* update roles and rolebindings
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* revert label and fix perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* restrict role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix whitespace
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix tests and roles
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove ingress extensions/v1beta1
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix chart
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* tighten and clarify Kyverno roles and permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fake commit to trigger workflows
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* revert tests and update test role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add newlines
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove update role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* make fmt
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove invalid param
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* cleanup roles in Helm templates
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove `mutate` cluster role binding
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* added sample test
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* case: when creating the new namespace without the label, there should not have any generated resource
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* case: when adding the matched label to the namespace, the target resource should be generated
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* removing comments
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* trying to check updated network policy
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* case: when synchronize flag is set to true in the policy, one cannot delete the generated resource
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* trying to check updated generate policy
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* case: change synchronize to false in the policy, the label in generated resource should be updated to policy.kyverno.io/synchronize: disable
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* case: when changing the content in generate.data, the change should be synced to the generated resource
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added comments
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* case: with synchronize==false, one should be able to delete the generated resource
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* handling error
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added retrying
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* minor e2e fixes
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* e2e fixes
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added logs of mutate error
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* printing configmap
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* printing configmap using BY
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* removing print statements
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* print configmap name
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* printing complete configmap
Signed-off-by: NoSkillGirl <singhpooja240393@gmail.com>
* added api templates
* E2E test for generate roles, rolebindings, clusterrole and clusterrolebindings
* table driven e2e tests
* table driven e2e tests and go fmt
* removed unwanted vars
* increased sleep time
* removed role generation clone
* increated sleep time
* added rolebinding clone and retry mechanism for get resources
* modified test for clone
* added namespace to role
* added namespace variable
* added git actions job
* changed build name
* removed docker login
* added role verbs
* removed github actions job and rbac file
* added clusterrole test with clone
* fixed travis issue
