1434 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Jim Bugwadia	e0097c0fb7	use negation anchor	2019-11-12 16:04:14 -08:00
Jim Bugwadia	7c68e59a15	fix disallow_host_network_hostport policy	2019-11-12 16:04:14 -08:00
Shuting Zhao	799c417ae2	integrate with pv genreator	2019-11-12 16:04:00 -08:00
shivkumar dudhani	f271af95cc	use store to hold values and queue for keys	2019-11-12 16:01:09 -08:00
Shuting Zhao	778a246d28	Merge commit 'ccbb6e33a5599b8fbb9315f9a55e1ed1ef18bbb7' into 455_namespace_pv ... # Conflicts: # main.go # pkg/namespace/report.go # pkg/policy/report.go # pkg/policyviolation/clusterpv.go # pkg/webhooks/validation.go	2019-11-12 15:11:58 -08:00
Shuting Zhao	d294c1fa94	create namespaced pv on resource owner	2019-11-12 14:58:38 -08:00
shivkumar dudhani	ccbb6e33a5	introduce policy violation generator	2019-11-12 14:41:29 -08:00
Shuting Zhao	a67306f106	update crd	2019-11-12 13:32:50 -08:00
Shuting Zhao	4734dba10f	create namespace pv when validate policy fails	2019-11-12 13:32:30 -08:00
Shuting Zhao	14769936a2	rename policyviolation related package/function to clusterpolicyviolation	2019-11-12 11:22:06 -08:00
Shuting Zhao	1f2b71ace8	add namespace cluster policyviolation crd	2019-11-12 11:21:23 -08:00
Shuting Zhao	3dd9672a5d	handle error properly	2019-11-12 10:05:10 -08:00
Shuting Zhao	fb2cc2db9c	fix tests	2019-11-11 21:40:42 -08:00
Shuting Zhao	2a14c1f5dc	- add profiling; - fix CLI	2019-11-11 21:23:26 -08:00
Shuting Zhao	546a25d025	add missing file	2019-11-11 21:06:09 -08:00
Shuting Zhao	85d04f609c	remove overlay failure conditionNotPresent as it allows the tag not present	2019-11-11 21:03:34 -08:00
Jim Bugwadia	1ff9a8dd5a	update main page and mutation docs	2019-11-11 19:59:40 -08:00
Shuting Zhao	5a3ed62b13	Merge branch 'master' into 345_support_usergroup_info ... # Conflicts: # pkg/engine/validation_test.go # pkg/webhooks/annotations.go # pkg/webhooks/annotations_test.go # pkg/webhooks/mutation.go # pkg/webhooks/server.go # pkg/webhooks/validation.go	2019-11-11 19:19:08 -08:00
Shuting Zhao	d26029d3be	fix unit test	2019-11-11 19:08:46 -08:00
Shuting Zhao	565a9b0f8f	update crd	2019-11-11 18:52:39 -08:00
Shuting Zhao	6c8f4f90da	fix patches annotation	2019-11-11 18:52:26 -08:00
Jim Bugwadia	8348c5761c	fix tests	2019-11-11 18:51:21 -08:00
Jim Bugwadia	31d33c5de1	update categories and links	2019-11-11 18:21:16 -08:00
Jim Bugwadia	8ac71a885c	update sections	2019-11-11 18:10:34 -08:00
Jim Bugwadia	87be5ca4b8	update policies and test cases	2019-11-11 17:55:54 -08:00
Jim Bugwadia	3ffb0cfa39	add disallow_sysctl and move policies	2019-11-11 17:17:09 -08:00
Shuting Zhao	02fd1227be	reverse listResource interface	2019-11-11 16:10:55 -08:00
Shuting Zhao	586b197b00	user sharedInformer for rolebindings and clusterrolebindings	2019-11-11 15:43:13 -08:00
Shuting Zhao	03e85c2266	make getRoleRef a separate package	2019-11-11 14:52:09 -08:00
Shuting Zhao	4a80f70957	add unit test	2019-11-11 14:29:36 -08:00
Jim Bugwadia	05503e4fd1	update other policies	2019-11-11 14:09:07 -08:00
shivkumar dudhani	f788f0e526	introduce policy store	2019-11-11 11:10:25 -08:00
Shuting Zhao	5b0a6d62a4	add unit test	2019-11-11 09:56:53 -08:00
Jim Bugwadia	dd4d091c23	update restrict_automount_sa_token	2019-11-10 21:57:20 -08:00
Jim Bugwadia	5b2fd96131	update LimitNodePort	2019-11-10 21:34:22 -08:00
Jim Bugwadia	5e8b6c4183	update add_networkPolicy	2019-11-10 21:27:50 -08:00
Jim Bugwadia	244909ebb3	update require_probes	2019-11-10 21:18:17 -08:00
Jim Bugwadia	c1be682a93	update require_pod_requests_limits	2019-11-10 21:06:49 -08:00
Jim Bugwadia	f668113904	update add_ns_quota	2019-11-10 20:58:57 -08:00
Jim Bugwadia	1c5db668e0	Merge pull request #462 from nirmata/451_fix_disallow_host_net_port ... fix disallow_host_network_hostport policy	2019-11-10 20:20:34 -08:00
Jim Bugwadia	a6d5fb6e30	update restrict_image_registries	2019-11-10 18:13:01 -08:00
Jim Bugwadia	f31abbffab	update disallow_latest_tag	2019-11-10 17:54:38 -08:00
Jim Bugwadia	7f54e8e2e3	Merge branch '451_fix_disallow_host_net_port' into 452_make_sample_policy_rule_names_consistent ... # Conflicts: # samples/best_practices/disallow_host_network_hostport.yaml # test/scenarios/samples/best_practices/disallow_host_network_port.yaml	2019-11-10 17:35:43 -08:00
Jim Bugwadia	0fa95d71d0	use negation anchor	2019-11-10 16:12:47 -08:00
Jim Bugwadia	20736e5e81	update disallow_default_namespace and disallow_host_network_port and disallow_host_pid_ipc	2019-11-10 15:50:18 -08:00
shivkumar dudhani	f11a05a652	create event on webhook status update	2019-11-10 13:30:15 -08:00
Jim Bugwadia	170e2a5179	update disallow_docker_sock_mount and disallow_host_network_port	2019-11-10 12:53:48 -08:00
Jim Bugwadia	fd1a26db29	update DisallowBindMounts	2019-11-09 16:33:19 -08:00
Jim Bugwadia	fae8ac0325	update RequireReadOnlyRootFS	2019-11-09 16:18:33 -08:00
Jim Bugwadia	121b81a83b	update disallow new capabilities	2019-11-09 16:07:16 -08:00