1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-06 16:06:56 +00:00
Commit graph

3416 commits

Author SHA1 Message Date
Max Goncharenko
fdaa73b175
Forbid variables in match/exclude/patchesJson6902.path sections (#1940)
* forbid variables in match/exclude/patchesJson6902.path sections

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* fix e2e test

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* edits related to the PR comments

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
2021-07-02 19:17:40 +05:30
Max Goncharenko
6d0ad5598e
Jmespath notfound error (#1907)
* return err, if variable path could not be resolved

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* fixed {{@}} behavior

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* fix json merge logic

Signed-off-by: Max Goncharenko <kacejot@fex.net>

* add e2e tests for Flux use case

Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
2021-07-01 22:56:50 -07:00
Vyankatesh Kudtarkar
b72a3d4a8c
Merge pull request #2037 from Retna-Gjensidige/issue-2036
fix: added envVars to containers
2021-07-02 10:58:59 +05:30
Retna
933e6ae274
Merge branch 'main' into issue-2036
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-07-01 15:17:18 +02:00
Retna
7983229d75
fix: Formatting 2021-07-01 14:58:36 +02:00
Vyankatesh Kudtarkar
3de5d37b21
Merge pull request #1919 from windowsrefund/fix-envVars
Helm chart: Eliminate duplicate env key when iterating over envVars
2021-07-01 16:46:16 +05:30
Pooja Singh
5ad07b28b1
Merge pull request #2091 from NoSkillGirl/2085-e2e-generate-policy
e2e test cases for generate policy with clone (changes in workflow)
2021-07-01 16:11:33 +05:30
NoSkillGirl
2025fd0f70 fixing clone source replication
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-01 15:44:15 +05:30
NoSkillGirl
6894f1d85c added case - generated resource is not deleted after the source is deleted
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-01 10:13:15 +05:30
NoSkillGirl
e768b8ae94 added case - generated resource is not updated if the source resource is updated
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-01 10:10:57 +05:30
NoSkillGirl
7008cb9d98 added case - generated resource is not deleted after the generate policy is gone
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-07-01 10:09:43 +05:30
Vyankatesh Kudtarkar
07910edd15
2074 : Fix Policy cache returns the duplicated policies (#2082)
* Fix Policy cache returns the duplicated policies

* Add testcases
2021-06-30 12:20:21 -07:00
Pooja Singh
cd9e596e7e
[Improvement] Kyverno should not delete downstream resources when a generate policy using the clone behavior has synchronize: true (#1880)
* debuging issue

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* issue fixed

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* remove policy name in source resource

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* fixed deletion of GR on source updation

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added function in common

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* removing comments

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added generated resource list to the log

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* small improvement

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-30 12:00:02 -07:00
shuting
2c9e52af98
update podSecurityStandard from default to baseline (#2084)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-29 15:54:17 -07:00
Valentin Velkov
63f4c9a884
Configurable success events on policies & resources. Generating failure events on policies by default. (#1939)
* Remove unused event.Reason const

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Generate failure events on policies

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Generate success events on policy

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Introduce 'generateSuccessEvents' flag

Signed-off-by: Velkov <valentin.velkov@sap.com>

* Unit tests & chart fix

Signed-off-by: Velkov <valentin.velkov@sap.com>
2021-06-29 14:43:11 -07:00
Chip Zoller
436d44050b
Helm chart README fixes (#2062)
* fix link to PR doc

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* fix description

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* chart README fixes

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Helm chart README clean-up

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* linting

Signed-off-by: Chip Zoller <chipzoller@gmail.com>

* Revert "fix description"

This reverts commit e128152cd7.

Signed-off-by: Chip Zoller <chipzoller@gmail.com>
2021-06-29 13:48:26 -07:00
treydock
c479517c53
Fix Helm release during tag (#2081)
Fixes #2057

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-29 13:36:30 -07:00
Pooja Singh
23d1a92b99
Merge pull request #2026 from NoSkillGirl/caching_endpoint
Adding endpoint check for policy creation
2021-06-29 12:11:35 +05:30
NoSkillGirl
a8ab5e74ed added comment
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-29 11:52:24 +05:30
Arsh Sharma
fbc80cdfae
adding support for multiple names in match and exclude blocks (#2010)
* add names in rd struct

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added checking logic

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* updated yamls

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* wip: fix empty set problem

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* working with exclude

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixing name and names

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added error if both name and names are specified

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added tests

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* changed empty set logic, fixed whitespaces and comments

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fix match and exclude bug

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-28 22:31:22 -07:00
Vyankatesh Kudtarkar
8556cf6c91
Merge pull request #2066 from MarcusNoble/fix_helm_deployment_name
fix: set deployment name env var
2021-06-28 15:30:54 +05:30
Nicolas Lamirault
4ca208da25
FIX Custom labels indentation (#2073)
* Fix: custom labels indentation

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: bump chart version

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2021-06-25 13:28:30 -07:00
Shuting Zhao
f9a89c4672 tag v1.4.1
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-24 15:13:15 -07:00
shuting
0a13ce9c73
Revert "Fix Helm deployment name issue" (#2070) 2021-06-24 14:22:34 -07:00
Pooja Singh
54a85c5da1
Merge pull request #2045 from vyankyGH/fix_deployment_name
Fix Helm deployment name issue - install kyverno with helm release name != kyverno
2021-06-24 19:19:19 +05:30
vyankatesh
235038e712 fix deployment issue 2021-06-24 13:07:51 +05:30
vyankatesh
11a05496de fix helm deployment name 2021-06-24 13:03:15 +05:30
Marcus Noble
443d56fd4d fix: set deployment name env var
Signed-off-by: Marcus Noble <m.noble@elsevier.com>
2021-06-24 08:17:14 +01:00
treydock
3b1fd912cb
Move log to debug for wildcard pattern matching (#2064)
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-06-23 16:48:09 -07:00
Mahfuza Humayra Mohona
9e769d1fd0
Integrate LitmusChaos - Pod Memory Hog experiment (#2014)
* updating readme

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Updating GetWithRetry function

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Updating GetWithRetry function

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Updating GetWithRetry function

Signed-off-by: Mahfuza Humayra Mohona <mhmohona@gmail.com>
Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* removing update

Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>

* Update utils.go

Signed-off-by: Mahfuza Mohona <mahfuza.mohona@LEADSOFT.BIZ>
2021-06-23 14:16:49 -07:00
Arsh Sharma
9efd58f667
deleted bot (#2059)
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-23 00:23:33 -07:00
shuting
3b06378142
remove selector from Helm chart (#2056)
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-06-22 23:10:04 -07:00
Vyankatesh Kudtarkar
09909a56f2
Merge pull request #2054 from DarthBenro008/fix/2031
add: http/https regex to kyverno CLI
2021-06-23 10:10:25 +05:30
DarthBenro008
e82e7e7596
refactor: fix minor typos
Signed-off-by: DarthBenro008 <hkpdev008@gmail.com>
2021-06-23 00:37:41 +05:30
Pooja Singh
c6c803511c
Merge pull request #1977 from RinkiyaKeDad/1818_default_to_baseline
replacing pod security standard from default to baseline
2021-06-22 23:35:39 +05:30
vivek kumar sahu
faa88699af
fix typo in policy struct (#1992)
* Updates L-30  Signed-off-by: viveksahu26  vivekkumarsahu650@gmail.com

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>

* compile the code using

Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
2021-06-22 10:03:15 -07:00
Retna Ramachandran
5825dfbf4f
feat: splitting envVars for initContainers and containers
Signed-off-by: Retna Ramachandran <retna@gjensidige.no>
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-06-22 15:41:58 +02:00
Retna Ramachandran
c95802bf84
fix: clean up of extra ENV key in manifest
Signed-off-by: Retna Ramachandran <retna@gjensidige.no>
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-06-22 15:41:58 +02:00
Retna
194c99564e
fix: added envVars to containers
Signed-off-by: Retna Ramachandran <retna.ramachandran@gjensidige.no>
2021-06-22 15:41:58 +02:00
DarthBenro008
c32526f109
fix: add http/https regex to kyverno CLI
Signed-off-by: DarthBenro008 <hkpdev008@gmail.com>
2021-06-22 18:48:23 +05:30
Vyankatesh Kudtarkar
4765d1ccc9
Merge pull request #2052 from georgekaz/cert-patch-iterate-chart-version
iterate-chart-version
2021-06-22 16:08:34 +05:30
George Kaz
d4180737f5 iterate-chart-version
Signed-off-by: George Kaz <egeorgekaz@gmail.com>
2021-06-22 09:49:06 +01:00
RinkiyaKeDad
a93c46a8e8 psd -> psb
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-22 12:05:19 +05:30
Vyankatesh Kudtarkar
14f401a118
Merge pull request #2048 from georgekaz/cert-patch
Correct ca and cert namespace
2021-06-22 11:25:54 +05:30
Arsh Sharma
86045fc02c
adding support for policies.kyverno.io/scored annotation (#1976)
* initial commit

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* added debug statements

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed report

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* removed code for debugging

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* newline fix

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fix default case

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 18:37:20 -07:00
Arsh Sharma
431b36f34e
updating the bot to auto label issues and PRs (#2042)
* changed labeler bot

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>

* fixed label for hold

Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
2021-06-21 12:10:25 -07:00
NoSkillGirl
6361aeae21 removing print statements
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-22 00:29:04 +05:30
NoSkillGirl
c607408098 corrected policy name in config
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 23:44:20 +05:30
NoSkillGirl
aa574ca242 printing metric log for Test_Role_RoleBinding_Sets
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 23:07:18 +05:30
NoSkillGirl
58fcd76c3a fixing reviewdog comments
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
2021-06-21 21:50:49 +05:30