815a0e4297
Update version drop-downs; bump Trivy ( #5425 )
...
* bump Trivy scanner
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add 1.8.2 to version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-21 13:21:09 +00:00
Chip Zoller
987e6d1cf6
Fix incorrect step ID reference ( #5388 )
...
- remove unnecessary test files
- fix incorrect step ID reference
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-17 18:48:01 +05:30
Chip Zoller
e3d3f1d0fb
fix digest variable ( #5356 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-15 16:59:58 +00:00
Ian Lewis
d52c287cb0
Update SLSA generator workflow to v1.2.2 ( #5323 )
...
* Update SLSA generator workflow to v1.2.2
Signed-off-by: Ian Lewis <ianlewis@google.com>
* Allow slsa-github-generator workflows to use tags
Signed-off-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: Ian Lewis <ianlewis@google.com>
2022-11-15 06:08:09 +00:00
Charles-Edouard Brétéché
75080d297e
test: add kuttl debug failure ( #5339 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-14 20:34:56 +00:00
Charles-Edouard Brétéché
4e22ad26bf
chore: add kuttl in makefile ( #5254 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2022-11-07 18:01:25 +00:00
Charles-Edouard Brétéché
01b28abf91
fix: remove /approve from prow actions ( #5243 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-11-07 11:10:22 +00:00
XDRAGON2002
25f8d4498b
[Feature] Pin Dependencies by Hash ( #5168 )
...
* pin dependencies by hash
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
* pin scripts
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Signed-off-by: Anant Vijay <anantvijay3@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-11-07 08:59:26 +00:00
Chip Zoller
da18305015
add kuttl tests ( #5204 )
...
- add kuttl tests
- try rekor: {url: "https://rekor.sigstore.dev "}
- add rekor{} object to last two policies
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-11-04 14:00:31 +00:00
Rishit Dagli
a41ceedd17
Add ability to use commands in comments ( #5154 )
...
* Add ability to use commands in comments
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Fix typo
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* reset resource version on update (#5157 )
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* skip generating events on empty rule response (#5158 )
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Fixed issue-5102: Show rule count and type in output (#5106 )
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* feature: SLSA Level 3 provenance generation for Kyverno images: kyverno init, kyverno and kyvernopre (#4268 )
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Pin action to specific hash
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* Add `/approve`
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
* fix: configure klog and global logger to use zapr in json mode (#5144 )
* configure klog and global logger to use zapr in json mode
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* make zapr compatible with klog's -v argument
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* remove changes
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* remove logLevel flag
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
Signed-off-by: Rishit Dagli <rishit.dagli@gmail.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Pratik Shah <pratik@infracloud.io>
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Pratik Shah <pratik@infracloud.io>
Co-authored-by: Zahid Khan <zahid.chashma@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: yinka <holayinkajr@gmail.com>
2022-10-31 10:34:17 +00:00
Zahid Khan
1fef873762
feature: SLSA Level 3 provenance generation for Kyverno images: kyverno init, kyverno and kyvernopre ( #4268 )
...
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Signed-off-by: zurrehma <zahid.chashma@gmail.com>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-10-28 14:19:15 +00:00
Charles-Edouard Brétéché
e4bf66e756
feat: remove policy mutation for auto-gen rules ( #5123 )
...
* feat: remove policy mutation code
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* Fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* changelog
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-10-25 23:43:46 +00:00
Stefan Prodan
7812626e61
ci: Fix install manifests publishing with Flux ( #5110 )
...
- use the correct version to tag artifacts
- add only the generated install.yaml to the artifact contents
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-21 12:29:55 +00:00
Stefan Prodan
96f0523d5a
ci: Use the Docker login action for GHCR auth ( #5091 )
...
Use the `docker/login-action` action and the default `GITHUB_TOKEN` for setting up the GHCR credentials for Flux and Cosign to be able to push OCI artifacts to ` ghcr.io/kyverno/manifests/kyverno`.
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-10-20 18:23:27 +00:00
Charles-Edouard Brétéché
ad2cbd3b33
feat: add simple conformance tests ( #5073 )
...
* feat: add simple conformance tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-20 12:17:33 +00:00
Abhiyant Gwalani
16f9003f7c
Created configuration file for Openssf scorecard ( #4778 )
...
Signed-off-by: Abhiyant Gwalani <71189932+abhiyant-10@users.noreply.github.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-10-19 12:57:45 +05:30
shuting
4741241054
fix env ( #5046 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-10-18 13:45:29 +00:00
shuting
994d207eb6
fix: Attempt to fix the CI failure, extract CI job push-sign-install-manifest ( #5035 )
...
* extract CI job push-sign-install-manifest
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix indent
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update env
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-10-18 09:31:31 +00:00
Batuhan Apaydın
29a26e54f7
chore: Push and sign install manifests to GHCR ( #4895 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Stefan Prodan <@stefanprodan>
Co-authored-by: Charles-Edouard Brétéché <@eddycharly>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-10-14 12:48:32 +00:00
Chip Zoller
b7247b5935
Update issue templates and scan for vulns action ( #4952 )
...
* update version drop-down
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add workflow to detect and report on image vulnerabilities
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* pin deps
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump JasonEtco/create-an-issue
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump versions in drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* fix background mode scan with request.operation
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Revert "bump versions in drop-downs"
This reverts commit 5fcea048ddf0d44c7aca
2022-10-13 22:11:58 +00:00
Batuhan Apaydın
38a15a948f
chore: add COSIGN_REPOSITORY env to ko-publish-dev step ( #4922 )
2022-10-13 10:55:39 +00:00
Batuhan Apaydın
f45584bfd6
chore: signing helm releases ( #4801 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-12 20:14:44 +00:00
Chip Zoller
5346bce5ca
Add workflow to detect and report on image vulns ( #4850 )
...
* update version drop-down
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add workflow to detect and report on image vulnerabilities
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* pin deps
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-10-10 15:10:16 +02:00
Charles-Edouard Brétéché
7e0884ca36
fix: publish yaml manifests in release instead of repo ( #4738 )
...
* fix: publish yaml manifests in release instead of repo
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* ignore
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* pin actions
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* messages
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix helm gen crds
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* chart app version
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-03 15:12:43 +00:00
Batuhan Apaydın
e258004e76
chore: change charts registry url ( #4768 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 20:20:33 +00:00
Charles-Edouard Brétéché
c28c0f2f42
docs: add policy cache controller docs ( #4714 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-09-28 13:08:26 +00:00
Charles-Edouard Brétéché
332a5aa01f
chore: enable overriding images repo ( #4694 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-27 17:47:59 +00:00
Charles-Edouard Brétéché
e8839a3ff7
chore: bump minimum go version ( #4677 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-25 10:11:28 +00:00
Batuhan Apaydın
e35da69c92
chore: publish sbom result to a different repositry from an image ( #4665 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-21 22:06:34 -05:00
Shubham Gupta
f00c12e954
Integrate Sonarcloud and Nancy github action ( #3491 )
...
* Integrate Sonarcloud and Nancy github action
Integrate Sonarcloud for static code analysis and Nancy for analysing
dependencies
Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>
* fix: pin actions to commit sha
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix auth for pr
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Shubham Gupta <shubham.gupta2956@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-09-14 07:25:14 +00:00
shuting
c3e91fb357
update helm releases path ( #4596 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-09-12 07:36:46 +00:00
Chip Zoller
f7853bb699
update version drop-down ( #4579 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-09-10 09:45:00 -04:00
Charles-Edouard Brétéché
a0eba5bfeb
chore: preserve pr title in cherry picks ( #4573 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-09 18:03:43 +00:00
Batuhan Apaydın
ff7ed78b09
chore: add kocache ( #4482 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-09 09:00:25 +00:00
shuting
9297efa55f
add new patterns for releases ( #4552 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-09-08 17:34:09 +00:00
Vyankatesh Kudtarkar
aa6abd99f2
Support V2beta1 Version ( #4514 )
...
introduce new version V2beta1 which remove deprecated CRD
types from version v1.
Signed-off-by: Vyankatesh <vyankateshkd@gmail.com>
2022-09-08 11:19:16 +00:00
Charles-Edouard Brétéché
92e223b7ff
fix: api reference docs ( #4490 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-07 14:25:57 +08:00
Charles-Edouard Brétéché
3beb4fee28
chore: test for k8s 1.25 ( #4503 )
...
* chore: test for k8s 1.25
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* remove 1.21 tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-09-06 16:48:53 +02:00
Charles-Edouard Brétéché
870462cc6d
chore: add unit tests for pkg/utils/os ( #4509 )
...
* chore: add unit tests for pkg/utils/os
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* review
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-06 07:19:29 +00:00
Charles-Edouard Brétéché
5e5627e81f
refactor: verify codegen targets in makefile ( #4494 )
2022-09-02 09:49:35 +00:00
Charles-Edouard Brétéché
caafbb74b9
fix: fetch history in pre-checks job ( #4491 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-02 16:55:41 +08:00
Batuhan Apaydın
cd0d87542a
chore: publish helm charts to ghcr.io ( #4479 )
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-01 19:15:33 +00:00
Charles-Edouard Brétéché
b65d9fc5c6
chore: bump cache action and improve paths ( #4485 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 17:41:48 +00:00
Charles-Edouard Brétéché
89ccf7998f
chore: relax auto update PRs conditions ( #4486 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 17:14:57 +00:00
Charles-Edouard Brétéché
b8e2d69693
fix: release workflow ( #4483 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-09-01 16:19:19 +00:00
Charles-Edouard Brétéché
0c40cd8814
fix: auto update pr workflow ( #4478 )
2022-09-01 10:54:23 +00:00
Charles-Edouard Brétéché
6173013a6c
chore: enable cherry-pick bot ( #4470 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-31 19:12:00 +00:00
Charles-Edouard Brétéché
8ddc72d792
refactor: clearly separate makefile docker targets for build and publish ( #4454 )
...
* refactor: clearly separate makefile ko targets for build and publish
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: clearly separate makefile docker targets for build and publish
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-31 12:22:46 +08:00
Charles-Edouard Brétéché
fc79ca96a2
refactor: clearly separate makefile ko targets for build and publish ( #4450 )
...
* refactor: clearly separate makefile ko targets for build and publish
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fixes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-30 17:30:28 +02:00
Charles-Edouard Brétéché
2b495c7ef3
chore: fix workflows related to ko recent changes ( #4438 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-08-30 12:59:08 +08:00
Chip Zoller
1f6e7b17ce
Update issue template drop-down version numbers ( #4446 )
...
* add chipzoller to CODEOWNERS
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add explanation section
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* bump versions in issue template drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-08-29 21:41:04 +00:00
Charles-Edouard Brétéché
c35e73e39c
fix: ko login ( #4425 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 16:56:27 +00:00
Charles-Edouard Brétéché
e0da0c996c
fix: ko login ( #4424 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:54:48 +00:00
Charles-Edouard Brétéché
ce4377a54e
fix: ko login ( #4423 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 23:01:50 +08:00
Charles-Edouard Brétéché
5915f37f4d
fix: ko login ( #4422 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-08-26 14:25:30 +00:00
Charles-Edouard Brétéché
9e49b25484
refactor: makefile build targets ( #4418 )
...
* refactor: makefile
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* refactor: makefile build targets
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-26 15:23:04 +08:00
Jason Hall
6055713dfc
Use ko to build images ( #4366 )
...
This updates Makefile targets to build images using `docker buildx
build` to use `ko build` instead.
End-to-end tests are accomplished by building and loading the image
directly into the KinD cluster via ko.
Also:
- use GitHub Actions token to push to ghcr.io (setup-ko sets this up for us)
- allow forks to push to their forked repo's packages (useful for testing)
Signed-off-by: Jason Hall <jason@chainguard.dev>
Signed-off-by: Jason Hall <jason@chainguard.dev>
2022-08-25 20:32:40 +02:00
Charles-Edouard Brétéché
cf0ee93de8
feat: enable autogen internals by default ( #4381 )
...
* feat: enable autogen internals by default
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* change e2e tests
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* change e2e tests matrix
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-25 23:01:43 +08:00
Prateek Pandey
34fe6c9058
bump cosign deps version to 1.11.1 ( #4408 )
...
* bump cosign deps version to 1.11.1
to accommodate latest attestation verification fixes
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
* bump github action go version to 1.18
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-08-25 08:24:49 +00:00
shuting
e2b77641cb
bump cosign version to 1.11.0 ( #4398 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-08-24 15:24:44 +00:00
Charles-Edouard Brétéché
91373e1329
fix: goimports check not working in ci job ( #4387 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-08-24 13:38:49 +00:00
Charles-Edouard Brétéché
144985ee5a
chore: fix golangcilint timeout ( #4388 )
...
* chore: fix golangcilint timeout
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix commit sha
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* add .gitattributes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-24 21:08:24 +08:00
Charles-Edouard Brétéché
3d9417a58a
chore: add workflow to ensure github actions are pinned to a commit SHA ( #4390 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-23 22:02:13 +02:00
Charles-Edouard Brétéché
8fc1754df7
chore: fix fossa ci job ( #4382 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-08-23 13:30:32 +00:00
Tushar Dahiya
71af968eac
Update pr_documentation.md ( #4361 )
...
Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>
Signed-off-by: Tushar Dahiya <tusharxoxoxo@gmail.com>
2022-08-21 22:05:00 +00:00
Chip Zoller
fbde1fbcbe
Template updates ( #4150 )
...
* add chipzoller to CODEOWNERS
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version drop-downs
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add explanation section
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-06-23 13:33:22 +00:00
Chip Zoller
d1f0671fee
update drop-downs ( #4081 )
...
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-06-06 23:54:35 +08:00
Prateek Pandey
0d44003386
refactor: bump KIND version to use v1.24.0 k8s release ( #3877 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-06-01 14:39:55 +00:00
Charles-Edouard Brétéché
8175fc15c9
chore: add previous pod logs in case of job failure ( #3978 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-20 20:34:55 +05:30
shuting
bccce5d9e3
Remove permissions in helm-release workflow ( #3901 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-05-12 08:12:17 +00:00
Charles-Edouard Brétéché
4107140a8d
chore: enable golangci-lint in ci ( #3852 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-05-10 10:22:34 +00:00
Sambhav Kothari
266bfa1077
Fix PR update flow and allow updates from release branches ( #3780 )
...
Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
2022-05-03 16:03:43 +08:00
Sambhav Kothari
0a9bcd5407
Auto-update PRs which are enabled for auto-merging ( #3766 )
2022-05-02 18:04:43 +00:00
treydock
0ae671ca7a
Cherry-pick release-1.6 Helm changes ( #3689 )
...
* Support releasing kyverno and kyverno-policies chart separately (#3672 )
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Add DELETE precondition back (#3657 )
* Add DELETE precondition back
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Add another example and test for 'any'
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-27 03:52:45 +00:00
Chip Zoller
029b69fa6b
Show warnings in Helm chart installation; update issue templates ( #3673 )
...
* add cherry pick requirement
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* adopt github issue forms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update PR template with test checklist reminders
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add "other" issue template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add "triage" label to all new issues
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* notes change
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* show warnings
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update version numbers in issue templates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add CI file per comments
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* new line for linting
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* stop being smart
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* remove ci file
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-04-27 01:45:22 +00:00
Charles-Edouard Brétéché
2e1534bd9d
fix: api reference docs link ( #3664 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-25 21:07:42 +08:00
Charles-Edouard Brétéché
201e55fcfb
chore: remove e2e tests for kube 1.20 ( #3665 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-04-25 11:43:11 +08:00
shuting
8d24582286
Update GH workflow config ( #3588 )
2022-04-12 07:37:37 -07:00
Shubham Gupta
f70cd4222f
Update hash of dependencies instead of mutable version ( #3582 )
...
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-04-12 10:22:38 +01:00
Charles-Edouard Brétéché
975f6ba7c8
test: pass lock by value ( #3481 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
2022-04-05 15:52:13 +00:00
Abhi Kapoor
18d4dadab6
Do not generate preconditions not met warning for audit policies ( #3487 )
...
* Do not generate preconditions not met warning for audit policies
Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>
* Update PR template to reeference the closing keyword
Signed-off-by: abhi-kapoor <43758739+abhi-kapoor@users.noreply.github.com>
* Update pkg/engine/validation.go
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
* Update pkg/engine/validation.go
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
Co-authored-by: Prateek Pandey <prateek.pandey@nirmata.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-05 10:08:01 +00:00
Prateek Pandey
1b2a3c1085
fix: use github repo env instead of hardcoded repo name ( #3513 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-03-31 17:36:21 +08:00
Charles-Edouard Brétéché
80d1ccb26d
chore: add autogen internals e2e tests ( #3492 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-29 16:35:27 +00:00
Charles-Edouard Brétéché
20069c13c3
feat: stop mutating rules ( #3410 )
...
* feat: stop adding autogen annotation
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: stop mutating rules
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* feat: stop mutating rules
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: use toggle
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* fix: review comments
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-28 22:01:27 +08:00
Chip Zoller
e454c71aa6
PR and issue template updates per contributors' meetings ( #3428 )
...
* add cherry pick requirement
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* adopt github issue forms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* update PR template with test checklist reminders
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Add "other" issue template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* add "triage" label to all new issues
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-03-19 21:31:54 -04:00
Charles-Edouard Brétéché
33df85cc0c
chore: remove check-helm-docs workflow ( #3408 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-03-16 13:55:21 -07:00
Abhinav Sinha
9bb7238a22
Add codecov to CI ( #3382 )
...
* Add `codecov` to CI
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
* Add `codecov` badge for `main` to `README.md`
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
* Addressed code review
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
2022-03-14 16:21:27 +08:00
Charles-Edouard Brétéché
51501cce9d
chore: check helm docs are up to date ( #3310 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-03-08 15:10:53 +00:00
Charles-Edouard Brétéché
8187b9331e
fix: invalid path in helm-test workflow ( #3344 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Sambhav Kothari <skothari44@bloomberg.net>
2022-03-08 01:08:46 +00:00
Charles-Edouard Brétéché
51db68ba20
chore: verify codegen in CI ( #3343 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-03-07 15:13:36 +05:30
Prateek Pandey
4846bd0293
fetch tag across all branches instead of current branch ( #3324 )
...
Signed-off-by: prateekpandey14 <prateek.pandey@nirmata.com>
2022-03-01 11:59:28 -08:00
Naman Lakhwani
fd7addd2fa
add separate step for digest ( #3321 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-03-01 20:05:14 +05:30
Naman Lakhwani
985e2cc158
adding check for digest and update git command
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-03-01 18:36:16 +05:30
Naman Lakhwani
378a1d6b95
Fix workflow using regex in main ( #3306 )
...
* using regex
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* added condition
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-02-25 08:48:11 +00:00
Naman Lakhwani
af98c00724
arranging permissions ( #3293 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-02-25 08:11:22 +00:00
Sambhav Kothari
c4075af3d1
Improve CLI test times by instantiating openapi controller once ( #3297 )
...
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-02-24 23:34:12 +08:00
skuethe
bf662b1ed4
fix: add support for other platforms before executing docker buildx ( #3296 )
2022-02-24 11:36:10 +00:00
Sambhav Kothari
e9e96e7b1c
Run E2E tests on all supported k8s versions ( #3256 )
2022-02-23 15:52:08 +00:00
Naman Lakhwani
a9c9b25bb5
latest will point to main ( #3285 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-02-23 15:30:49 +00:00
Naman Lakhwani
81ab535433
update trivy scanning ( #3284 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-02-23 10:40:07 +08:00
treydock
99efd8136f
Fix Helm releasing to preserve creation timestamps ( #3268 )
2022-02-21 15:50:42 +00:00
Sambhav Kothari
8c7f037c72
Improve E2E test CI timings ( #3250 )
...
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-02-17 17:47:35 -08:00
Chip Zoller
3dcf165d77
Issue forms and PR template adjustment ( #3213 )
...
* add cherry pick requirement
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* adopt github issue forms
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2022-02-12 16:51:05 +00:00
treydock
4e0d8ca612
Update kyverno-policies chart with latest pod-security policies ( #3126 )
...
* Update kyverno-policies chart with latest pod-security policies
Fixes #3063
Fixes #2277
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update README to have better example
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use chart testing during e2e to test against ci values
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix e2e tests for Helm chart
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Fix Kyverno chart testing to actually test values, and fix networkpolicy template
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update README for exclusion
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Allow adding 'other' policies via Helm
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update Chart.yaml for kyverno-policies
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Bump minimum Kubernetes version in charts
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Update kyverno-policies chart readme
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use version that should catch all pre-releases
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use version that should catch all pre-releases (part 2)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
* Use same logic to get git tag by using Makefile target for updating Helm values
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Prateek Pandey <prateekpandey14@gmail.com>
2022-02-04 14:47:36 +08:00
shuting
ae4d148318
Update dev image tag in Make targets ( #3159 )
...
* - update dev images tag; - update chart testing
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* update to use dev tag when setting up e2e tests infra
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* default chart test image tag for busybox to latest
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* set image tag to latest for chart testing
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* correct tag
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove test tag in e2e.yaml
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-02-03 15:41:58 +08:00
shuting
c479b41d34
update workflow configurations to fix CI failure ( #3060 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2022-01-24 04:39:15 +00:00
Mritunjay Kumar Sharma
cdedf11a1c
bumps k8s libraries for k8s v1.23 upgrade for kyverno ( #3043 )
...
* bumps k8s libraries for k8s v1.23 upgrade for kyverno
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* fixes kustomize version
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* updates golang to v1.17 to test fails
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* updates logr package to 1.2.2
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
* Fixed tests for `pkg/cosign` and `pkg/webhooks/generation`
Signed-off-by: Abhinav Sinha <abhinav@nirmata.com>
* fix go-logr deps version issue
Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>
* fix kube-openapi commit hash
Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: Abhinav Sinha <abhinav@nirmata.com>
Co-authored-by: prateekpandey14 <prateekpandey14@gmail.com>
2022-01-22 20:26:53 +08:00
Naman Lakhwani
73a02a5df3
fixing bildx version ( #3023 )
...
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-01-19 22:14:48 +08:00
Sambhav Kothari
8ddfcacd79
Fix permissions for image publish workflows ( #3021 )
...
All of the jobs in this workflow use the same set of permissions and this workflow is only run on pushes to master. Adding the appropriate permissions to read repository contents, publish packages and ID token for cosign.
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-19 11:39:51 +00:00
Naman Lakhwani
1580837526
refactoring github actions to remove duplication and enhancement for versioned sbom's ( #2979 )
...
* initial commit
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* adding docker-buildx-builder to makefile
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* reverting git describe in makefile
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* uploading sbom for each kyverno image
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* small nits
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
* scanning image before pushing and removed cosign.pub
Signed-off-by: Naman Lakhwani <namanlakhwani@gmail.com>
2022-01-18 15:07:59 -08:00
Roee Landesman
665d2022d8
add top level permissions to remaining github workflows ( #2995 )
...
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
2022-01-16 03:57:35 +00:00
Roee Landesman
3e524b5586
Add github token permissions to improve ossf scorecard ( #2992 )
...
* Fix autogen issue with cronjob generator and foreach pod generator (#2989 )
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
* Add baseline read-all permissions
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
* remove extra read-all
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
* Add arm64 goarch to go releaser (#2991 )
Signed-off-by: Roee Landesman <roee.landesman@gmail.com>
Co-authored-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-15 17:14:22 -08:00
Jim Bugwadia
116f36622b
move guidelines up ( #2976 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2022-01-13 18:33:24 +08:00
Shubham Palriwala
1257388b97
feat: pin dependencies in gh actions ( #2952 )
...
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2022-01-13 05:23:05 +00:00
Naman Lakhwani
8350aadc58
Fix: CI job to release images ( #2929 )
...
* making required changes in images workflow
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* making required changes in release workflow
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2022-01-10 14:10:44 +00:00
Sambhav Kothari
9a9326928c
Fix the PR template checkboxes to render empty instead of brackets ( #2942 )
...
The current PR template doesn't render the checkboxes by default as unticked and instead as square brackets. This change
allows contributors to use the rendered UI to check boxes instead of manually fixing markdown.
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-09 12:02:57 -08:00
Naman Lakhwani
68c8790139
adding permissions in jobs ( #2924 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 19:35:45 +00:00
Naman Lakhwani
2f8bfc78b1
removing spaces ( #2923 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 17:12:11 +00:00
Naman Lakhwani
cda6310249
fix in image workflow ( #2921 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-06 22:48:20 +08:00
Naman Lakhwani
f330886af7
fixing cosign command ( #2915 )
...
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-05 13:02:17 -08:00
Naman Lakhwani
d126280184
keyless signing kyverno images with digest ( #2896 )
...
* signing with digest
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* keyless signing
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* adding annotations
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* keyless image signing with digest in release workflow
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
2022-01-04 08:08:28 -08:00
Abhinav Sinha
2076f07b9f
added support for --git-branch flag and directory in git path for kyverno test cmd ( #2763 )
...
* added support for --git-branch flag and directory in git path for kyverno test cmd
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* added cli tests
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* replaced hard-coded Makefile test-cmd branch names with var GIT_BRANCH
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* moved `test-cmd` job from Makefile to github workflow
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* added `release*` branch to `e2e` workflow
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
2021-12-20 14:09:53 +08:00
shuting
f4614213e5
Test publishing dev-test images ( #2848 )
...
* publish dev-* images
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add LD_FLAGS_DEV
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* add IMAGE_TAG_LATEST_DEV
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* remove test statement
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2021-12-17 02:46:59 +00:00
Shubham Palriwala
ea3529f2d0
Trivy now scans local images ( #2744 )
...
* fix: trivy now scans entire container
Signed-off-by: ShubhamPalriwala <spalriwalau@gmail.com>
* update github.com/docker/cli package for vulnerabilities
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix go.mod vulnerabilities
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2021-11-22 20:57:51 +08:00
Chip Zoller
7c5142b26a
Contributors updates, Kyverno CLI acknowledgements ( #2644 )
...
* add platform to bug template
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Helm value updates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* linting, formatting, link updates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* linting, formatting, updates
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Updates per contributors meeting; linting, fixes
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* Updated templates with acknowledgement of CLI parity
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
* git => GitHub
Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-11-06 11:08:42 -04:00
Jose Armesto
831a9826d1
Restructure project to follow standards ( #2632 )
...
Signed-off-by: Jose Armesto <github@armesto.net>
2021-10-29 18:13:20 +02:00
Marcus Noble
a923dce631
Cleanup imports ( #2635 )
...
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-29 12:24:26 +02:00
Vinod Anandan
a07274f234
Update gh-gomod-generate-sbom
...
Signed-off-by: Vinod Anandan <vinod@owasp.org>
2021-10-23 14:41:05 +01:00
