Jim Bugwadia
07be2d9d72
lazy evaluate vars in conditions ( #7238 )
...
* lazy evaluate vars in conditions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove unnecessary conversion
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* Update test/conformance/kuttl/validate/clusterpolicy/standard/variables/lazyload/conditions/03-manifests.yaml
Signed-off-by: shuting <shutting06@gmail.com>
* Update test/conformance/kuttl/validate/clusterpolicy/standard/variables/lazyload/README.md
Signed-off-by: shuting <shutting06@gmail.com>
* added error check in test
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: shuting <shutting06@gmail.com>
Co-authored-by: shuting <shutting06@gmail.com>
Co-authored-by: kyverno-bot <104836976+kyverno-bot@users.noreply.github.com>
2023-05-20 21:06:54 +00:00
Jim Bugwadia
3af6ba90ac
handle Deny rules where conditions eval to true ( #7204 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-05-16 06:56:16 +00:00
Jim Bugwadia
f287e0a220
Conditions message ( #7113 )
...
* add message to conditions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* extend tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-05-08 15:34:23 +08:00
Charles-Edouard Brétéché
544fe04508
refactor: introduce jmespath interface ( #6882 )
...
* refactor: introduce jmespath interface
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-04-13 11:29:40 +00:00
Charles-Edouard Brétéché
15cf69f737
refactor: improve engine logger management ( #6280 )
...
* refactor: improve engine logger management
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* logger
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-02-09 15:15:51 +00:00
cleverhu
62cc95e721
fix AllNotIn operator ( #5636 )
...
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Signed-off-by: cleverhu <shouping.hu@daocloud.io>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-12-13 09:52:16 +00:00
yinka
688b4fb8e3
add package logger in files ( #4766 )
...
* add package logger in files
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* add package logger to initContainer and other files
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
* helm docs
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* helm default values
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
* release notes
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Signed-off-by: damilola olayinka <holayinkajr@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-10-02 19:45:03 +00:00
Charles-Edouard Brétéché
3d554ce53b
refactor: engine context ( #3563 )
...
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2022-04-09 11:52:50 +00:00
silenceper
d97258654f
fix wildcards in value arrays ( #3486 )
...
Signed-off-by: silenceper <silenceper@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
2022-04-01 10:42:07 +00:00
Charles-Edouard Brétéché
90d0badda4
fix: CRD generation ( #3334 )
...
Signed-off-by: Charles-Edouard Brétéché <charled.breteche@gmail.com>
2022-03-06 11:07:51 -08:00
Sambhav Kothari
a1daf167e7
Fix parsing of resources in preconditions ( #3108 )
...
Signed-off-by: Sambhav Kothari <sambhavs.email@gmail.com>
2022-01-31 08:18:31 -08:00
Anushka Mittal
3089edafa4
Extend new operators ( #2788 )
...
* extending new operators
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* Changes in file names
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* tests added
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* removed print statements
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* Changes to reduce code redundancy
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* Minor corrections in anyin and allin
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* added correction for anynotin and allnotin
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
2022-01-04 17:37:00 +00:00
Abhinav Sinha
2cd988a153
Added validation for Condition Operators ( #2864 )
...
* Added validation for Condition Operators
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* Updated description of `Condition.Operator` with all current valid condition operators`
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
* Added `ConditionOperators` map and updated existing `ConditionOperator` type references
Signed-off-by: Abhinav Sinha <zeborg3@gmail.com>
2021-12-28 15:12:31 +00:00
Naman Lakhwani
898520b7cf
add semver_compare JMESPath function ( #2846 )
...
* add semver_compare JMESPath function
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* adding tests for semver_compare
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* enabling version compaision via regular operators
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* adding tests for version compaision via regular operators
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
* removing unnecessary switch cases
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2021-12-21 08:12:35 -08:00
Anushka Mittal
94395ac243
Wildcard values ( #2692 )
...
* wildcard-support
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* Added unit tests
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* improvements in anyin and allin
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
2021-11-15 15:02:46 +01:00
Anushka Mittal
497514fd94
Fixes in new operators ( #2704 )
...
* fixes in operators to in many-to-one comparison
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* corrected allnotin
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* correction for duplicates
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
2021-11-12 11:15:16 +01:00
Jose Armesto
831a9826d1
Restructure project to follow standards ( #2632 )
...
Signed-off-by: Jose Armesto <github@armesto.net>
2021-10-29 18:13:20 +02:00
Marcus Noble
373420aa6d
Fix go vet errors ( #2637 )
...
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-29 14:09:11 +02:00
Marcus Noble
604c0408c6
Refactored operator tests to use test cases ( #2620 )
...
Identified several situations where operators didn't return the expected result (mainly around different types) so fixed those to make all tests cases pass.
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-29 10:54:51 +02:00
Anushka Mittal
08a3087100
New operators ( #2543 )
...
* added anyin operator
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* allin, anynotin, allnotin added
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* added operator handler info
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* fixes typos and variable names
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* reusing code from in.go in new operators
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* Added more test cases for new operators
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* updated openapiv3schema
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* matching logic
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* added deprecated tag for In and NotIn
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
2021-10-26 17:29:42 -07:00
Marcus Noble
913bbd567a
Handle durations with standard comparison operators ( #2569 )
...
* Handle durations with standard comparison operators
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
* Fix error strings
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
* Added CLI tests for duration operations
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
* Added tests with different units
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-22 12:41:25 -07:00
Marcus Noble
509f561d67
Added support for comparing resource quantities
...
Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
2021-10-19 15:22:26 +01:00
Bricktop
d62234d776
Fix remaining static check findings ( #2541 )
...
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
2021-10-13 16:00:41 -07:00
Bricktop
23864d89c8
Ensure make invocations pass linter ( #2518 )
...
Signed-off-by: Marcel Mueller <marcel.mueller1@rwth-aachen.de>
2021-10-11 14:43:09 -07:00
Sachin
e16d773957
Remove unused function ( #2517 )
2021-10-11 12:46:28 -07:00
treydock
8204028009
Add DurationOperator to handle duration comparison operations ( #2214 )
...
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2021-07-30 13:11:52 -07:00
Max Goncharenko
903963c26d
add special variable substitution logic for preconditions ( #1930 )
...
* add special variable substitution logic for preconditions
Signed-off-by: Max Goncharenko <kacejot@fex.net>
* handle NotFoundVariable error in proper way
Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
* remove excess log; fix grammar
Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
* removed isPrecondition flag; added test case for empty deny string; fixed related issue
Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
* fix test case
Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
* fix go lint
Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
* fix tests
Signed-off-by: Maxim Goncharenko <goncharenko.maxim@apriorit.com>
2021-07-28 09:54:50 -07:00
Vineeth Reddy
eeb4e4ff0f
turn preconditions error to info log ( #1926 )
...
* turn preconditions error to info log
Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
* minor change
Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
* further changes
Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
* resolve conflicts
Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
* add precondition flag
Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
* NotFoundError -> Info
Signed-off-by: vineethvanga18 <reddy.8@iitj.ac.in>
2021-07-07 17:37:44 +05:30
Joshua Snider
6699bfab8c
Fix tests
...
Signed-off-by: Joshua Snider <jsnider@mtu.edu>
2021-03-16 15:00:42 -04:00
Arsh Sharma
1dfcef1cc8
fix: changed logic for In and NotIn for sets ( #1704 )
...
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
2021-03-15 12:59:24 -07:00
Arsh Sharma
86879bd267
feat(operators): supporting subset checking ( #1613 )
...
* fix(operators): supporting subset checking
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* fix(operators): removed print statement
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* test(operators): added test file for in
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* fix(operators): fixed switching
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* tests(operators): completed tests for In and NotIn
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* chore(operators): code cleanup
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* chore(operators): added comments for tests
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* fix(operators): changed logic based on new definitions
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
* test: updated NotIn tests
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
2021-02-26 10:53:54 -08:00
Yashvardhan Kukreja
6b3ab3fe23
added: generic NumericOperator to handle numeric operations for kyverno policies ( #1536 )
...
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-02-05 19:49:23 -08:00
Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
shivkumar dudhani
d327309d72
refactor logging
2020-03-17 16:25:34 -07:00
shivkumar dudhani
1b1ab78f77
logs & access
2020-03-17 11:05:20 -07:00
Shivkumar Dudhani
1171ac691b
cleanup phase 1 ( #653 )
2020-01-24 09:37:12 -08:00
Shivkumar Dudhani
3cf9141f4d
593 feature ( #594 )
...
* initial commit
* background policy validation
* correct message
* skip non-background policy process for add/update
* add Generate Request CR
* generate Request Generator Initial
* test generate request CR generation
* initial commit gr generator
* generate controller initial framework
* add crd for generate request
* gr cleanup controller initial commit
* cleanup controller initial
* generate mid-commit
* generate rule processing
* create PV on generate error
* embed resource type
* testing phase 1- generate resources with variable substitution
* fix tests
* comment broken test #586
* add printer column for state
* return if existing resource for clone
* set resync time to 2 mins & remove resource version check in update handler for gr
* generate events for reporting
* fix logs
* initial commit
* fix trailing quote in patch
* remove comments
* initial condition (equal & notequal)
* initial support for conditions
* initial support fo conditions in generate
* support precondition checks
* cleanup
* re-evaluate GR on namespace update using dynamic informers
* add status for generated resources
* display loaded variable SA
* support delete cleanup of generate request main resources
* fix log
* remove namespace from SA username
* support multiple variables per statement for scalar values
* fix fail variables
* add check for userInfo
* validation checks for conditions
* update policy
* refactor logs
* code review
* add openapispec for clusterpolicy preconditions
* Update documentation
* CR fixes
* documentation
* CR fixes
* update variable
* fix logs
* update policy
* pre-defined variables (serviceAccountName & serviceAccountNamespace)
* update test
2020-01-07 15:13:57 -08:00
