mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity
3254 commits 15 branches 540 tags 276 MiB
Commit graph

184 commits

Author SHA1 Message Date
RinkiyaKeDad
d1be681773 replacing pod security standard from default to baseline 
Signed-off-by: RinkiyaKeDad <arshsharma461@gmail.com>
 2021-06-08 13:02:02 +05:30
Nicolas Lamirault
62c4cd7e3d
Recommanded Kubernetes labels and custom labels (#1873) 
* Add: Recommanded Kubernetes labels

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: feature to add custom labels to resources metadata

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: manage labels with Kustomize

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: app label

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: app label for chart

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: make kustomize-crds

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: refactoring labels

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Fix: clean kustomize code

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Fix: typo

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: application version v1.3.6

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: version v1.3.6

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
 2021-06-01 11:54:33 -07:00
shuting
cd4d738667
Merge pull request #1877 from yashvardhan-kukreja/prometheus-integration-setup 
feat: Prometheus metrics integration
 2021-05-26 12:31:21 -07:00
Yashvardhan Kukreja
8eae8ec492 feat: added support for exposing the metrics via kyverno-svc service 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-05-24 08:06:40 +05:30
Shuting Zhao
4f79f44f9f tag v1.3.6 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-05-17 11:39:39 -07:00
Shuting Zhao
5dcb03e6f5 tag v1.3.6-rc5 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-05-13 12:44:34 -07:00
Shuting Zhao
edd33a6d09 tag v1.3.6-rc4 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-05-10 10:18:38 -07:00
Simon Metzger
a65a85e55c
allow only supplementalGroups greater 0 (#1901) 
Signed-off-by: Metzger, Simon <smnmtzgr@gmail.com>
 2021-05-10 10:14:08 -07:00
Shuting Zhao
55a987ed5e tag v1.3.6-rc3 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-05-07 19:03:43 -07:00
Shuting Zhao
dfaf675185 tag v1.3.6-rc2 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-05-07 12:15:57 -07:00
Nicolas Lamirault
9bdde7abea
Resources for initContainers (#1871) 
* Add: resources for initContainers

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Update: increase memory limit for init container

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Add: init container resources

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>

* Fix: kustomize CRD

Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
 2021-05-07 09:53:00 -07:00
Nicolas Lamirault
02f1faca0b
Add: Display which chart version is installed (#1875) 
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
 2021-05-04 10:59:55 -07:00
Shuting Zhao
7e575d0e19 tag v1.3.6-rc1 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-29 15:03:48 -07:00
Simon Metzger
6e76fd68f0
allow fsGroup values greater than zero (#1822) 
change the policy require-non-root-groups to allow fsGroup values greater than zero

Signed-off-by: Metzger, Simon <smnmtzgr@gmail.com>
 2021-04-21 12:12:26 -07:00
treydock
b5fd23588a
Fix Helm charts (#1828) 
* Fix Helm charts to render  correctly

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make Helm chart policies consistent

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-20 13:08:30 -07:00
Frank Jogeleit
56183cc73d
Add severity to pod security policies (#1797) 
Signed-off-by: Frank Jogeleit <fj@move-elevator.de>
 2021-04-16 17:41:30 -07:00
Shuting Zhao
4a4fdc54ee release v1.3.5 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-16 14:04:00 -07:00
Shuting Zhao
a4b639f754 tag v1.3.5-rc5 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-15 17:35:25 -07:00
Shuting Zhao
3f18b5f7df tag v1.3.5-rc3 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-14 13:12:12 -07:00
treydock
67973c2776
Add Helm tests to Github Actions (#1793) 
This reverts commit 2749280b6c.

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-13 10:39:27 -07:00
shuting
2749280b6c
Revert "Add Helm tests to Github Actions (#1790)" (#1792) 
This reverts commit 9c7f7019f3.
 2021-04-12 21:57:21 -07:00
treydock
9c7f7019f3
Add Helm tests to Github Actions (#1790) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-04-12 20:55:13 -07:00
shuting
9dab21619f
Match endpoint to the exact Kyverno Pod's IP (#1787) 
* update log message

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update printer column - validation failure action

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* match endpoint ip with the exact pod ip

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* - add tag "app.kubernetes.io/name"; - reduce throttling requests when deletes webhook configs

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* add [SelfSubjectAccessReview,*,*] to resource filters

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-12 20:29:51 -07:00
shuting
f3ca1d78f1
Fix log message (#1779) 
* update log message

Signed-off-by: Shuting Zhao <shutting06@gmail.com>

* update printer column - validation failure action

Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-08 12:10:30 -07:00
Shuting Zhao
6f41acde03 tag v1.3.5-rc3 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-06 11:13:56 -07:00
Vyankatesh Kudtarkar
3ab75095b7
remove permission (#1758) 
* remove permission

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

* remove duplicate resource

Signed-off-by: vyankatesh <vyankatesh@neualto.com>

Co-authored-by: vyankatesh <vyankatesh@neualto.com>
 2021-04-02 11:22:59 -07:00
Shuting Zhao
a1d9cdd14b tag v1.3.5-rc2 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-04-01 13:57:33 -07:00
treydock
91713ee566
Check webhooks are present during liveness (#1748) 
Fixes #1747

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-03-31 12:44:56 -07:00
Yuto Takahashi
e2cb30e752
Allow generatecontroller to handle Roles (#1739) 
* Allow generateoperator to handle Roles

Signed-off-by: Yuto Takahashi <ytaka23dev@gmail.com>

* Restore the releasable manifest

Signed-off-by: Yuto Takahashi <ytaka23dev@gmail.com>
 2021-03-29 22:48:41 -07:00
Shuting Zhao
0c860b7327 release v1.3.5-rc1 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-26 15:14:05 -07:00
Adam Kosmin
60653eb620
support envVars with sane default (#1715) 
Co-authored-by: windowsrefund <mtf8>
 2021-03-16 14:11:04 -07:00
Shuting Zhao
592394df02 release v1.3.4 2021-03-05 10:56:02 -08:00
Shuting Zhao
edbd7bf222 release v1.3.4-rc1 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-03-03 12:00:31 -08:00
Arsh Sharma
ccfe8c443c
fix: added details regarding match.resources (#1654) 
* fix: added details regarding match.resources

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* fix: made revisions

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* fix: removed if not statement

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
 2021-03-03 11:22:45 -08:00
Yashvardhan Kukreja
10c714d5ba
feat: [preconditions, conditions] added backwards-compatible support for logical operators (#1604) 
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
 2021-03-01 20:31:06 -08:00
Arsh Sharma
da8e449d3c
fix: removed validator (#1646) 
Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
 2021-02-26 11:27:21 -08:00
Arsh Sharma
a0d28f0b16
fix: list operators in deny conditions (#1641) 
* fix: list operators in deny conditions

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>

* fix: regenerated YAMLs

Signed-off-by: Arsh Sharma <arshsharma461@gmail.com>
 2021-02-25 19:13:35 -08:00
treydock
e3a8c5091c
Fix Helm chart notes to use template values (#1634) 
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-02-22 13:22:28 -08:00
treydock
48f0d90dd1
Allow some helm policies to be excluded (#1611) 
* Allow some helm policies to be excluded

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>

* Make Helm security policies opt-in when podSecurityStandard=custom

Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
 2021-02-18 11:50:35 -08:00
Shuting Zhao
f2b00a1f1e update chart link - icon 2021-02-16 14:42:19 -08:00
Shuting Zhao
f6192d08b0 release v1.3.3 2021-02-16 13:49:50 -08:00
Raj Babu Das
b04626a5f8
Adding default policies for restricted mode and adding notes to helm install (#1556) 
* Adding default policies for restricted mode, taking validationFailureAction from values.yaml and adding notes on helm install

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Adding emoji

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* Update NOTES.txt

* minor fix

Signed-off-by: Raj Das <mail.rajdas@gmail.com>

* adding to readme

Signed-off-by: Raj Das <mail.rajdas@gmail.com>
 2021-02-09 14:03:52 -08:00
Shuting Zhao
9429af277d update icon in chart.yaml 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-09 13:30:40 -08:00
Shuting Zhao
b9a64ea41d release v1.3.2 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-09 10:59:44 -08:00
Shuting Zhao
db1bfba3f8 release v1.3.2-rc3 2021-02-08 18:15:28 -08:00
Shuting Zhao
77a94fda6b add "watch" to cluster role kyverno:policycontroller 
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
 2021-02-08 17:35:35 -08:00
Shuting Zhao
7788ae3dba update chart version 2021-02-03 16:21:15 -08:00
Shuting Zhao
a00d9b1cc9 release v1.3.2-rc2 2021-02-03 14:19:46 -08:00
Jim Bugwadia
ba9d003774
update APICall docs (#1534) 
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
 2021-02-03 13:10:02 -08:00
Pooja Singh
32522e7827
namespace selector (#1532) 
* updated crd with namespace selector

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added logic for validate

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added condition in utils for namespace labels

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added function for extracting namespace label using lister

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added logic for generate

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added lister in generate

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* commented generate controller changes

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns lister

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label in apply.go

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label in generation.go

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label in mutation.go

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* added ns label for validation

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>

* using dynaminc informer

Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
 2021-02-03 13:09:42 -08:00