mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
2500 commits 15 branches 540 tags 276 MiB
Commit graph

2500 commits

This branch
This branch
All branches
Author SHA1 Message Date
Mohan B E
bd406f5bb8
added conversion of overlay to patch strategic merge (#1138) 
* added conversion of overlay to patch strategic merge and modified unittest for the same

* updated best practice policy
 2020-09-22 16:19:09 -07:00
Mohan B E
51ac382c6c
Feature/configmaps var 724 (#1118) 
* added configmap data substitution for foreground mutate and validate

* added configmap data substitution for foreground mutate and validate fmt

* added configmap lookup for background

* added comments to resource cache

* added configmap data lookup in preConditions

* added parse strings in In operator and configmap lookup docs

* added configmap lookup docs

* modified configmap lookup docs
 2020-09-22 14:11:49 -07:00
Shuting Zhao
fe20f3aa4c tag 1.1.12 2020-09-18 12:57:38 -07:00
Yuvraj
e5fb55f1c6
Generate policy with backword compatibility (#1125) 
* fix generate label issue

* fix generate issue for old namespace

* small fix

* added backword compatibility

* condition changed

* extra code remove
 2020-09-18 12:34:43 -07:00
Mohan B E
a1081c8f82
fixed policy validationa and patch strategic merge bug (#1136) 2020-09-18 12:18:13 -07:00
shuting
0814d9e799
update operator doc (#1131) 2020-09-18 12:15:04 -07:00
Pooja Singh
46158ee695
Fixes CLI bug - mutate resource and variable substitution (#1123) 
* fixed passing multiple resource for -f flag

* fixed saving mutated resource

* comment removed
 2020-09-16 12:05:07 -07:00
Pooja Singh
ba5c656d76
converting patches to patchesJSON6902 (#1115) 
* converting patches to patchesJSON6902

* updated readme

* removed patch section from readme
 2020-09-16 10:53:05 -07:00
shuting
3fa745bc3e
Bugfix policymutation (#1119) 
* fix policy mutation - autogen does not have exclude

* update doc
 2020-09-15 22:58:55 -07:00
shuting
f82b4a4952
skip policy mutation on status update (#1112) 2020-09-14 10:56:06 -07:00
Mohan B E
95542908eb
fixed additional anchor bug in patch strategic merge (#1114) 2020-09-14 10:25:00 -07:00
Pooja Singh
0bd1a10a91
Merge pull request #1109 from NoSkillGirl/bug/cli_print_in_yaml 
fixed duplicate name
 2020-09-10 12:16:46 +05:30
NoSkillGirl
b1a2ab398b fixed duplicate name 2020-09-09 20:17:20 +05:30
Shuting Zhao
c7adf66fda tag 1.1.11 2020-09-08 11:53:49 -07:00
Mohan B E
c5e9d6db15
added autogen for patch strategic merge (#1104) 2020-09-04 16:20:20 -07:00
Pooja Singh
a18bdc0768
Merge pull request #1102 from NoSkillGirl/bug/api-V3_validation 
fixed return
 2020-09-04 20:17:46 +05:30
NoSkillGirl
4f8a765ce1 fixed return 2020-09-04 19:42:29 +05:30
Yuvraj
b7524467a3
Reconcile Generate request on policy update (#1096) 
* policy report crd added

* added namespaced rule

* remove extra field from crd

* revert crd change

* remove policy report chnages

* remove policy report chnages

* remove policy report chnages

* remove policy report chnages

* added logic for gr

* revert changes

* fixed generate rules

* fixed generate rules

* fixed generate rules

* fixed generate rules

* remove extra logs

* remove extra logs

* fixed e2e test

* remove extra logs

* crd issue resolved

* added check for sync

* add labels update

* add label update

* added permission to role

* roles added to helm

* roles added to helm
 2020-09-03 14:34:23 -07:00
Pooja Singh
154b1c1eb9
Merge pull request #1095 from NoSkillGirl/feature/support_openapi_v3 
added validation for openapi_v3
 2020-09-03 23:02:17 +05:30
Mohan B E
118b40c644
added invalid field validation for policy (#1094) 2020-09-03 22:14:54 +05:30
shuting
931d7cd47c
Set mutating webhhok reinvocationPolicy to IfNeeded (#1097) 
* add watch policy to clusterrole kyverno:customresources

* fix build

* fix nil pointer

* skip json patches if the mutation is re-invoked

* set resource mutating webhook invocation policy to IfNeeded
 2020-09-03 08:54:37 -07:00
NoSkillGirl
70108232ec added return 2020-09-03 09:47:43 +05:30
NoSkillGirl
fcdbc054c9 added validation for openapi_v3 2020-09-02 17:14:29 +05:30
shuting
9a210e24d9
bug fix - nil pointer (#1093) 
* add watch policy to clusterrole kyverno:customresources

* fix build

* fix nil pointer
 2020-09-01 17:23:54 -07:00
shuting
b319a816c5
Fix build (#1092) 
* add watch policy to clusterrole kyverno:customresources

* fix build
 2020-09-01 09:38:49 -07:00
Mohan B E
3690bf5fff
conditional anchor preprocessing for patch strategic merge (#1090) 
* conditional anchor preprocessing for patch strategic merge

* modified sequence pre processing and added unit test

* merged master

* go fmt

* corrected mistake and added error handling to policy validate
 2020-09-01 09:12:05 -07:00
shuting
e0f617b383
810 support cronJob for auto-gen (#1089) 
* add watch policy to clusterrole kyverno:customresources

* - improve auto-gen policy application logic - remove unused code

* move method to common util

* auto-gen rule for cronJob

* update doc

* set CronJob as default auto-gen pod controller

* - update doc; - fix test

* remove unused code
 2020-09-01 09:11:20 -07:00
Pooja Singh
2bfb5fffb3
Merge pull request #1080 from NoSkillGirl/feature/crd_validation 
Supporting CRD validation in CLI
 2020-09-01 08:51:02 +05:30
NoSkillGirl
afc340ea5f removed todo 2020-09-01 08:41:59 +05:30
Yuvraj
2641120907
Generate policy does not work on namespace update (#1085) 
* added logic for handling generate request

* generate rules added

* added label condition for generate

* remove extra logs

* remove extra logs

* buf fixed

* bug fixed

* added logic for delete gr

* log fixed

* documentation changed

* remove best practices changes

* bug fix

* added best pratice
 2020-08-31 11:25:13 -07:00
NoSkillGirl
d9c3a166cc updated readme 2020-08-31 19:32:00 +05:30
NoSkillGirl
ccfd4adad3 calling GetCRD's from validate 2020-08-31 18:44:08 +05:30
NoSkillGirl
e5f5ef9db1 split multi yaml in crd 2020-08-31 18:20:25 +05:30
NoSkillGirl
6b6897f6e2 working version of CRD validation for CLI 2020-08-31 18:19:09 +05:30
NoSkillGirl
b61412ca7a minor validation changes 2020-08-31 18:18:10 +05:30
NoSkillGirl
afb6ad714c small issue while resolving conflicts 2020-08-31 18:16:53 +05:30
NoSkillGirl
70b13d06dc validation of policy against crd 2020-08-31 18:15:39 +05:30
Mohan B E
a827f88dc7
resolved conditional anchor issue and added validation to pattern labels (#1060) 
* resolved conditional anchor issue and added validation to pattern labels

* restored IsConditionAnchor

* added annotation and anypattern validation

* added conditional anchor key checker

* reverted docs

* fixed tests

* modified validation

* modified validate condition check
 2020-08-28 18:22:22 -07:00
Michael Barrientos
b067f41d02
Replace Policy CRD AnyValue fields with empty dict (#1086) 
/kind cleanup

\## Proposed change

This implements the same change as #1047, except for the new Policy CRD instead of the ClusterPolicy CRD, which apparently did not get those updates before merging.

When deploying Kyverno using Argo CD, we get a persistent false diff for the Policy custom resource definition (the definition itself, not instances of Policy), because Kubernetes converts the invalid AnyValue: {} property types to just an empty dict {}. Since the Kubernetes server makes this change to {} unilaterally after applying, when a diffing tool like Argo CD compares it against the YAML manifest, each such instance of AnyValue appears as a diff.

I know that since AnyValue is not part of the official OpenAPI V3 schema, and that when you run kubectl get crd policies.kyverno.io -o yaml the status message shows Kubernetes complaining about "Required value: must not be empty for specified object fields" for all of these fields. In theory the correct solution would be to somehow provide a full schema, but I know this can be tricky for these data/anyPattern/patches types, but at the minimum, I would like to get Argo CD to believe that there are no changes that need to be applied.

Since these fields are already silently turned into {} by Kubernetes, this should have no functionality change on existing code/deployments.
 2020-08-26 11:11:36 -07:00
Yuvraj
b648c2edd6
Events take several minutes to show on the resource (#1083) 
* git action added

* changed retry method

* remove time method

* increase worker for event generator
 2020-08-26 14:28:34 +05:30
shuting
513f5ec898
add watch policy to clusterrole kyverno:customresources (#1084) 2020-08-24 12:27:16 -07:00
Pooja Singh
8105e4cad8
Allowing only few variables in the policies (#1063) 
* Checking for non whitelisted variables in the policy

* method name change

* small issue while rebasing
 2020-08-23 15:11:03 -07:00
Pooja Singh
1b69ca26db
Merge pull request #1030 from NoSkillGirl/feature/add_cli_variables 
Feature/add cli variables
 2020-08-22 01:48:40 +05:30
NoSkillGirl
067d51cb28 resolving issues after rebase 2020-08-22 01:21:29 +05:30
Mohan B E
3feb41e5f3
wildcard for numeric values (#1074) 
* wildcard for numeric values

* changed error message
 2020-08-21 12:48:05 -07:00
NoSkillGirl
b3a13cd36b updated readme - apply example 2020-08-22 01:07:04 +05:30
NoSkillGirl
492b0636c2 updated readme 2020-08-22 01:07:04 +05:30
NoSkillGirl
3a3311835c added error handling 2020-08-22 01:07:04 +05:30
NoSkillGirl
df154537f1 Added provision to pass cli values from a file 2020-08-22 01:07:04 +05:30
NoSkillGirl
e18deb94f2 updated readme 2020-08-22 01:07:04 +05:30