mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-15 17:51:20 +00:00
Code Activity
3734 commits 15 branches 540 tags 276 MiB
Commit graph

388 commits

Author SHA1 Message Date
Mohan B E
f60deecdce
Feature/namespaced policy 280 (#1058) 
* namespaced policy crd and cache

* modified main.go

* removed kyverno

* implemented policy violation generator for namespaced policy on audit

* modified cache

* added validation for cluster resource types

* install.yaml

* install.yaml

* removed namespaces from crd and refactored code

* modified NamespacePolicy to Policy

* added ClusterRole aggregate for policies

* modified clusterrole
 2020-08-19 09:07:23 -07:00
Pooja Singh
5a68653749
Supporting annotations in match/exclude (#1045) 
* Supporting annotations in match/exclude filters

* updated readme

* small fix
 2020-08-17 17:12:27 -07:00
shuting
d6062fdd47
Add go fmt (#1055) 
* remove empty flag

* format code

* revert change in install.yaml
 2020-08-14 12:21:06 -07:00
Yuvraj
4ee523dccf
default exclude group role (#1052) 2020-08-13 14:30:25 -07:00
Michael Barrientos
d2ac5b829b
Replace CRD AnyValue fields with empty dict (#1047) 2020-08-13 11:57:35 -07:00
shuting
0794084b4d
1040 automate release (#1044) 
* add release in make

* update release in Makefile

* update README.md
 2020-08-12 07:54:45 -07:00
Shuting Zhao
41667038e0 tag 1.1.9 2020-08-10 17:20:48 -07:00
Yuvraj
73840e3c5f
configrable rules added (#1017) 
* configrable rules added

* fix exclude group logic from code

* flag added in yaml

* exclude username added

* exclude username added

* config interface implimented

* configure exclude username

* get role ref

* test case fixed

* panic fix

* move from interface to slice

* exclude added in mutate

* trim strings

* configmap changes added

* kustomize changes for configmap

* k8s resources added
 2020-08-07 17:09:24 -07:00
Mohan B E
a14828246d
Feature/api version 852 (#1028) 
* apiVersion support for generate

* added apiVersion to crds
 2020-08-07 09:47:33 +05:30
Yuvraj
9c0d54f35a
e2e workflow added (#1021) 
* e2e flow added

* add kustomize image change in ci
 2020-08-06 11:56:31 +05:30
Mohan B E
6e827f912f
Feature/e2e 575 (#1018) 
* added api templates

* E2E test for generate roles, rolebindings, clusterrole and clusterrolebindings

* table driven e2e tests

* table driven e2e tests and go fmt

* removed unwanted vars

* increased sleep time

* removed role generation clone

* increated sleep time

* added rolebinding clone and retry mechanism for get resources

* modified test for clone

* added namespace to role

* added namespace variable

* added git actions job

* changed build name

* removed docker login

* added role verbs

* removed github actions job and rbac file

* added clusterrole test with clone

* fixed travis issue
 2020-08-06 10:46:10 +05:30
shuting
39de46fe39
983 kustomize support (#1026) 
* prototype - strategic merge patch

* add end to end test

* add engine strategic merge patch support

* set webhook reinvocationPolicy to IfNeeded

* refactor engine mutate code

* support JMESPath in strategic merge patch

* implement patchesJson6902

* update doc

* resolve pr comments
 2020-08-05 09:11:23 -07:00
Shuting Zhao
71ff4b911d tag 1.1.8 2020-07-21 11:06:42 -07:00
Shuting Zhao
f39372cb66 tag v1.1.7 2020-07-15 13:05:54 -07:00
Shuting Zhao
06db774cdd tag v1.1.7-rc4 2020-07-14 20:59:45 -07:00
shuting
2c5c7494a5
tag 1.1.7-rc3 (#985) 2020-07-13 14:45:54 -07:00
Yuvraj
4535f43283
Added Synchronize flag in Generate Request (#980) 
* fix Synchronize flag issue
 2020-07-14 02:12:11 +05:30
Shuting Zhao
3b03531b97 add permission to get role / clusterRole 2020-07-10 20:04:52 -07:00
shuting
204c2b9d8c
tag 1.1.7-rc2 (#978) 2020-07-10 19:25:44 -07:00
Pooja Singh
59b2378274
reading kyverno svc from environment variable (#962) 
* reading kyverno svc from environment variable

* updated readme
 2020-07-04 19:35:31 -07:00
Shuting Zhao
2c4106e0b9 tag v1.1.7-rc1 2020-07-01 17:45:41 -07:00
Pooja Singh
ac5d69895a
removing hardcoded namespace from the code (#955) 
* removing hardcoded namespace from the code

* Added to helm chart

* removing hard-coded namespace and deployment name from config, generate, checker

* added namespace to configMap, service, serviceAccount

* updated installation documentation

passing `KYVERNO_NAMESPACE` while running in debug mode.

* Update installation.md

removing `kyverno` only namespace note
 2020-07-01 14:50:49 -07:00
NoSkillGirl
b589169b5e Added in-notin operator 2020-06-26 12:48:45 +05:30
NoSkillGirl
e8c4050d49 Added In and NotIn Operators 2020-06-26 12:48:12 +05:30
Yuvraj
01724d63cf
Synchronize data for generated resources (#933) 
* Generate request added fro update resource

* synchronize flag added

* documentation added for keeping resource synchronized

Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
 2020-06-23 07:19:43 +05:30
Yuvraj
5df422fd63 Added aggregated view clusterroles 2020-06-05 14:36:37 -07:00
Yuvraj
03c36d7df1 Added generated file 2020-06-05 13:51:22 -07:00
Yuvraj
4d9226351f replace crd with latest crd 2020-06-05 13:49:53 -07:00
Yuvraj
d96f3e6c89 remove duplicate crd changes 2020-06-05 13:42:53 -07:00
F1ko
53b324d5d6 add aggregated view clusterroles for default k8s roles (view, edit and admin) 2020-06-05 15:52:39 +02:00
shuting
1c5fc22aa0
Tag release 1.1.6 (#911) 
* tag v1.1.6-rc5

* tag 1.1.6
 2020-06-04 17:13:16 -07:00
shuting
eee25a134d
tag v1.1.6-rc5 (#908) 2020-06-04 15:46:17 -07:00
Shuting Zhao
2550f4c86d - enable profiling; - update install.yaml 2020-06-02 16:50:51 -07:00
shuting
d86b8ea2ce
update tag v1.1.6-rc2 (#887) 2020-05-28 12:12:12 -07:00
Jim Bugwadia
ffb2e6d3c2
Bugfix/fix install repo (#885) 
* - support wildcards for namespaces

* do not annotate resource, unless policy is an autogen policy

* close HTTP body

* improve messages

* fix repo

* fix init container image
 2020-05-27 22:34:53 -07:00
Yuvraj
74db840b25
Added readiness and liveness prob (#874) 
* Added readiness and liveness prob

* typo fix

* port number fixed

* fixed the image name
 2020-05-26 18:03:32 -07:00
Yuvraj
3204b16559 resource limit added to kyverno defination and kyvrno chart 
Signed-off-by: Yuvraj <yuvraj.yad001@gmail.com>
 2020-05-21 12:18:05 -07:00
Yuvraj
1c1f622d40
Merge branch 'master' into fix-857 2020-05-21 10:57:13 -07:00
Yuvraj
30c2e879e2
update cpu request limit and remove cpu limit 2020-05-21 10:56:35 -07:00
Shuting Zhao
bc0c733fa2 remove roles 2020-05-21 10:22:19 -07:00
Shuting Zhao
2dda3e2a42 pr fix 2020-05-21 08:29:35 -07:00
Shuting Zhao
ecbc14d559 add clusterrole "admin" "edit" "view" to Kyverno 2020-05-20 13:36:00 -07:00
Yuvraj
7f2be174fb
Typo fixed 2020-05-20 01:41:27 -07:00
Yuvraj
b9da2ab96e
Revert kyverno image version 2020-05-20 01:41:00 -07:00
Yuvraj
6cf630d3f4 Added cpu & memory resource requests and limits 2020-05-20 00:24:14 -07:00
Shuting Zhao
852f2bec2d Fix CRD definition 2020-05-18 17:10:35 -07:00
Shuting Zhao
ad4f06f22d Merge branch 'master' into 744_deny_requests 
# Conflicts:
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
 2020-05-18 12:32:42 -07:00
Shuting Zhao
ddf89b4803 - fix 811; - suppress log 2020-05-15 13:11:28 -07:00
shravan
f08f7e22c7 744 supporting Equals and NotEquals as operater types 2020-05-06 22:43:17 +05:30
shravan
c6dd8443ef 744 added validation for operator property in condition 2020-05-06 20:46:34 +05:30
shravan
6b1498b770 744 fixing policy validation and removing allRequests field 2020-05-06 19:46:32 +05:30
shravan
f839f27b41 Merge branch 'master' into 744_deny_requests 2020-04-27 15:12:35 +05:30
shravan
3b96d1bfc2 744 save commit 2020-04-27 11:47:33 +05:30
shravan
93fa54bf79 744 deny all requests 2020-04-18 18:26:09 +05:30
shravan
83ecd95945 744 added all request values to context 2020-04-15 21:17:14 +05:30
shravan
4cb44bce09 744 save commit 2020-04-14 19:06:48 +05:30
shravan
61918d9826 808_prototype 2020-04-12 18:58:55 +05:30
shravan
2451756651 744 tested prototype 2020-04-10 23:24:54 +05:30
shravan
77910a863e 789 tested prototype 2020-04-02 22:18:26 +05:30
Shuting Zhao
e079256742 tag v1.1.5 2020-04-01 20:48:32 -07:00
Shuting Zhao
0c87269a79 revert tag to a stable release 2020-04-01 13:03:21 -07:00
Shuting Zhao
77d9634604 tag 1.1.5 2020-04-01 11:45:30 -07:00
Shuting Zhao
5f9093a6aa update clusterrole kyverno:webhook to approve csr for 1.18 cluster 2020-04-01 10:52:17 -07:00
shuting
67d2bc224b
- update tag v1.1.4; - add update for deployment 
allow update operation for kyverno deployment
 2020-04-01 00:15:14 -07:00
shravan
5aa74c2b7a 755 exclude should not have any mandatory fields, currently the resource field in exclude is mandatory - which was made optional in this commit 2020-03-20 16:41:23 +05:30
Shuting Zhao
8480276f23 tag v1.1.4-rc1 2020-03-09 11:15:03 -07:00
Shuting Zhao
023ac5ecf5 rename to kyverno:policyviolations 2020-03-04 16:04:02 -08:00
Shuting Zhao
879826a80d Add clusterrole for policyviolation 2020-03-04 15:25:56 -08:00
shravan
0c817e8972 721 fixes 2020-02-23 19:08:24 +05:30
Shuting Zhao
07cb81f8e7 Merge branch 'master' of https://github.com/nirmata/kyverno 2020-02-21 18:11:14 -08:00
Shuting Zhao
24a7563b2b tag 1.1.3 2020-02-21 18:10:17 -08:00
shivkumar dudhani
3beac273a5 add missing rbac resoruces 2020-02-20 15:21:07 -08:00
shuting
60b3af9d58
Merge pull request #716 from nirmata/fix_apiVersion 
upgrade apiVersion for ClusterRole,ClusterRoleBindings
 2020-02-20 11:23:06 -08:00
shivkumar dudhani
d624c5eaa1 upgrade apiVersion for ClusterRole,ClusterRoleBindings 2020-02-20 11:08:44 -08:00
Shuting Zhao
71605ad70c tag v1.1.3-rc1 2020-02-19 19:30:17 -08:00
shuting
3224585b78
Merge pull request #694 from nirmata/688_addClusterRole 
kyverno ClusterRole
 2020-02-18 17:35:00 -08:00
shivkumar dudhani
c402b5602c CR fixes 2020-02-18 17:10:15 -08:00
Shivkumar Dudhani
2f1c8c688c
add type in openapi schema (#629) 2020-02-18 14:55:12 -08:00
shivkumar dudhani
6e57747cb5 update apiVersion for clusterRole 2020-02-11 13:46:00 -08:00
shivkumar dudhani
38b4f97585 use kyverno ClusterRole 2020-02-11 13:43:36 -08:00
shravan
d38bf5c16e 658 prototype changes without policy lookup update 2020-02-05 15:55:37 +05:30
Shuting Zhao
c365bb2b3b tag 1.1.2 2020-01-16 15:42:52 -08:00
Shuting Zhao
0431fa0ae3 tag v1.1.1 2020-01-14 16:29:26 -08:00
shuting
bd538e51bc
Merge pull request #613 from nirmata/update_markdown 
move definitions/rolebindings.yaml to installation.md
 2020-01-13 10:42:26 -08:00
Shuting Zhao
54275bdc01 tag v1.1.0 2020-01-10 18:52:11 -08:00
shuting
0f398e631d
Merge pull request #599 from nirmata/542_feature 
flag to use FQDN as CommonName in CSR
 2020-01-10 18:38:18 -08:00
Shuting Zhao
eb0390d0ed remove managedResource 2020-01-10 13:34:45 -08:00
Shuting Zhao
c4eb721b03 move definitions/rolebindings.yaml to installatino.md 2020-01-10 12:39:26 -08:00
shivkumar dudhani
7b38676505 remove nonsupported flags from comments 2020-01-09 09:52:09 -08:00
Shivkumar Dudhani
3cf9141f4d
593 feature (#594) 
* initial commit

* background policy validation

* correct message

* skip non-background policy process for add/update

* add Generate Request CR

* generate Request Generator Initial

* test generate request CR generation

* initial commit gr generator

* generate controller initial framework

* add crd for generate request

* gr cleanup controller initial commit

* cleanup controller initial

* generate mid-commit

* generate rule processing

* create PV on generate error

* embed resource type

* testing phase 1- generate resources with variable substitution

* fix tests

* comment broken test #586

* add printer column for state

* return if existing resource for clone

* set resync time to 2 mins & remove resource version check in update handler for gr

* generate events for reporting

* fix logs

* initial commit

* fix trailing quote in patch

* remove comments

* initial condition (equal & notequal)

* initial support for conditions

* initial support fo conditions in generate

* support precondition checks

* cleanup

* re-evaluate GR on namespace update using dynamic informers

* add status for generated resources

* display loaded variable SA

* support delete cleanup of generate request main resources

* fix log

* remove namespace from SA username

* support multiple variables per statement for scalar values

* fix fail variables

* add check for userInfo

* validation checks for conditions

* update policy

* refactor logs

* code review

* add openapispec for clusterpolicy preconditions

* Update documentation

* CR fixes

* documentation

* CR fixes

* update variable

* fix logs

* update policy

* pre-defined variables (serviceAccountName & serviceAccountNamespace)

* update test
 2020-01-07 15:13:57 -08:00
Shivkumar Dudhani
ffd2179b03
538 (#587) 
* initial commit

* background policy validation

* correct message

* skip non-background policy process for add/update

* add Generate Request CR

* generate Request Generator Initial

* test generate request CR generation

* initial commit gr generator

* generate controller initial framework

* add crd for generate request

* gr cleanup controller initial commit

* cleanup controller initial

* generate mid-commit

* generate rule processing

* create PV on generate error

* embed resource type

* testing phase 1- generate resources with variable substitution

* fix tests

* comment broken test #586

* add printer column for state

* return if existing resource for clone

* set resync time to 2 mins & remove resource version check in update handler for gr

* generate events for reporting

* fix logs

* cleanup

* CR fixes

* fix logs
 2020-01-07 10:33:28 -08:00
Shivkumar Dudhani
337e0f7d1d
update image tag to latest (#556) 2019-12-13 11:22:22 -08:00
Shuting Zhao
7b9c8d763a Merge commit '03ee0486df57eca9c3a484a1e94580b955f8c026' into 531_crd_permission 2019-12-12 17:47:29 -08:00
Shuting Zhao
bc19f408bd add rolebinding manifest for a ns admin 2019-12-12 17:46:35 -08:00
Shuting Zhao
782916b7e8 add clusterrole to access policyviolation 2019-12-12 17:45:02 -08:00
shivkumar dudhani
10fc1b47ba Merge branch 'master' into v1.1.0 2019-12-12 16:54:42 -08:00
Shuting Zhao
81a0cc4f45 add age column to pv printer 2019-12-12 15:19:48 -08:00
Shuting Zhao
a107ad7ac8 rename namespacedpolicyviolation: update codegen 2019-12-11 16:07:39 -08:00
Shuting Zhao
c3b7de6f16 tag v1.0.0 2019-12-04 17:10:00 -08:00
Shivkumar Dudhani
59f864c5d7
474 feature (#503) 
* add printer columns

* add shortNames for CRD
 2019-11-25 12:36:47 -08:00
shivkumar dudhani
89d0cc8799 Merge branch 'v1.1.0' into 504_bug 2019-11-19 10:12:09 -08:00
Shivkumar Dudhani
61b202c64a
420 init container (#501) 
* init container to cleanup stale webhook configurations if any.

* remove test code

* use internal pkg for os signals

* move webhook cleanup before http.server shutown.

* update make file and remove init

* update CI script
 2019-11-18 11:41:37 -08:00
shivkumar dudhani
9a24a27368 CR fixes 2019-11-15 16:10:12 -08:00
Shuting Zhao
2153c284b5 update image tag to latest 2019-11-13 18:48:03 -08:00
Shuting Zhao
6b227a2aa9 update crds to V1 2019-11-13 13:41:28 -08:00
Shuting Zhao
fc35a52ad8 Merge branch 'master' into 455_namespace_pv 
# Conflicts:
#	definitions/install_debug.yaml
#	main.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
 2019-11-13 11:46:46 -08:00
Shuting Zhao
3706822df7 update crd 2019-11-12 19:02:31 -08:00
Shuting Zhao
0badf761a8 add namespace cluster policyviolation crd 2019-11-12 19:02:31 -08:00
Shuting Zhao
565a9b0f8f update crd 2019-11-11 18:52:39 -08:00
shivkumar dudhani
9803028abc remove unused yamls 2019-11-06 15:40:19 -08:00
Shuting Zhao
fb6151c6d0 release 0.11.0 2019-10-30 18:05:08 -07:00
shivkumar dudhani
ba94577d40 upates 2019-10-29 11:51:30 -07:00
shivkumar dudhani
dfbcd6b2d7 merge with master 2019-10-29 11:30:44 -07:00
shuting
fd90b25755
Revert "261 dynamic config" 2019-10-28 18:37:41 -07:00
shivkumar dudhani
4b19dd0715 Merge branch '261_dynamic_config' of github.com:nirmata/kyverno into 261_dynamic_config 2019-10-28 15:24:13 -05:00
shivkumar dudhani
a1d7f984db remove comments 2019-10-28 15:23:52 -05:00
Shivkumar Dudhani
158a499feb
Merge branch 'master' into 261_dynamic_config 2019-10-28 15:06:37 -05:00
shivkumar dudhani
1528b7f333 add configMap to install.yaml 2019-10-28 15:00:20 -05:00
Shuting Zhao
da31a2c6aa update tag to latest 2019-10-28 12:15:39 -07:00
Shuting Zhao
a7b8041feb retag 0.10.0 2019-10-28 12:04:16 -07:00
Shuting Zhao
8047ed68d3 remove required mark for managedresource "kind" 2019-10-28 11:44:48 -07:00
Shivkumar Dudhani
22e7ab1c49
Merge branch 'master' into 261_dynamic_config 2019-10-25 19:17:15 -05:00
Shuting Zhao
50daf03743 clean up definitions folder 2019-10-25 13:53:16 -07:00
Shuting Zhao
2cc17985cd release 0.10.0 2019-10-24 18:17:29 -07:00
Shuting Zhao
c603f206b4 Revert "release 0.11.0" 
This reverts commit ca23f7470b.
 2019-10-24 18:16:31 -07:00
Shuting Zhao
ca23f7470b release 0.11.0 2019-10-24 17:58:47 -07:00
Shuting Zhao
3a3efe00f1 - rename to managedResource; - refact code structure 2019-10-24 15:50:11 -07:00
Shuting Zhao
6e69c8b69b cleanup pv with dependant when blocked admission request pass 2019-10-23 23:18:58 -07:00
shivkumar dudhani
0bb3d74498 add env var 2019-10-18 17:49:30 -07:00
shivkumar dudhani
64eab3d1d6 initial commit 2019-10-18 17:38:46 -07:00
shivkumar dudhani
e66ed52b34 update apiVersion for deployment 2019-10-14 15:24:59 -07:00
shivkumar dudhani
2669b0ae6b set default ValidationFailureAction to 'audit' 2019-09-06 10:18:45 -07:00
Shuting Zhao
4a94e0dbbd tag latest image 2019-09-04 10:34:11 -07:00
Shuting Zhao
2139225ce5 update image tag for v0.9.1 2019-09-04 10:32:33 -07:00
shivkumar dudhani
fa53519e2a change CRD Name to ClusterPolicy & ClusterPolicyViolations 2019-09-03 14:51:51 -07:00
shivkumar dudhani
0c2dd0120a correct install.yaml 2019-08-22 14:22:23 -07:00
shivkumar dudhani
dc72368e86 fix indentations 2019-08-22 14:12:30 -07:00
Shuting Zhao
053202fc84 update install.yaml 2019-08-22 12:48:27 -07:00
shuting
535c855897
update image tag to latest 2019-08-22 10:51:05 -07:00
shuting
fc0949763a
update image tag v0.8.0 for release 2019-08-22 10:49:11 -07:00
Shuting Zhao
124b105736 add anyPattern in crd definition 2019-08-20 18:01:43 -07:00
Shuting Zhao
a83e5c1d05 Merge commit '2192703df1bb26cb8b30a1aece6f9afeed09b214' into 254_dynamic_webhook_configurations 
# Conflicts:
#	pkg/engine/generation.go
#	pkg/engine/overlay.go
#	pkg/engine/utils.go
#	pkg/engine/utils_test.go
#	pkg/gencontroller/controller.go
#	pkg/gencontroller/generation.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/server.go
 2019-08-19 16:44:38 -07:00
shivkumar dudhani
bbf30a9ec0 update crd 2019-08-19 11:54:25 -07:00
shivkumar dudhani
24c9ad0926 update openapi spec 2019-08-17 09:59:13 -07:00
Shuting Zhao
a110efb96c Merge branch 'policyViolation' into 254_dynamic_webhook_configurations 
# Conflicts:
#	main.go
#	pkg/annotations/annotations.go
#	pkg/annotations/controller.go
#	pkg/controller/controller.go
#	pkg/controller/controller_test.go
#	pkg/engine/engine.go
#	pkg/engine/generation.go
#	pkg/engine/mutation.go
#	pkg/engine/validation.go
#	pkg/event/controller.go
#	pkg/webhooks/mutation.go
#	pkg/webhooks/policyvalidation.go
#	pkg/webhooks/report.go
#	pkg/webhooks/server.go
#	pkg/webhooks/validation.go
 2019-08-14 19:00:37 -07:00
shivkumar dudhani
9af6bf9003 update testing v1 2019-08-12 10:02:07 -07:00
Shuting Zhao
05f26335f7 structure code to be reusable 2019-08-08 15:10:10 -07:00
shivkumar dudhani
9ec85e5f74 update crd 2019-08-08 02:39:38 -07:00
shivkumar dudhani
3dda879e51 policyviolation, policy controller reconciliation 2019-08-07 16:14:33 -07:00
Shuting Zhao
a4217de1a2 expose webhook timeout configuration 2019-08-07 12:32:44 -07:00
Shuting Zhao
70f5592933 check in install_profiling as separate yaml 2019-08-02 11:41:36 -07:00
Shuting Zhao
aad47b46ec Merge commit '2200f9c7840bc71c7e7748a3168f59b67fc66227' into 120_policy_performance 2019-08-02 11:23:56 -07:00
Shuting Zhao
eec1939b17 update install.yaml to mount profiling stats 2019-08-02 11:18:59 -07:00
shivkumar dudhani
b7a1bee496 update arguments & cleanup print 2019-08-01 14:21:59 -07:00
shuting
4d684fca51
Merge pull request #249 from nirmata/filter_resources 
Filter resources
 2019-07-31 18:04:44 -07:00
shivkumar dudhani
19e50272b6 update arguments to install template 2019-07-31 17:42:30 -07:00
Shuting Zhao
256240dc46 Merge commit 'c1916a8bfc5b35499638428fbcda12ca42babdc3' into 196_anchor_selection_on_peer 2019-07-26 13:47:23 -07:00
shivkumar dudhani
7b942ec235 update CRD 2019-07-25 14:38:38 -04:00
shivkumar dudhani
94a6f1a71a match % exclude resources 2019-07-23 23:34:03 -04:00
Shuting Zhao
7d2abc5df3 Merge branch 'master' into 196_anchor_selection_on_peer 2019-07-23 17:55:24 -07:00
Shuting Zhao
6d49a728a1 - update install_debug.yaml - add debug log 2019-07-23 17:54:31 -07:00
shivkumar dudhani
b839d4f134 change flag field 2019-07-23 18:29:44 -04:00
shivkumar dudhani
15918ec0d8 rebase with master 2019-07-19 20:39:31 -07:00
shivkumar dudhani
3cb978c16f clean up + fix bugs 2019-07-19 20:30:55 -07:00
shivkumar dudhani
f9b5ac9a27 flag, violations 2019-07-18 10:22:20 -07:00
shivkumar dudhani
11da52c329 add mode(blockChanges,reportViolation) CRD spec 2019-07-15 15:30:28 -07:00
shivkumar dudhani
7bb7971c1d update crd spec for namespace attrib 2019-07-01 15:21:50 -07:00
Shuting Zhao
da5e4cf6eb rename kyverno-deployment to kyverno 2019-06-27 11:38:34 -07:00
shivdudhani
39a17911c3 code review corrections 2019-06-19 14:05:23 -07:00
shuting
044ca7a408 - addd cleanup script - remove imagepullpolicy in install.yaml 2019-06-12 18:23:16 -07:00
shuting
1013a8a637 Allow user to run Kyverno in debug mode 2019-06-10 18:10:51 -07:00
shivdudhani
ecca97b2a0 update namespace trigger + update documentation 2019-06-03 16:02:34 -07:00
shivdudhani
b59ab9a84a update from to clone for copying existing resource 2019-05-31 18:45:23 -07:00
shivdudhani
183b17828e support generation of any resource 2019-05-31 17:59:36 -07:00
Jim Bugwadia
e91cd9341b - add Makefile 
- add Dockerfile
- update install.yaml
 2019-05-22 21:41:24 -07:00
shivdudhani
3857c6b9a5 remove enum conditions in crd for kinds 2019-05-22 12:01:33 -07:00
shivdudhani
02d17f7d84 rebase with release 1.0 2019-05-22 10:43:29 -07:00
shuting
09bfdc6ba3 - Change kube-policy to kyverno in install.yaml - Install in namespace kyverno 2019-05-21 18:36:24 -07:00
shivdudhani
31ce087504 support list of kind in resource, update the CRD openapischema & adapt the test and examples for the change 2019-05-21 15:43:43 -07:00
shuting
a61a7c9c31 update install.yaml for generate 2019-05-21 14:37:54 -07:00
Maxim Goncharenko
ee6630333e Updated install.yaml due to the policy-v2 specifications 2019-05-13 16:08:02 +03:00
belyshevdenis
4912f20885 NK-47: Implemented webhook deregistration. 
TLS pair initialization functionality moved to init.go.
Separated server and mutation webhook objects, implemented registration of webhook with the creation of corresponding object.
Added comments for webhook configuration definitions, changed name of configuration for debug.
 2019-03-22 22:11:55 +02:00
belyshevdenis
3302bdd619 NK-44: Secret is now in the separate yaml 2019-03-22 17:56:29 +02:00
belyshevdenis
e7af6c0e9a NK-44: Nodes are able now to pull private dockerhub images 2019-03-22 16:19:34 +02:00
belyshevdenis
3c3befe8ca NK-31: Changed DaemonSet to Deployment for kube-policy image 2019-03-21 18:10:26 +02:00
belyshevdenis
b160fabcba NK-31: Put constants in separate file. Updated install.yaml definition to create Service and DaemonSet. Fixed bug with webhook registration. 2019-03-21 18:10:26 +02:00
belyshevdenis
89b211d1f9 NK-31: Implemented webhook registration logic. 2019-03-19 21:32:31 +02:00
belyshevdenis
c126da313c NK-14: Prepared repo to publishing. 
Updated README.md, crd dir renamed to definitions, removed some test yamls.
 2019-03-18 18:59:30 +02:00