Thoro
e80d18e692
Add function label_match, to use matchLabel in JMESPath, usage: label_match(labels_from_network_policy, labels_from pod) bool, Remove validation for JMESPath ( #1862 )
...
Signed-off-by: Thomas Rosenstein <thomas@thoro.at>
2021-05-04 09:28:30 -07:00
shuting
618a69961e
Disable auto-gen when a rule has mixed of kinds: pod & pod controllers ( #1847 )
...
* disable auto-gen when a rule has mixed of kinds: pod & pod controllers
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* Bugfix : Make match.resources.kinds required (#1843 )
* Fix Dev setup
* make kind required in MatchResources
* add test cases
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
* address PR comments
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* update background canAutoGen unit tests
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
Co-authored-by: Vyankatesh Kudtarkar <vyankateshkd@gmail.com>
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
2021-04-29 14:59:37 -07:00
Vyankatesh Kudtarkar
34af7a930c
Bugfix : Make match.resources.kinds required ( #1852 )
...
* Fix Dev setup
* Bugfix : Make match.resources.kinds required
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
2021-04-29 11:14:55 -07:00
Vyankatesh Kudtarkar
caa6a90b27
Bug 1799: Fix mutate policy defaults and Fix endless look of auto-gen rules. ( #1839 )
...
* Fix Dev setup
* Mutate policy defaults (1799)
* fix look for exclude ResourceDescription
* fix condition
* reuse code
Co-authored-by: vyankatesh <vyankatesh@neualto.com>
2021-04-29 09:51:23 -07:00
Yashvardhan Kukreja
10c714d5ba
feat: [preconditions, conditions] added backwards-compatible support for logical operators ( #1604 )
...
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-03-01 20:31:06 -08:00
Shuting Zhao
edc89c7b50
fix unit test
...
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-02-22 17:22:34 -08:00
shuting
267be0815f
Bug fixes - policy validation, auto-generated rules, apiCall support in mutate and generate ( #1629 )
...
* Fix invalid policy reports generated for blocked resource
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix 1464 - copy context and preconditions to auto-gen rules
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix 1628 - add policy validations
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix 1593 - support apiCall in mutate and generate
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
* fix test
Signed-off-by: Shuting Zhao <shutting06@gmail.com>
2021-02-22 12:08:26 -08:00
Yashvardhan Kukreja
478f32b8b4
fix: allowed templatised values to be exempted from validation checks ( #1599 )
...
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-02-16 13:06:07 -08:00
Yashvardhan Kukreja
03c77e4145
feat: validation 'value' field under 'deny.conditions' in a rule object ( #1510 )
...
Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>
2021-02-01 13:27:16 -08:00
shuting
52d091c5a3
Improve / clean up code ( #1444 )
...
* Remove lock embedded in CRD controller, use concurrent map to store shcemas
* delete rcr info from data store
* skip policy validation on status update
* - remove status check in policy mutation; - fix test
* Remove fqdncn flag
* add flag profiling port
* skip policy mutation & validation on status update
* sync policy status every minute
* update log messages
2021-01-06 16:32:02 -08:00
Jim Bugwadia
7f5c19332a
update name
2020-10-14 18:30:18 -07:00
Shuting Zhao
cdc5190c56
update nirmata/kyverno to kyverno/kyverno
2020-10-07 11:12:31 -07:00
shravan
6b1498b770
744 fixing policy validation and removing allRequests field
2020-05-06 19:46:32 +05:30
shravan
1b2868620e
744 fixing tests and making sure policy with variables that are not request.object are not allowed in background mode
2020-05-06 00:29:40 +05:30
shravan
0a65a66cc0
823 tested prototype
2020-04-27 15:05:10 +05:30
shravan
dd0f3d140e
753 resolving merge conflicts
2020-04-04 15:55:19 +05:30
shravan
fde5e5490f
753 testcase and fixes
2020-04-04 14:49:50 +05:30
shravan
0b2aa90444
753 new req save commit
2020-04-04 12:46:51 +05:30
shravan
20b161a270
765 resolved merge conflicts
2020-03-29 09:09:26 +05:30
shravan
91223deae2
754 resolved merge conflicts
2020-03-28 16:43:19 +05:30
shravan
b5af456f64
Revert "754 merge conflicts"
...
This reverts commit 39f75db435
2020-03-28 16:36:19 +05:30
shravan
39f75db435
754 merge conflicts
2020-03-28 16:30:18 +05:30
shravan
6efe0252a3
765 save commit
2020-03-27 19:06:06 +05:30
shravan
66c97ef3ba
754 fixing tests
2020-03-24 23:18:46 +05:30
shravan
80cda4668b
753 dummy commit
2020-03-24 08:50:07 +05:30
shravan
93205ecbbf
753 dummy commit
2020-03-24 08:45:44 +05:30
shravan
fac7a15d7d
753 prototype changes
2020-03-20 20:23:34 +05:30
shivkumar dudhani
e6e5bbb603
Merge branch 'master' into access_check
2020-03-17 17:23:18 -07:00
shivkumar dudhani
b1063a95e1
refactor & validate operations for generate rules in PolicyValidation
2020-03-11 18:14:23 -07:00
shravan
39ac8391c6
658 prototype with testcases
2020-02-26 16:08:56 +05:30
shivkumar dudhani
2cd4884b62
Merge branch 'master' into 671_cleanUp_generate
2020-02-14 12:06:01 -08:00
shravan
1f0582baf3
Merge branch 'master' into 522_validate_policy_resource_data
2020-02-09 21:25:49 +05:30
shravan
e1b9a13590
resolving merge conflicts
2020-01-25 14:55:36 +05:30
shravan
78cae242c5
522 restructured files
2020-01-25 14:53:12 +05:30
