207 commits

Author	SHA1	Message	Date
Shuting Zhao	c80f9e0f9d	best_practice: sysctl	2019-10-07 11:21:14 -07:00
Shuting Zhao	2243e9e2e7	best practice: validate container capability	2019-10-04 18:15:39 -07:00
Shuting Zhao	0c09ba53eb	best-practice: validate default proc mount	2019-10-04 17:48:57 -07:00
Shuting Zhao	1bd8663e4c	add selinux best practice	2019-10-04 17:28:42 -07:00
Shuting Zhao	04c147eb77	add security context "fsgroup"	2019-10-04 16:50:23 -07:00
Shuting Zhao	23c9212d67	fix hostpid/hostipc test runner	2019-10-01 14:53:58 -07:00
Shuting Zhao	5009e8abb7	change anypattern to pattern, refer #357	2019-10-01 14:45:16 -07:00
Shuting Zhao	d279d7fd77	update testrunner	2019-09-18 12:33:25 -07:00
Shuting Zhao	da3d48f020	update test scenario for non-root user	2019-09-17 18:51:16 -07:00
Shuting Zhao	658fb84e91	update best_practice Disallow privileged and privilege escalation	2019-09-17 18:42:08 -07:00
Shuting Zhao	f4eee4b30a	update best-practice run as non-root uesr	2019-09-17 18:36:24 -07:00
Shuting Zhao	5e0415911a	add best-practice: policy_validate_disallow_default_serviceaccount	2019-09-16 14:16:54 -07:00
shivkumar dudhani	44af35d6e4	support wild cards for namespaces in rule resource description	2019-09-12 17:11:55 -07:00
Shuting Zhao	e6a5b1ceb8	add namespace_quota testrunner	2019-09-10 12:27:21 -07:00
Shuting Zhao	2e22c21164	add policy_validate_disallow_node_port.yaml	2019-09-10 11:57:33 -07:00
Shuting Zhao	3237f3d799	add policy_validate_not_readonly_rootfilesystem.yaml	2019-09-09 18:13:38 -07:00
Shuting Zhao	3eeba1a32b	add policy_validate_hostPID_hosIPC.yaml	2019-09-09 17:34:25 -07:00
Shuting Zhao	d0fd3e69ef	update testrunner, unit test for validate_host_network_port	2019-09-09 16:08:15 -07:00
Shuting Zhao	0fe5a065dd	add validate_hostpath testrunner	2019-09-09 15:06:54 -07:00
Shuting Zhao	b494dec7f3	add validate_namespace test runner	2019-09-09 14:33:55 -07:00
Shuting Zhao	d92026f94a	add disallow_priviledgedprivelegesecalation test runner	2019-09-09 10:56:19 -07:00
Shuting Zhao	ae8264deae	Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies ... # Conflicts: # examples/best_practices/policy_validate_container_disallow_priviledgedprivelegesecalation.yaml # examples/best_practices/policy_validate_container_security_context.yaml # examples/best_practices/validate_container_security_context.yaml	2019-09-09 10:36:56 -07:00
shivkumar dudhani	59c1e83466	upate readme links and remove duplicate policies	2019-09-08 10:41:07 -07:00
Shuting Zhao	b667c47587	update testrunner for examples/best_practices/policy_validate_container_security_context.yaml	2019-09-06 18:54:19 -07:00
shivkumar dudhani	ff60dc05fd	add policies	2019-09-06 10:03:24 -07:00
shivkumar dudhani	f56603e4d4	update message to show resource path of failure for validation + print custom message on failure + anyPattern to return on first success validation + update scenarios for test runner	2019-09-05 12:44:38 -07:00
shivkumar dudhani	fa53519e2a	change CRD Name to ClusterPolicy & ClusterPolicyViolations	2019-09-03 14:51:51 -07:00
shivkumar dudhani	0a132054e1	fixes + support generate policies	2019-08-30 14:06:47 -07:00
shivkumar dudhani	a31f9c383d	scneario file test runner	2019-08-30 00:22:37 -07:00
shivkumar dudhani	20e2f639eb	add validate helper functions	2019-08-29 11:44:50 -07:00
shivkumar dudhani	35e0c7ca49	fix build errors + add example for exclude policy	2019-08-21 16:34:17 -07:00
Shuting Zhao	92d69bdb2a	add script to generate N number of resources/policies	2019-08-05 16:24:59 -07:00
Shuting Zhao	912c99a88f	add function to generate N policies	2019-08-02 19:22:52 -07:00
Shuting Zhao	3a639fd6fd	cleanup example folder	2019-07-29 19:01:17 -07:00
shivkumar dudhani	073acbaa40	update policy yaml	2019-07-25 14:57:44 -04:00
shivkumar dudhani	15918ec0d8	rebase with master	2019-07-19 20:39:31 -07:00
shivkumar dudhani	3cb978c16f	clean up + fix bugs	2019-07-19 20:30:55 -07:00
shivkumar dudhani	725a94cc37	refactor testrunner framework	2019-07-01 12:16:12 -07:00
Shuting Zhao	b63b3b869e	create event from policy info	2019-06-26 18:04:50 -07:00
Anton Kostenko	5efbfe80c9	removed extra changes	2019-06-21 15:41:39 +03:00
shivdudhani	e1df4a0dd9	rework the framework	2019-06-17 18:11:22 -07:00
Anton Kostenko	1ae3db1517	updated test after bubfix	2019-06-10 16:08:35 +03:00
shivdudhani	5c71cc9d58	update test examples	2019-06-03 16:09:14 -07:00
Anton Kostenko	e2d5b0c1ef	Updated examples	2019-05-23 20:37:11 +03:00
Jim Bugwadia	55c2c1581e	fix conflicts	2019-05-22 20:26:53 -07:00
shivdudhani	ad835cf484	update apiVersion for test YAMLs and update spec.rules.generate type to object	2019-05-22 17:57:40 -07:00
shivdudhani	857aa81f3e	update the project name in api version and test	2019-05-22 10:53:01 -07:00
shivdudhani	02d17f7d84	rebase with release 1.0	2019-05-22 10:43:29 -07:00
Denis Belyshev	6251e971cc	34: Updated documentation	2019-05-22 18:14:10 +03:00
shuting	dbd1bb4466	update example due to crd name changed	2019-05-21 18:38:52 -07:00