Anushka Mittal
eb72b04d2c
change metrics default to stable defaults ( #10459 )
...
* change metrics default to stable defaults
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* make codegen-helm-all
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* make codegen-manifest-all
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
* fix: chart testing lint error
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
---------
Signed-off-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: anushkamittal20 <anumittal4641@gmail.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-08-30 11:10:07 +00:00
Mariam Fahmy
bde90340a6
chore: remove v1alpha1 of VAPs and use v1beta1 ( #10955 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-08-29 15:31:25 +00:00
Sean Liao
d0b4800785
explicit protocol selection with appProtocol ( #10864 )
...
* explicit protocol selection with appProtocol
Signed-off-by: Sean Liao <sean+git@liao.dev>
* explicit protocol selection with appProtocol
Signed-off-by: Sean Liao <sean+git@liao.dev>
---------
Signed-off-by: Sean Liao <sean+git@liao.dev>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-28 23:37:43 +00:00
Charles-Edouard Brétéché
ad4f0ab038
feat: bump controller gen package ( #10927 )
...
* feat: bump controller gen package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix chainsaw test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* bump annotation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-28 14:23:19 +08:00
Mariam Fahmy
2140a0239b
chore: rename validationFailureAction to failureAction under the rule ( #10893 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2024-08-27 20:07:57 +00:00
Khaled Emara
aceb7d5068
feat(gctx): retry logic ( #10796 )
...
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
2024-08-21 19:32:58 +00:00
Jim Bugwadia
f06399200c
remove wildcard permissions ( #10785 )
...
* remove wildcard permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update codegen
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* codegen
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix background controller perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* remove secrets perm
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update tests
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix reports-controller role
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* add wildcard check and limit generate policy checks based on `synchronize`
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update manifest
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix wildcard check
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* update default QPS and burst for better performance and to prevent test failure
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix perms
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix test permissions
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix merge issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix merge issues
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-08-20 11:55:32 +03:00
shuting
bd71af3291
feat: support foreach
for generate.data
( #10875 )
...
* chore: refactor
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add foreach for generate.daya to api
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: refactor generator
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update rule validation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update rule validation -2
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: support foreach.data
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: policy validation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: context variables
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add a chainsaw test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: sync on policy deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: enable new chainsaw tests in CI
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update code-gen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: validate targets scope for ns-policies
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: add missing files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: remove unreasonable test
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update install.yaml
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-08-19 06:55:19 +00:00
Vishal Choudhary
06ffd1c961
feat: add support for sigstore bundle verification ( #10567 )
...
* feat: add support for sigstore bundle verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: missed change
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: another linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add size check in layer
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-16 11:36:48 +00:00
Vishal Choudhary
f69ffe12ec
feat: add full regexp support to cosign ( #10815 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-08-16 07:03:59 +00:00
Garry O'Donnell
5a60836279
feat: add updateRequestThreshold config option to kyverno helm chart ( #10739 )
...
Signed-off-by: Garry O'Donnell <garry.o'donnell@diamond.ac.uk>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-08-15 15:40:57 +00:00
Khaled Emara
95bf469fd5
fix(codegen): missing crd version ( #10852 )
...
Signed-off-by: Khaled Emara <khaled.emara@nirmata.com>
2024-08-14 16:52:22 +00:00
Mohd Kamaal
90d4a961b6
Updated application logic to treat an empty 'group' string as the core API group for GlobalContextEntry ( #10572 )
...
* Updated application logic to treat an empty 'group' string as the core API group for GlobalContextEntry
Signed-off-by: Mohdcode <mohdkamaal2019@gmail.com>
* Updated application logic to treat an empty 'group' string as the core API group for GlobalContextEntry
Signed-off-by: Mohdcode <mohdkamaal2019@gmail.com>
* Updated application logic to treat an empty 'group' string as the core API group for GlobalContextEntry
Signed-off-by: Mohdcode <mohdkamaal2019@gmail.com>
* Update global_context_entry_types.go
Signed-off-by: Mohd Kamaal <102820439+Mohdcode@users.noreply.github.com>
---------
Signed-off-by: Mohdcode <mohdkamaal2019@gmail.com>
Signed-off-by: Mohd Kamaal <102820439+Mohdcode@users.noreply.github.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-08-14 08:43:51 +00:00
Pradeep Lakshmi Narasimha
bbed507114
fix: Reconfigured metric kyverno_policy_results_total to kyverno_policy_results in grafana dashboard config #1325 ( #10832 )
...
Signed-off-by: Pradeep Lakshmi Narasimha <pradeep.vaishnav4@gmail.com>
2024-08-13 18:40:03 +00:00
shuting
481798c836
refactor: update updaterequest to be created for each policy ( #10793 )
...
* chore: remove v1beta1 updaterequest definitions
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update UR to map a policy instead a rule; adapt UR mapping changes for admission review
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update code-gen
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: remove unused function
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add missing files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add missing files
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update ur in policy controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: adapt ur changes in the background controller
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: more linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: modify mapping relationship for deletion events
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: remedy missing target for policy application
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: fetching logic for triggers
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: clean up targets upon policy deletion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* merge main
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* merge main
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: adds delay before assertion
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update docs
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: wrong yaml format
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: update error handling logic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable more debug info
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable debug log
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable debug log
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix(attempt): enable debug log
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: makefile to update ur crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: generate existing
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: skip empty ur generation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: update install.yaml
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-08-13 17:14:06 +00:00
Mariam Fahmy
c796bb765c
fix: return policies with either audit or enforce rules from the cache ( #10667 )
...
* fix: return policies with either audit or enforce rules from the cache
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: introduce validationFailureAction under verifyImage rules
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add chainsaw tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-08-06 18:24:28 +00:00
Steven Kriegler
75fb7e1d1a
Remove cleanup cronjobs for updaterequests and ephemeralreports ( #10760 )
...
* Remove cleanup cronjobs for updaterequests and ephemeralreports
Signed-off-by: justusbunsi <61625851+justusbunsi@users.noreply.github.com>
* Cleanup Chart readme
Signed-off-by: justusbunsi <61625851+justusbunsi@users.noreply.github.com>
* Run `make codegen-manifest-all`
Signed-off-by: justusbunsi <61625851+justusbunsi@users.noreply.github.com>
---------
Signed-off-by: justusbunsi <61625851+justusbunsi@users.noreply.github.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>
2024-08-06 07:41:04 +00:00
Charles-Edouard Brétéché
fc694bc24c
feat: add kyverno json support to validation rule ( #10763 )
...
* feat: add kyverno json support to validation rule
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* v2beta1
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* validation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* engine handler
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* bindings
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* context functions
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* better bindings
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-08-02 08:24:30 +00:00
Laurent Lavaud
04f4fc9a89
fix(helm): remove namespace from RoleBinding/roleRef field ( #10685 )
...
- namespace is not a valid parameter for a RoleBinding/roleRef field
Signed-off-by: Laurent Lavaud <laurent.lavaud@mirakl.com>
2024-07-19 11:56:11 +00:00
shuting
90b24c70e5
disable up cleanup crobjob ( #10678 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-07-18 11:06:47 +00:00
Charles-Edouard Brétéché
56e58d684d
feat: remove reports chunking ( #10597 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-07-04 08:10:16 +00:00
Charles-Edouard Brétéché
fed71ffaf6
feat: make reports breaker threshold configurable ( #10596 )
...
* feat: make reports breaker threshold configurable
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* lower default threshold
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* release notes
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-07-03 14:44:28 +00:00
Mariam Fahmy
ff88c4c39a
feat: migrate validationFailureAction and validationFailureActionOverrides ( #10528 )
...
* feat: migrate validationFailureAction and validationFailureActionOverrides under validate rule
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add unit tests
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-06-26 09:13:02 +02:00
Charles-Edouard Brétéché
28db48573a
feat: remove old reports from helm chart and disable cleanup jobs by default ( #10533 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-25 13:34:26 +00:00
Mariam Fahmy
abe2a2310b
feat: migrate webhookTimeoutSeconds and failurePolicy ( #10515 )
...
* feat: migrate webhookTimeoutSeconds and failurePolicy
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* fix lint issue
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-06-20 13:04:37 +00:00
Charles-Edouard Brétéché
b36a2ecdcc
feat: bump update request api version ( #10508 )
...
* feat: bump update request api version
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* use v2
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix linter
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-20 09:44:43 +00:00
Charles-Edouard Brétéché
a5254f7344
feat: remove old intermediate reports types ( #10504 )
...
* feat: remove old ephemeral reports types
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* helm
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-19 19:54:43 +00:00
Mariam Fahmy
9285006f7a
feat: add mutateExistingOnPolicyUpdate field under the mutate rule ( #10461 )
...
* fix
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
* feat: add mutateExistingOnPolicyUpdate field under the mutate rule
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
---------
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-06-19 09:29:19 +00:00
Charles-Edouard Brétéché
6e1def1004
feat: remove v1alpha2 group/version ( #10500 )
...
* feat: remove v1alpha2 group
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-19 08:08:15 +00:00
Vishal Choudhary
334594c128
feat: add support for cosign experimental OCI 1.1 signatures ( #10228 )
...
* feat: add support for cosign experimental OCI 1.1 signatures
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove unrelated changes
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: requested changes
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-18 23:03:53 +00:00
Andreas Kappler
386f39890e
chore: bump bitnami/kubectl to 1.30.2 ( #10496 )
...
Signed-off-by: Andreas Kappler <github@andreaskappler.de>
Co-authored-by: shuting <shuting@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-18 21:49:42 +00:00
Charles-Edouard Brétéché
7f57b9618a
feat: cleanup v2alpha1 kyverno api ( #10457 )
...
* feat: cleanup v2alpha1 kyverno api
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: webhook
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-06-14 09:39:36 +00:00
Mariam Fahmy
846439b13e
feat: add generateExisting field under the generate rule ( #10441 )
...
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2024-06-13 13:41:46 +00:00
shuting
fe8c429e78
fix: avoid creating duplicate urs for background policies ( #10431 )
...
* feat: add generator abstraction
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: replace urgenerator
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: ko build
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: load threshold from kyverno configmap
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add metadata client to get ur count
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add helm option to preserve configmap settings during upgrade
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add helm option to preserve configmap settings during upgrade 2
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: rename imports
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen manifests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: handle nil value
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter issue
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update threshold to 1000
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: avoid duplicate URs creation
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: revert false changes
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: simplify background applications
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-06-12 15:23:53 +00:00
shuting
9e5c297dcf
feat: add a circuit breaker for updaterequests ( #10382 )
...
* feat: add generator abstraction
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: replace urgenerator
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: ko build
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: load threshold from kyverno configmap
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add metadata client to get ur count
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add helm option to preserve configmap settings during upgrade
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* feat: add helm option to preserve configmap settings during upgrade 2
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: rename imports
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update codegen manifests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: handle nil value
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: linter issue
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update threshold to 1000
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-06-11 08:54:51 +00:00
Linda Ārende
b9db2c176d
fix: indendation in priority configuration template ( #10423 )
...
Fixes #10372
Signed-off-by: Linda Ārende <64084638+LindaArende@users.noreply.github.com>
2024-06-11 07:43:21 +00:00
mahdi alizadeh
12a2ba34b2
Add global tolerations ( #10368 )
...
Signed-off-by: alizademhdi <alizademhdi@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-05 08:59:45 +00:00
shuting
5260b4f7bc
chore: bump k8s libs to 0.30 ( #10285 )
...
* chore: bump k8s libs to 0.30
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: bump kubectl-validate
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix tests
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix panic
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: fix linter
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: bump k8s
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix sum
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* codegen
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: indent
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: bump deps
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2024-06-04 15:09:44 +08:00
Thibaut Vanderhaegen
61969c5225
feat: ability to add custom policies in values file ( #10320 )
...
* Ability to add custom policies in values file
Signed-off-by: Thibaut Vanderhaegen <thibaut.vanderhaegen@linkurio.us>
Co-authored-by: Chip Zoller <chipzoller@gmail.com>
Co-authored-by: treydock <treydock@gmail.com>
2024-05-29 16:24:36 +00:00
shuting
022620ef43
feat: add cleanup cronjobs for (cluster)ephemeralreports ( #10325 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-05-29 12:19:57 +00:00
shuting
084336c5f5
feat: add a cleanup cronjob to delete urs ( #10249 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-05-29 10:23:54 +00:00
Vishal Choudhary
386f969f45
chore: bump tools and add kubernetes v1.30 to conformance ( #10300 )
...
* chore: bump tools and add kubernetes v1.30 to conformance
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* chore: codegen and version fixes
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-05-24 07:37:49 +00:00
Nicolas Lamirault
6bd52a28fb
feat(helm): GrafanaDashboard configuration ( #10254 )
...
* feat(helm): GrafanaDashboard configuration
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
* feat(helm): documentation
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
---------
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
2024-05-20 23:38:47 +08:00
Victor Boissiere
70eb981539
feat: add cronjob ttl support ( #10083 )
...
* feat: add cronjob ttl support
Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>
* fix: add artifacthub changes
Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>
* fix: run make codegen-helm-all
Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>
---------
Signed-off-by: Victor Boissiere <victor.boissiere@qonto.com>
2024-05-07 07:06:52 +00:00
treydock
87ef6f6f9b
Ensure CA certificate ConfigMaps get defined ( #10156 )
...
Fixes #10141
Signed-off-by: Trey Dockendorf <tdockendorf@osc.edu>
2024-05-02 07:33:13 +00:00
Franco Hielpos
87b8fa98b5
feat: update flowcontrol API version to v1 ( #10061 )
...
Signed-off-by: Franco Hielpos <franco@giantswarm.io>
2024-04-24 15:59:14 +00:00
shuting
0257f060bf
chore(deps): bump k8s.io/apimachinery from 0.29.4 to 0.30.0 ( #10087 )
...
* chore: bump apimachinary 0.30.0
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2024-04-24 11:37:59 +05:30
André Bauer
693010563f
[kyverno helm chart] make webhook pod annotations configurable ( #9875 )
...
* make webhook pod annotations configurable
Signed-off-by: André Bauer <andre.bauer@staffbase.com>
* run make codegen-helm-all
Signed-off-by: André Bauer <andre.bauer@staffbase.com>
---------
Signed-off-by: André Bauer <andre.bauer@staffbase.com>
Co-authored-by: shuting <shuting@nirmata.com>
2024-04-18 09:31:29 +00:00
Vishal Choudhary
83f2846572
feat: add TSA cert chain support in cosign ( #9961 )
...
* feat: add TSA cert chain support in cosign
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add chainsaw test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add unit test
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: unit tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Jim Bugwadia <jim@nirmata.com>
2024-03-30 20:50:07 +00:00
Vishal Choudhary
1a1954002f
fix: add rekor opts to cosign certificate verification and make rekor url optional ( #9957 )
...
* fix: add rekor opts to cosign certificate verification and make rekor url optional
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: linter
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
2024-03-28 18:17:24 -07:00