shivkumar dudhani
|
c65f12b97b
|
initial commit
|
2019-09-25 15:12:33 -07:00 |
|
shuting
|
9992ab0f63
|
Merge pull request #353 from nirmata/best_practice_policies
update best practices
|
2019-09-18 12:39:02 -07:00 |
|
Shuting Zhao
|
d279d7fd77
|
update testrunner
|
2019-09-18 12:33:25 -07:00 |
|
Shuting Zhao
|
4a43eef696
|
correct spelling
|
2019-09-18 12:31:14 -07:00 |
|
Shuting Zhao
|
da3d48f020
|
update test scenario for non-root user
|
2019-09-17 18:51:16 -07:00 |
|
Shuting Zhao
|
658fb84e91
|
update best_practice Disallow privileged and privilege escalation
|
2019-09-17 18:42:08 -07:00 |
|
Shuting Zhao
|
f4eee4b30a
|
update best-practice run as non-root uesr
|
2019-09-17 18:36:24 -07:00 |
|
Shivkumar Dudhani
|
1a38e6bea6
|
Merge pull request #352 from nirmata/best_practice_policies
add best-practice: disallow_default_serviceaccount
|
2019-09-16 15:22:56 -07:00 |
|
Shuting Zhao
|
5e0415911a
|
add best-practice: policy_validate_disallow_default_serviceaccount
|
2019-09-16 14:16:54 -07:00 |
|
shuting
|
3d02f81434
|
Merge pull request #351 from nirmata/348_feature_wildcardsNamespaces
support wild cards for namespaces in rule resource description
|
2019-09-12 23:06:51 -07:00 |
|
shuting
|
bd73dd7b0e
|
Merge pull request #350 from nirmata/349_bug
349 bug
|
2019-09-12 23:02:35 -07:00 |
|
shivkumar dudhani
|
44af35d6e4
|
support wild cards for namespaces in rule resource description
|
2019-09-12 17:11:55 -07:00 |
|
shivkumar dudhani
|
c77e5df6c0
|
missing file
|
2019-09-12 15:04:46 -07:00 |
|
shivkumar dudhani
|
5dab189743
|
fix event resource name + add filtered kinds to policy controller & namespace + fix messages
|
2019-09-12 15:04:35 -07:00 |
|
Shivkumar Dudhani
|
fdc4703258
|
Merge pull request #343 from nirmata/best_practice_policies
Update best practice policies
|
2019-09-10 12:47:10 -07:00 |
|
Shuting Zhao
|
e6a5b1ceb8
|
add namespace_quota testrunner
|
2019-09-10 12:27:21 -07:00 |
|
Shuting Zhao
|
2e22c21164
|
add policy_validate_disallow_node_port.yaml
|
2019-09-10 11:57:33 -07:00 |
|
shuting
|
6004ab0a29
|
Rename resource_validate_hostPID_hostIPC.yaml to resource_validate_hostpid_hostipc.yaml
|
2019-09-10 00:04:33 -07:00 |
|
shuting
|
fd7614ae23
|
Rename policy_validate_hostPID_hosIPC.yaml to policy_validate_hostpid_hosipc.yaml
|
2019-09-10 00:03:49 -07:00 |
|
Shuting Zhao
|
6ecec2f5a7
|
add resource_quota testrunner
|
2019-09-09 23:55:14 -07:00 |
|
Shuting Zhao
|
3440d5b63e
|
update readme
|
2019-09-09 23:40:05 -07:00 |
|
Shuting Zhao
|
019815c523
|
add policy_validate_namespace_quota.yaml - add policy_validate_default_network_policy.yaml
|
2019-09-09 23:38:16 -07:00 |
|
Shuting Zhao
|
3237f3d799
|
add policy_validate_not_readonly_rootfilesystem.yaml
|
2019-09-09 18:13:38 -07:00 |
|
Shuting Zhao
|
3eeba1a32b
|
add policy_validate_hostPID_hosIPC.yaml
|
2019-09-09 17:34:25 -07:00 |
|
Shuting Zhao
|
d0fd3e69ef
|
update testrunner, unit test for validate_host_network_port
|
2019-09-09 16:08:15 -07:00 |
|
Shuting Zhao
|
0fe5a065dd
|
add validate_hostpath testrunner
|
2019-09-09 15:06:54 -07:00 |
|
Shuting Zhao
|
f1192d1dc1
|
update readme link
|
2019-09-09 14:55:12 -07:00 |
|
Shuting Zhao
|
b494dec7f3
|
add validate_namespace test runner
|
2019-09-09 14:33:55 -07:00 |
|
Shuting Zhao
|
d92026f94a
|
add disallow_priviledgedprivelegesecalation test runner
|
2019-09-09 10:56:19 -07:00 |
|
Shuting Zhao
|
ae8264deae
|
Merge branch 'best_practice_policies' of https://github.com/nirmata/kyverno into best_practice_policies
# Conflicts:
# examples/best_practices/policy_validate_container_disallow_priviledgedprivelegesecalation.yaml
# examples/best_practices/policy_validate_container_security_context.yaml
# examples/best_practices/validate_container_security_context.yaml
|
2019-09-09 10:36:56 -07:00 |
|
Shivkumar Dudhani
|
e33998701d
|
Merge branch 'master' into best_practice_policies
|
2019-09-08 10:41:45 -07:00 |
|
shivkumar dudhani
|
59c1e83466
|
upate readme links and remove duplicate policies
|
2019-09-08 10:41:07 -07:00 |
|
Jim Bugwadia
|
10c1490817
|
Update README.md
update table
|
2019-09-07 10:12:20 -07:00 |
|
Shuting Zhao
|
b667c47587
|
update testrunner for examples/best_practices/policy_validate_container_security_context.yaml
|
2019-09-06 18:54:19 -07:00 |
|
Shivkumar Dudhani
|
3c2558f66b
|
Merge pull request #344 from nirmata/refactor_scenarios
move resources to separate folder
|
2019-09-06 17:50:22 -07:00 |
|
shivkumar dudhani
|
7bae501e7b
|
move resources to seperate folder
|
2019-09-06 17:49:51 -07:00 |
|
Shuting Zhao
|
bc087d7918
|
Merge branch 'master' of https://github.com/nirmata/kyverno into best_practice_policies
# Conflicts:
# examples/best_practices/validate_default_namespace.yaml
|
2019-09-06 17:04:44 -07:00 |
|
Shivkumar Dudhani
|
d83a8e9e5e
|
Merge pull request #342 from nirmata/329_defaultfailureaction_audit
defaultfailureaction as 'audit'
|
2019-09-06 17:03:02 -07:00 |
|
Shuting Zhao
|
a8e02dfb42
|
update examples/best_practices/validate_host_path.yaml
|
2019-09-06 17:02:47 -07:00 |
|
Shivkumar Dudhani
|
cff248f9a2
|
Merge pull request #341 from nirmata/275_best_practices
add policies
|
2019-09-06 17:02:29 -07:00 |
|
shivkumar dudhani
|
2669b0ae6b
|
set default ValidationFailureAction to 'audit'
|
2019-09-06 10:18:45 -07:00 |
|
shivkumar dudhani
|
ff60dc05fd
|
add policies
|
2019-09-06 10:03:24 -07:00 |
|
Shivkumar Dudhani
|
288332b6bf
|
Merge pull request #340 from nirmata/336_add_message
Update error message + anyPattern flow
|
2019-09-05 14:32:59 -07:00 |
|
shivkumar dudhani
|
f56603e4d4
|
update message to show resource path of failure for validation + print custom message on failure + anyPattern to return on first success validation + update scenarios for test runner
|
2019-09-05 12:44:38 -07:00 |
|
Shivkumar Dudhani
|
5786acc652
|
Merge pull request #338 from nirmata/cleanup_removeOldEngineFunctions
remove old function references and update tests
|
2019-09-05 09:43:57 -07:00 |
|
shivkumar dudhani
|
cf32510067
|
remove old function refereces and update tests
|
2019-09-05 09:37:57 -07:00 |
|
Shuting Zhao
|
6912114363
|
Merge commit '595dd1f18523845720b53a4b5d818782d85cb616' into best_practice_policies
|
2019-09-04 15:36:28 -07:00 |
|
shuting
|
595dd1f185
|
Merge pull request #335 from nirmata/332_handle_generatedResources
ignore creation of event and PV if Name is not assigned.
|
2019-09-04 15:33:18 -07:00 |
|
shivkumar dudhani
|
973abe6233
|
ignore creationg of event and PV if Name is not assgined.
|
2019-09-04 15:30:09 -07:00 |
|
shuting
|
a1c40b6d51
|
Merge pull request #334 from nirmata/refactor_webhookconfigGeneration
refactor webhook configuration
|
2019-09-04 14:18:39 -07:00 |
|